last executing test programs: 3.975127545s ago: executing program 3 (id=6946): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x480140) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x4052, r0, 0x1000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000ba44ee27c5369ade121c81900fddf817f8e727836ef9f7eb53913fdf0ca9bb0271f04e4cf57e89cc6adac85dd0f64271054b60c9d80300000000000000f33bb4fdce4f6624b691abce304dd0209452318498e8e155c4c1331afdb9d56ed4918c16ada1f1adc8969dc9c8503a95e67b5237d96e3f39db5fa4315ded545c46a62785f49f37e55c071141d98792a4036769ae15f39bb3e9f52c9e4183f5b7d119c750a98ab946ebccb88f9d37f13912ba2acd94bab225eb23278a96fa25d9b14497", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000022c0)='./file2\x00', 0x40000, 0x36) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000007c0)={[{@errors_remount}, {@noload}, {@noinit_itable}, {@noquota}, {@noblock_validity}, {@noquota}, {@mblk_io_submit}, {@acl}, {@resgid}, {@nolazytime}], [], 0x3d}, 0x68, 0x51c, &(0x7f0000000200)="$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") r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast1, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000003ff00000000480000000000000029000000390000003b06020400000000fc010000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001a8c798f71193196028599ef2354b7c78337c6798f72d599ab8f26465708a3fcda4aaf6ebd04f349d39dbca98b07fb207f5772a66b3514c826db84860d14e3273d3780c8030f1655e37b8cb951283e971bb49cd7f97c5948c04a78a586fdcb502f04a1b216ed2efa86d785f2163f068dad3"], 0x60}}], 0x1, 0x80) 3.250508791s ago: executing program 2 (id=6951): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x480140) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000000, 0x4052, r0, 0x1000) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000ba44ee27c5369ade121c81900fddf817f8e727836ef9f7eb53913fdf0ca9bb0271f04e4cf57e89cc6adac85dd0f64271054b60c9d80300000000000000f33bb4fdce4f6624b691abce304dd0209452318498e8e155c4c1331afdb9d56ed4918c16ada1f1adc8969dc9c8503a95e67b5237d96e3f39db5fa4315ded545c46a62785f49f37e55c071141d98792a4036769ae15f39bb3e9f52c9e4183f5b7d119c750a98ab946ebccb88f9d37f13912ba2acd94bab225eb23278a96fa25d9b14497", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800877b30020948e10000000000000000000000000000181100002dd00eee01365e0ae10662ee4882d8ee123b560bf60a2b30be9c0c870cdb63950b99b88356794691607cb84a2425b9fe52ddfedaf9efb0abea2ac2d118d1", @ANYRES32=r1, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff76) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000022c0)='./file2\x00', 0x40000, 0x36) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000007c0)={[{@errors_remount}, {@noload}, {@noinit_itable}, {@noquota}, {@noblock_validity}, {@noquota}, {@mblk_io_submit}, {@acl}, {@resgid}, {@nolazytime}], [], 0x3d}, 0x68, 0x51c, &(0x7f0000000200)="$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") r8 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r8, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x1, @mcast1, 0x40}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000000003ff00000000480000000000000029000000390000003b06020400000000fc010000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001a8c798f71193196028599ef2354b7c78337c6798f72d599ab8f26465708a3fcda4aaf6ebd04f349d39dbca98b07fb207f5772a66b3514c826db84860d14e3273d3780c8030f1655e37b8cb951283e971bb49cd7f97c5948c04a78a586fdcb502f04a1b216ed2efa86d785f2163f068dad3"], 0x60}}], 0x1, 0x80) 3.04753593s ago: executing program 3 (id=6952): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000000080000020000003c30000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) 2.322522387s ago: executing program 2 (id=6956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x42}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000df4dc1d3a67d9548e46f60a6950000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r2, 0x0, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="641d9f7afc8c7570feddb750c68545ef1f4020641a17dcfc72c305e8a0d11b5959f9a0388e3c0b34c933acc349db535badce5176f0b74f309e695523227d45f6b4c438f1d290b3b5c075a693007066b50b627d", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) socket(0x10, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) 2.228135305s ago: executing program 4 (id=6957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x42}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000df4dc1d3a67d9548e46f60a6950000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r2, 0x0, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="641d9f7afc8c7570feddb750c68545ef1f4020641a17dcfc72c305e8a0d11b5959f9a0388e3c0b34c933acc349db535badce5176f0b74f309e695523227d45f6b4c438f1d290b3b5c075a693007066b50b627d", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 2.226826525s ago: executing program 2 (id=6958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0b0000000700973984a878410de2000001000000f131ba", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="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", @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000270001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x229a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x9}, {0x0, 0x8, 0x8b, 0x3de}, {0xd, 0x39, 0x1, 0x3}, {0x1, 0x1, 0x7, 0x7fff}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 2.192268888s ago: executing program 3 (id=6959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[], 0x740}, 0x1, 0x0, 0x0, 0x22040054}, 0x0) 2.141018433s ago: executing program 3 (id=6961): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000a9e7e6fbf7ea6615232b165b13ebb86000000000000000000000000000020e0000000000000950000e3b2c57500eeeded4472c8130c08"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$selinux_avc_cache_threshold(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000700), 0x77, 0x101903) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000740)=ANY=[@ANYRESOCT]) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x0, 0x73, 0x0, 0x0, 0x0, 0x0}) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000005c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000712c1d4d57e40e8d1e0000e69c85346f21defb8da1480000002ebdff0a34c5b83a855977dca9ba8ddf524b5812e8a55fcb992b672b6c106d53e2d538f0ba1a3adaf2f2bb4b1e012db69f13bb0859582d5fa200903279cda9f44a71003ba318", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200)={0x6, 0x201, 0x800000, 0xc}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x1e9, 0x30}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) request_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f00000003c0)='!\x00', 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r4) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x4e20, @private=0xa010105}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4000010, 0x2}, 0x0, 0x0, 0x6, 0xbf, 0x0, 0x7ff, 0x10, 0x8001}}], 0x58}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.125938515s ago: executing program 4 (id=6962): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) 2.022705934s ago: executing program 4 (id=6963): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000000080000020000003c30000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) 1.339250457s ago: executing program 2 (id=6970): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="00000000000000000000080000020000003c30000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r7, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r1, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) 1.263829714s ago: executing program 0 (id=6972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x42}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000df4dc1d3a67d9548e46f60a6950000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r2, 0x0, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="641d9f7afc8c7570feddb750c68545ef1f4020641a17dcfc72c305e8a0d11b5959f9a0388e3c0b34c933acc349db535badce5176f0b74f309e695523227d45f6b4c438f1d290b3b5c075a693007066b50b627d", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 1.149244514s ago: executing program 4 (id=6973): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000022689b573f86860afb5619fc1a11bca3a07d72452fbbf4736c08ef4cfa56b48e5dbf682e55d1046a49507e726578648eddbe40fdcc9a0fe7a2cb3ef9a0a769826fa94b4a470948d68f011b4a0a626d099fcd780f34f2b0ca49cbab05b8ba1c04a940b1ff6d6508c287e98749343a29163f4a0ac2d2ecca7764e0b883eecde71ff1b0feaeca4f69cf9663068201a6c23711defe29dc02e53cbaf9303f3008c4fe389157181e5d48ad6997e15ae7bd4b1e741406b30804c6a7e098620c9296f5d70bac9b682db0c84033aac1f547cb0e0f44772cd438b61842468d6e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) io_uring_setup(0x1b91, &(0x7f0000000000)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0x0, 0xfff7fffc, 0x0, 0xffffffff, 0x0, "fb00"}) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f77fff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x0, "1f00000800"}) r7 = dup3(r6, r5, 0x0) read$rfkill(r7, &(0x7f00000002c0), 0x8) read$watch_queue(r7, &(0x7f0000000e00)=""/4096, 0x1000) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000180)) ioctl$TIOCSSOFTCAR(r2, 0x545c, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000640)="$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") pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r8, &(0x7f00000025c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x3201004, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) 1.099588309s ago: executing program 0 (id=6974): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[@ANYBLOB="400700006800010000000000000000000a000000000000000600070003000000", @ANYRES32=r1, @ANYBLOB="18070880"], 0x740}, 0x1, 0x0, 0x0, 0x22040054}, 0x0) 1.026040006s ago: executing program 1 (id=6976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) iopl(0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x68080, 0x0) r6 = syz_io_uring_setup(0x1892, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xb, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r5, @ANYBLOB="2918b0f2d4b55d49d89b9f89ac4520a2ebd14333f8a45a22f6690567e081ded4e530fe7011730ce9ba8ce0b87be3ad939d97b554a1a6ae82aa5ddd80f868835703bc70bfec18a50738204133495d9ed9a5933c02f893978c057811721be7fa694d1add5aafae0987356af8b587a8520cad00a66f75ec0fb8586860d3ba4d131fe909885a98bb5e7b7c8993c594c2d77d3f8394d82d8c98a72fa70848849a1f731576c5482d8c75710a2c12da0ede6f86f568"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x210) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_read_part_table(0x5ed, &(0x7f0000000600)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000078000000000011907800000000ffffffff00004e200064907802000000000000000000000009f0c6564b6ac6413304000000d9f8f22f81ae81c2bd7edd9aeaf6fd91c2522760326eacce5de87bf40be86b3ebbb957fcc68dd1b5242bdc6466eba8cab8d7b205fef0e9b077b6c6639938f9db7c621b"], 0x0) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001c80)={0x2, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0xf00}], 0x0}, 0x20) 1.025382425s ago: executing program 0 (id=6977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYBLOB="0004000000000000000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000002c0)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r1, @ANYRES8, @ANYRESHEX=r0, @ANYBLOB="bcad840ae7df7553", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES64=r0, @ANYRES64=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='jbd2_handle_stats\x00', r10, 0x0, 0x4d}, 0x18) ioctl$USBDEVFS_GETDRIVER(r9, 0x8008550e, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg(r7, &(0x7f00000001c0)={&(0x7f0000000100)=@xdp={0x2c, 0x4, r11, 0x2f}, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="f00000000000000000000000b0e30000899ac19e2a449d1ef5371c185cf61518d356c182f3cb61b7d75f5132365d323c45ff64cf1268d2b90a4b0f1fe89838d5c7f91cd1a02393824e506606513f11b9df061fbaafe6ce0c1ccc96ec9a3c7725982407b122ae4e932699fdff0000008a87702658e4b01149e8aa4655effa6e95b5e9c2c94fde58c28532148783b0391c4d874e190e4b0a4ffe0cf4d247425cd0dd80d6406290c941415963f8a336b0f6677d97b6"], 0x108}, 0x404c000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1f, 0x80000, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x46, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018400000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000c50000000000000018400000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000851000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000000000000000000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000851000000000000095000000000000001840000000000000000000000000000095000000000000008aa85ca45e8f3f44acae90ea6d1e316e2e7af2389b672387d81faecfb08ac5598e911cbb22f379f6a28f2b8f78d0822ef1aa933c4433a126d2f21bc7d437117eccd06e8712e0439d8a477c41256121f6e77e019d0905e792834d8a6ef8bc9c31193d647cf281d2b7416b92af02b69856cbcacbb708aa8d18bc5fabb2ca2427304a80b3ccac785671ba8240859bba45515d726485af39bc"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r12 = syz_open_procfs(0x0, &(0x7f0000000280)='stack\x00') preadv2(r12, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/142, 0x8e}], 0x1, 0x9e2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8946, &(0x7f0000000900)={'ip_vti0\x00', @random="0a00e2fe0006"}) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r13) 930.859634ms ago: executing program 3 (id=6978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x100c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00af880083001f00"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) 823.611234ms ago: executing program 1 (id=6979): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x5, &(0x7f0000000080)=[{0x9, 0x6, 0x0, 0x4ad}, {0xa, 0x1, 0x7c, 0x401}, {0x280, 0x1, 0x3, 0x8}, {0x1, 0x1, 0x1, 0x7}, {0x2, 0x3, 0x8, 0x1}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffde) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r4, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000080)={0x335}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000740)={0xfffffffe, 0xf95ca27d, 0x0, 'queue0\x00', 0x7}) tkill(r3, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x3, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x404, &(0x7f0000000800)={[{@grpquota}, {@stripe={'stripe', 0x3d, 0xca}}, {@journal_dev}, {@block_validity}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat$ipvs(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 820.945154ms ago: executing program 3 (id=6980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14010000270001"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x229a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x9}, {0x0, 0x8, 0x8b, 0x3de}, {0xd, 0x39, 0x1, 0x3}, {0x1, 0x1, 0x7, 0x7fff}]}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r6}, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) 690.679916ms ago: executing program 0 (id=6981): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000d2e6000000000000000018110000d20a0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0xe) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd", 0x2}], 0x1, 0x0, 0x0) 580.798186ms ago: executing program 0 (id=6982): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r3 = syz_open_pts(r2, 0x0) read(r3, 0x0, 0x2006) close_range(r1, 0xffffffffffffffff, 0x0) 477.522046ms ago: executing program 2 (id=6983): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) memfd_secret(0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) setxattr$security_selinux(0x0, 0x0, &(0x7f0000000100)='system_u:object_r:initctl_t:s0\x00', 0x1f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000001010000ff7f"], 0x48) 392.626243ms ago: executing program 0 (id=6984): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="190000000400000000000008b100707e060000003c8cd4512c74fe471d6fc8561959f47f4ce21814ed0fe89652c463a962a6eead1572c92a06000000301d13206b12970b3e94bc0faac5801f4e4157ccab10f218fa110ed6ffb6160cd3e3933ae22a005efc6e2abebf4022c7a477539da9f3701157c05e14f1b8a02ad8ae22cbb826c0953c25a10865a9dbf1ce8d0d02efe0d5dc91bf61", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3aa4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x8080) syz_usb_disconnect(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r5, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 329.449469ms ago: executing program 1 (id=6985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x42}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000df4dc1d3a67d9548e46f60a6950000000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r5, r2, 0x0, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="641d9f7afc8c7570feddb750c68545ef1f4020641a17dcfc72c305e8a0d11b5959f9a0388e3c0b34c933acc349db535badce5176f0b74f309e695523227d45f6b4c438f1d290b3b5c075a693007066b50b627d", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r6}, &(0x7f0000000180), &(0x7f00000004c0)=r7}, 0x20) socket(0x10, 0x803, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) 282.465384ms ago: executing program 2 (id=6986): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x2e020000) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000003000000850000008600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r5, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0xa, @remote, 0x2}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r9, 0x2, 0x0, 0x0, 0xfffffffc}, 0x14) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fcntl$setlease(r0, 0x400, 0x1) 189.597672ms ago: executing program 1 (id=6987): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=ANY=[@ANYBLOB="400700006800010000000000000000000a000000000000000600070003000000", @ANYRES32=r1, @ANYBLOB="18070880"], 0x740}, 0x1, 0x0, 0x0, 0x22040054}, 0x0) 188.122262ms ago: executing program 4 (id=6988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x804810, &(0x7f0000000d40), 0x9, 0x61c, &(0x7f0000000700)="$eJzs3U1rXFUfAPD/nbwnz/MkDQ9qXWhAtAVt0qStFBG0CK5KqS8LwY1jk5ba6QtNRFMrTaFuBHHjQnDlwrrwO2hBcOUXcOHGlVSKSDdK0ZE7uTNOk7nJTMzMtJnfD8Y5556bOeea/HvOnDnnTgA9ayr9TyFid0RcSCIm68r6IyucWj3v9m+XT6SPJMrlV35N4vKVZKX+tZLseSwi0oI/xyP5LiIm+9bXu7h86UyxVFq4mOVnls5emFlcvrTv9NniqYVTC+fmnp47fOjgocOz++t+6uSLrV7frrr00WtvvTP+4bHXv/jsTjL75Y/Hkni+VpZeV6uvvZmpmIpypv54+v/18HZX1iV9tb+TfyRrD6z1QhsbREuqv7+BiHgwxqOv7rc5Hh+81NXGAW1VTqLWRwG9JhH/0KOq44Dqe/vm3gcPtnlUAnTCrSMRT9TifyAiqvHfvzo3GMOVuYHR28ld8zxJROzfhvrTOr7/9ti19BFtmocDGlu5OpTN26/t/5NKbE7EcCU3ertwV/wXsmnciWz+8OWNqxnPK5hak8/qH9rq9QDNW7kaEQ81Gv9vHv9vZM/p8Te3WH9O/AMAAAAAAABbcONIRDzV6PO/Qm39z2CD9T9jEXW757Zu88//Cje3oRqggVtHIp5tuP63UD1loi/L/beyHmAgOXm6tLA/Iv4XEXtjYCjNz9a/6Fd1Px0R+z6a/DSv/vr1f+kjrb+6FjBrx83+NauB5otLxW24dOh5t65GPNyfv/4n7f+TBv1/Gt8Xmqxj8vHrx/PKNo9/oF3Kn0fsadj/J7Vzko3vzzFTGQ/MVEcF6z3y3sdf59Uv/qF70v5/dOP4H0rq79ez2NrrD0bEgeX+cl75Vsf/g8mrfVG3E/Hd4tLSxdmIweTo+uNzrbUZ7ifDzZ/6fkRU4qEaL2n8731s4/m/2vi/Lg5Hsnt8NeOBv8Z+yivT/0P3pPE/v3H/P3F3/996Yu76xDd59R9vqv8/WOnT92ZHzP/BxpoN0G63EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuR4WI+E8khelaulCYno4Yi4j/x2ihdH5x6cmT598+N5+WVb7/v1D9pt/x1XxS/f7/ibr83Jr8gYjYFRGf9I1U8tMnzpfmu33xAAAAAAAAAAAAAAAAAAAAcI8YW31at/8/9XNfV5sGdEJ/9izeoff0d7sBQNeIf+hd4h96V378/36nXNHR5gAd1Gz/X77S5oYAHbfF8b+PC2AH8P4fetVAc6cNt7sdQDfo/wEAAAAAYEfZ9eiNH5KIWHlmpPJIDWZltQ8GR7rVOqCdCnkFQ51tB9B51vBC77L0B3pXk4t/gR0sqaX+aLjZP3/1f9KeBgEAAAAAAAAAAAAA6+zZ3cT+f2BHyt3/D+x4G+z/b7Sxx+0CYAex/x96l9t8AdXBft43/dv/DwAAAAAAAAAAAAD3gOFLZ4ql0sLFxeWmE1daOfnfJ36JvKLnOtmM7UqsFO+JZtwPiYGIWFNUHl/9sz1TLL0WnW1PNWI6UddgB+vKSXTp3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCdvwMAAP//emUoLA==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x2a0, 0xf0, 0xffffffff, 0xf0, 0x2a0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private2, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180100007e289f2ed65794e18200040000000000ab000c10850000000f000000957db90040000000000000567f543d35d4077d2739ae5eb7e7b84abbc12d1af5bb121aa327d944536e7bde6024c9520b72b5090000000000007ffc0443bfda47795c6d67bca34dee6b3a0b0dcd8cb273f1b571ffe5f4580d05d76a77bc174f8a7ca6b04177ec124db19d7e74366302b480503d612a5c8b0f00660bf303594f8a173cfb4d26b3fa1b000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x404, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000001) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES64=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='tlb_flush\x00', r5}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000680)=""/202, 0xca}], 0x1, 0x1f3, 0x0) syz_clone(0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x3000) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff3d499e0f21ad283e2a2f6bf94d1be8ecaf32f1f603c4f9536cf25899d8e422a8dfb137110ce0372f58b74f3d093311c5faafd501713c4338515832e290fa369c79ed9c8f9567033ae3b65a9910e53e7226d2f95c4d86693e105738d6a40842f52a81b96487dae3acc580a0cd1b012d1ae69ab27224c981169f99ddc5216f4eeba3"], 0x8, 0x800) 187.427592ms ago: executing program 1 (id=6989): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x400}}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"}) r3 = syz_open_pts(r2, 0x0) read(r3, 0x0, 0x2006) close_range(r1, 0xffffffffffffffff, 0x0) 71.736153ms ago: executing program 1 (id=6990): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x100c, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00af880083001f00"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=6991): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) iopl(0x3) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffff9c, &(0x7f0000000040), 0x68080, 0x0) r6 = syz_io_uring_setup(0x1892, &(0x7f0000000940), &(0x7f00000009c0), &(0x7f00000003c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0xb, &(0x7f0000001cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095", @ANYRESHEX=r5, @ANYBLOB="2918b0f2d4b55d49d89b9f89ac4520a2ebd14333f8a45a22f6690567e081ded4e530fe7011730ce9ba8ce0b87be3ad939d97b554a1a6ae82aa5ddd80f868835703bc70bfec18a50738204133495d9ed9a5933c02f893978c057811721be7fa694d1add5aafae0987356af8b587a8520cad00a66f75ec0fb8586860d3ba4d131fe909885a98bb5e7b7c8993c594c2d77d3f8394d82d8c98a72fa70848849a1f731576c5482d8c75710a2c12da0ede6f86f568"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x210) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) syz_read_part_table(0x5ed, &(0x7f0000000600)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='kmem_cache_free\x00', r11}, 0x10) setsockopt$inet_udp_encap(r10, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000078000000000011907800000000ffffffff00004e200064907802000000000000000000000009f0c6564b6ac6413304000000d9f8f22f81ae81c2bd7edd9aeaf6fd91c2522760326eacce5de87bf40be86b3ebbb957fcc68dd1b5242bdc6466eba8cab8d7b205fef0e9b077b6c6639938f9db7c621b"], 0x0) ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001c80)={0x2, 0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000a40)=""/4096, 0x1000}, {0x0, 0xf00}], 0x0}, 0x20) kernel console output (not intermixed with test programs): Interface activated: batadv_slave_0 [ 302.897949][T24727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.908545][T24727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.918456][T24727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.928922][T24727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.938997][T24727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.949573][T24727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.959406][T24727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.969928][T24727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.018711][T24727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.037454][T24727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.046251][T24727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.055022][T24727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.063801][T24727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.670685][T25426] netlink: 'syz.1.5749': attribute type 10 has an invalid length. [ 303.719201][T25434] FAULT_INJECTION: forcing a failure. [ 303.719201][T25434] name failslab, interval 1, probability 0, space 0, times 0 [ 303.732051][T25434] CPU: 0 UID: 0 PID: 25434 Comm: syz.0.5753 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 303.742484][T25434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 303.752580][T25434] Call Trace: [ 303.755917][T25434] [ 303.758847][T25434] dump_stack_lvl+0xf2/0x150 [ 303.763544][T25434] dump_stack+0x15/0x20 [ 303.767785][T25434] should_fail_ex+0x223/0x230 [ 303.772483][T25434] ? __alloc_skb+0x10b/0x310 [ 303.777125][T25434] should_failslab+0x8f/0xb0 [ 303.781722][T25434] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 303.787607][T25434] __alloc_skb+0x10b/0x310 [ 303.792074][T25434] pfkey_sendmsg+0x10d/0x970 [ 303.796675][T25434] ? avc_has_perm+0xd4/0x160 [ 303.801321][T25434] ? selinux_socket_sendmsg+0x19c/0x1d0 [ 303.806925][T25434] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 303.812081][T25434] __sock_sendmsg+0x140/0x180 [ 303.816781][T25434] ____sys_sendmsg+0x312/0x410 [ 303.821639][T25434] __sys_sendmsg+0x1d9/0x270 [ 303.826319][T25434] __x64_sys_sendmsg+0x46/0x50 [ 303.831097][T25434] x64_sys_call+0x2689/0x2d60 [ 303.835783][T25434] do_syscall_64+0xc9/0x1c0 [ 303.840388][T25434] ? clear_bhb_loop+0x55/0xb0 [ 303.845115][T25434] ? clear_bhb_loop+0x55/0xb0 [ 303.849809][T25434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.855770][T25434] RIP: 0033:0x7f492736df39 [ 303.860283][T25434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.879931][T25434] RSP: 002b:00007f4925fe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.888417][T25434] RAX: ffffffffffffffda RBX: 00007f4927525f80 RCX: 00007f492736df39 [ 303.896391][T25434] RDX: 0000000000000080 RSI: 0000000020000380 RDI: 0000000000000003 [ 303.904364][T25434] RBP: 00007f4925fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 303.912339][T25434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.920314][T25434] R13: 0000000000000000 R14: 00007f4927525f80 R15: 00007ffe9294e0d8 [ 303.928295][T25434] [ 304.317860][T25464] __nla_validate_parse: 10 callbacks suppressed [ 304.317881][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 304.350737][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5763'. [ 304.359914][T25464] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5763'. [ 304.427008][T25466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5764'. [ 304.438792][T25475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5765'. [ 304.556155][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.598334][T25489] netlink: 'syz.1.5771': attribute type 10 has an invalid length. [ 304.662709][T25489] netlink: 'syz.1.5771': attribute type 10 has an invalid length. [ 304.680977][T25489] team0: Port device netdevsim1 removed [ 304.696862][T25489] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 304.803824][T25506] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 304.913046][T25511] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5777'. [ 305.178457][T25535] netlink: 'syz.3.5787': attribute type 10 has an invalid length. [ 305.190958][T25537] netlink: 'syz.4.5789': attribute type 10 has an invalid length. [ 305.638109][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5800'. [ 305.658205][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5800'. [ 305.819842][T25591] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 306.165460][T25615] FAULT_INJECTION: forcing a failure. [ 306.165460][T25615] name failslab, interval 1, probability 0, space 0, times 0 [ 306.178198][T25615] CPU: 0 UID: 0 PID: 25615 Comm: syz.3.5812 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 306.188628][T25615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 306.198704][T25615] Call Trace: [ 306.202006][T25615] [ 306.204956][T25615] dump_stack_lvl+0xf2/0x150 [ 306.209673][T25615] dump_stack+0x15/0x20 [ 306.213861][T25615] should_fail_ex+0x223/0x230 [ 306.218563][T25615] ? audit_log_d_path+0x96/0x250 [ 306.223512][T25615] should_failslab+0x8f/0xb0 [ 306.228134][T25615] __kmalloc_cache_noprof+0x4b/0x2a0 [ 306.233534][T25615] audit_log_d_path+0x96/0x250 [ 306.238348][T25615] ? get_file_rcu+0xeb/0x100 [ 306.243035][T25615] ? __rcu_read_unlock+0x4e/0x70 [ 306.248078][T25615] audit_log_d_path_exe+0x42/0x70 [ 306.253197][T25615] audit_log_task+0x155/0x180 [ 306.257938][T25615] audit_seccomp+0x68/0x130 [ 306.262443][T25615] __seccomp_filter+0x6fa/0x1180 [ 306.267487][T25615] ? proc_fail_nth_write+0x12a/0x150 [ 306.272902][T25615] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 306.278559][T25615] ? vfs_write+0x580/0x910 [ 306.283119][T25615] __secure_computing+0x9f/0x1c0 [ 306.288073][T25615] syscall_trace_enter+0xd1/0x1f0 [ 306.293192][T25615] do_syscall_64+0xaa/0x1c0 [ 306.297709][T25615] ? clear_bhb_loop+0x55/0xb0 [ 306.302393][T25615] ? clear_bhb_loop+0x55/0xb0 [ 306.307090][T25615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.313014][T25615] RIP: 0033:0x7f0c5b67df39 [ 306.317433][T25615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.337078][T25615] RSP: 002b:00007f0c5a2f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 306.345505][T25615] RAX: ffffffffffffffda RBX: 00007f0c5b835f80 RCX: 00007f0c5b67df39 [ 306.353478][T25615] RDX: 0000000000000000 RSI: 0000000020002000 RDI: 0000000020001000 [ 306.361460][T25615] RBP: 00007f0c5a2f7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.369432][T25615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.377492][T25615] R13: 0000000000000000 R14: 00007f0c5b835f80 R15: 00007ffc934fcb98 [ 306.385513][T25615] [ 306.388920][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 306.388934][ T29] audit: type=1326 audit(1727363454.869:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f0c5b67df39 code=0x7ffc0000 [ 306.435961][ T29] audit: type=1326 audit(1727363455.139:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0c5b67c97c code=0x7ffc0000 [ 306.459406][ T29] audit: type=1326 audit(1727363455.139:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c5b67ca1f code=0x7ffc0000 [ 306.482777][ T29] audit: type=1326 audit(1727363455.139:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0c5b67cbca code=0x7ffc0000 [ 306.506587][ T29] audit: type=1326 audit(1727363455.139:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5b67df39 code=0x7ffc0000 [ 306.530351][ T29] audit: type=1326 audit(1727363455.139:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25613 comm="syz.3.5812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5b67df39 code=0x7ffc0000 [ 306.560091][T25626] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 306.564876][ T29] audit: type=1326 audit(1727363455.259:9213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 306.591365][ T29] audit: type=1326 audit(1727363455.259:9214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="syz.1.5815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 306.614900][ T29] audit: type=1326 audit(1727363455.259:9215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 306.637988][ T29] audit: type=1326 audit(1727363455.259:9216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25622 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 306.640726][T25621] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 306.868905][T25644] block device autoloading is deprecated and will be removed. [ 306.936461][T25655] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 306.988271][T25515] coredump: 360(syz.1.5775): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 307.364044][T25702] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 307.391511][T25708] netlink: 'syz.3.5841': attribute type 10 has an invalid length. [ 307.437169][T25708] netlink: 'syz.3.5841': attribute type 10 has an invalid length. [ 307.477793][T25708] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 307.485191][T25708] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 307.498189][T25708] team0: Port device netdevsim1 removed [ 307.526088][T25708] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 307.540659][T25722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5846'. [ 307.597351][T25736] netlink: 'syz.1.5847': attribute type 10 has an invalid length. [ 307.620750][T25736] bond0: (slave netdevsim1): Releasing backup interface [ 307.639069][T25736] team0: Port device netdevsim1 added [ 307.665831][T25745] netlink: 'syz.1.5847': attribute type 10 has an invalid length. [ 307.716493][T25745] team0: Port device netdevsim1 removed [ 307.723126][T25757] FAULT_INJECTION: forcing a failure. [ 307.723126][T25757] name failslab, interval 1, probability 0, space 0, times 0 [ 307.733988][T25745] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 307.735888][T25757] CPU: 0 UID: 0 PID: 25757 Comm: syz.0.5851 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 307.755130][T25757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 307.765393][T25757] Call Trace: [ 307.768705][T25757] [ 307.771752][T25757] dump_stack_lvl+0xf2/0x150 [ 307.776437][T25757] dump_stack+0x15/0x20 [ 307.780644][T25757] should_fail_ex+0x223/0x230 [ 307.785375][T25757] ? audit_log_d_path+0x96/0x250 [ 307.790436][T25757] should_failslab+0x8f/0xb0 [ 307.795050][T25757] __kmalloc_cache_noprof+0x4b/0x2a0 [ 307.800397][T25757] audit_log_d_path+0x96/0x250 [ 307.805198][T25757] ? get_file_rcu+0xeb/0x100 [ 307.809863][T25757] ? __rcu_read_unlock+0x4e/0x70 [ 307.814848][T25757] audit_log_d_path_exe+0x42/0x70 [ 307.819900][T25757] audit_log_task+0x155/0x180 [ 307.824618][T25757] audit_seccomp+0x68/0x130 [ 307.829135][T25757] __seccomp_filter+0x6fa/0x1180 [ 307.834150][T25757] ? proc_fail_nth_write+0x12a/0x150 [ 307.839498][T25757] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 307.845142][T25757] ? vfs_write+0x580/0x910 [ 307.849574][T25757] __secure_computing+0x9f/0x1c0 [ 307.854534][T25757] syscall_trace_enter+0xd1/0x1f0 [ 307.859681][T25757] do_syscall_64+0xaa/0x1c0 [ 307.864213][T25757] ? clear_bhb_loop+0x55/0xb0 [ 307.868970][T25757] ? clear_bhb_loop+0x55/0xb0 [ 307.873677][T25757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.879661][T25757] RIP: 0033:0x7f492736df39 [ 307.884102][T25757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.903717][T25757] RSP: 002b:00007f4925fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 307.912146][T25757] RAX: ffffffffffffffda RBX: 00007f4927525f80 RCX: 00007f492736df39 [ 307.920190][T25757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000400 [ 307.928179][T25757] RBP: 00007f4925fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 307.936242][T25757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.944217][T25757] R13: 0000000000000000 R14: 00007f4927525f80 R15: 00007ffe9294e0d8 [ 307.952350][T25757] [ 308.313287][T25640] coredump: 1399(syz.3.5817): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 308.489030][T25835] block device autoloading is deprecated and will be removed. [ 308.621450][T25599] coredump: 28(syz.2.5802): written to core: VMAs: 31, size 91254784; core: 62112542 bytes, pos 91262976 [ 308.958206][T25855] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 309.058413][T25859] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 309.154432][T25873] netlink: 'syz.0.5880': attribute type 10 has an invalid length. [ 309.208509][T25873] team0: Port device netdevsim1 added [ 309.240864][T25873] netlink: 'syz.0.5880': attribute type 10 has an invalid length. [ 309.273757][T25873] team0: Port device netdevsim1 removed [ 309.285614][T25873] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 309.376304][T25882] serio: Serial port pts0 [ 309.506848][T25896] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 309.589934][T25907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5891'. [ 309.613843][T25913] netlink: 'syz.3.5894': attribute type 10 has an invalid length. [ 309.641934][T25913] bond0: (slave netdevsim1): Releasing backup interface [ 309.673013][T25913] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 309.680514][T25913] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 309.705008][T25915] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 309.713223][T25913] team0: Port device netdevsim1 added [ 309.731479][T25921] netlink: 'syz.3.5894': attribute type 10 has an invalid length. [ 309.814392][T25921] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 309.821728][T25921] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 309.878268][T25921] team0: Port device netdevsim1 removed [ 309.906974][T25921] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 309.970302][T25938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5904'. [ 310.066870][T25947] block device autoloading is deprecated and will be removed. [ 310.068689][T25949] netlink: 'syz.2.5908': attribute type 10 has an invalid length. [ 310.160911][T25949] team0: Port device netdevsim1 added [ 310.186718][T25960] netlink: 'syz.2.5908': attribute type 10 has an invalid length. [ 310.195414][T25957] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 310.239244][T25960] team0: Port device netdevsim1 removed [ 310.321862][T25960] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 310.487044][T25973] block device autoloading is deprecated and will be removed. [ 310.656699][T25990] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 310.815590][T25923] coredump: 391(syz.1.5895): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 311.076181][T26008] bond0: (slave netdevsim1): Releasing backup interface [ 311.124402][T26008] team0: Port device netdevsim1 added [ 311.141572][T26016] netlink: 1812 bytes leftover after parsing attributes in process `syz.4.5928'. [ 311.259378][T26017] team0: Port device netdevsim1 removed [ 311.267861][T26017] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 311.456968][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 311.456987][ T29] audit: type=1326 audit(1727363460.159:9323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.527408][ T29] audit: type=1326 audit(1727363460.159:9324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.551108][ T29] audit: type=1326 audit(1727363460.159:9325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.574637][ T29] audit: type=1326 audit(1727363460.159:9326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.589744][T25877] coredump: 462(syz.4.5875): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 311.598130][ T29] audit: type=1326 audit(1727363460.159:9327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.652052][T26043] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 311.652052][T26043] program syz.0.5937 not setting count and/or reply_len properly [ 311.675732][ T29] audit: type=1326 audit(1727363460.259:9328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26039 comm="syz.0.5936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.699442][ T29] audit: type=1400 audit(1727363460.349:9329): avc: denied { write } for pid=26042 comm="syz.0.5937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 311.756292][ T29] audit: type=1326 audit(1727363460.429:9330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26042 comm="syz.0.5937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.779903][ T29] audit: type=1326 audit(1727363460.429:9331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26042 comm="syz.0.5937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.803287][ T29] audit: type=1326 audit(1727363460.429:9332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26042 comm="syz.0.5937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 311.926473][T26052] syz.2.5939[26052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.926555][T26052] syz.2.5939[26052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 311.938112][T26052] syz.2.5939[26052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.393171][T26066] FAULT_INJECTION: forcing a failure. [ 312.393171][T26066] name failslab, interval 1, probability 0, space 0, times 0 [ 312.417469][T26066] CPU: 0 UID: 0 PID: 26066 Comm: syz.0.5943 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 312.427938][T26066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 312.437995][T26066] Call Trace: [ 312.441277][T26066] [ 312.444246][T26066] dump_stack_lvl+0xf2/0x150 [ 312.448907][T26066] dump_stack+0x15/0x20 [ 312.453133][T26066] should_fail_ex+0x223/0x230 [ 312.457839][T26066] ? audit_log_d_path+0x96/0x250 [ 312.462783][T26066] should_failslab+0x8f/0xb0 [ 312.467382][T26066] __kmalloc_cache_noprof+0x4b/0x2a0 [ 312.472782][T26066] audit_log_d_path+0x96/0x250 [ 312.477572][T26066] ? get_file_rcu+0xeb/0x100 [ 312.482270][T26066] ? __rcu_read_unlock+0x4e/0x70 [ 312.487290][T26066] audit_log_d_path_exe+0x42/0x70 [ 312.492336][T26066] audit_log_task+0x155/0x180 [ 312.497113][T26066] audit_seccomp+0x68/0x130 [ 312.501699][T26066] __seccomp_filter+0x6fa/0x1180 [ 312.506664][T26066] ? __perf_event_task_sched_out+0x111/0xfe0 [ 312.512802][T26066] __secure_computing+0x9f/0x1c0 [ 312.517793][T26066] syscall_trace_enter+0xd1/0x1f0 [ 312.522886][T26066] do_syscall_64+0xaa/0x1c0 [ 312.527646][T26066] ? clear_bhb_loop+0x55/0xb0 [ 312.532421][T26066] ? clear_bhb_loop+0x55/0xb0 [ 312.537213][T26066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.543186][T26066] RIP: 0033:0x7f492736df39 [ 312.547601][T26066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.567213][T26066] RSP: 002b:00007f4925fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 312.575744][T26066] RAX: ffffffffffffffda RBX: 00007f4927525f80 RCX: 00007f492736df39 [ 312.583801][T26066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.591794][T26066] RBP: 00007f4925fe7090 R08: 0000000000000000 R09: 0000000000000000 [ 312.599807][T26066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.607852][T26066] R13: 0000000000000000 R14: 00007f4927525f80 R15: 00007ffe9294e0d8 [ 312.615846][T26066] [ 312.684121][T26068] validate_nla: 2 callbacks suppressed [ 312.684186][T26068] netlink: 'syz.0.5944': attribute type 10 has an invalid length. [ 312.756720][T26068] bond0: (slave netdevsim1): Releasing backup interface [ 312.823711][T25971] coredump: 1453(syz.3.5910): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 312.839716][T26068] team0: Port device netdevsim1 added [ 312.857358][T26069] netlink: 'syz.0.5944': attribute type 10 has an invalid length. [ 312.970023][T26069] team0: Port device netdevsim1 removed [ 312.997354][T26069] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 313.017035][T26074] netlink: 'syz.2.5946': attribute type 10 has an invalid length. [ 313.042682][T26074] bond0: (slave netdevsim1): Releasing backup interface [ 313.072771][T26074] team0: Port device netdevsim1 added [ 313.208154][T26092] syz.2.5955[26092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.208287][T26092] syz.2.5955[26092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.237484][T26092] syz.2.5955[26092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 313.478091][T26108] netlink: 'syz.2.5961': attribute type 10 has an invalid length. [ 313.512879][T26108] netlink: 'syz.2.5961': attribute type 10 has an invalid length. [ 313.523465][T26108] team0: Port device netdevsim1 removed [ 313.526104][T26108] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 313.657284][T26131] syzkaller0: entered promiscuous mode [ 313.662926][T26131] syzkaller0: entered allmulticast mode [ 313.689264][T26143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.734939][T26143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.905737][T26129] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 314.023057][T26163] netlink: 'syz.0.5976': attribute type 10 has an invalid length. [ 314.045210][T26163] bond0: (slave netdevsim1): Releasing backup interface [ 314.063780][T26163] team0: Port device netdevsim1 added [ 314.116921][T26169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5979'. [ 314.202052][T26172] loop7: detected capacity change from 0 to 16384 [ 314.329782][T26172] I/O error, dev loop7, sector 2176 op 0x0:(READ) flags 0x80700 phys_seg 17 prio class 0 [ 314.399225][T26172] I/O error, dev loop7, sector 2176 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.408779][T26172] Buffer I/O error on dev loop7, logical block 272, async page read [ 314.435381][ T332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.451165][T26180] netlink: 'syz.4.5983': attribute type 10 has an invalid length. [ 314.489544][ T332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.531365][T26180] netlink: 'syz.4.5983': attribute type 10 has an invalid length. [ 314.549976][T26180] team0: Port device netdevsim1 removed [ 314.578809][T26180] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 314.598777][ T332] bond0: (slave netdevsim1): Releasing backup interface [ 314.663542][ T332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.734668][ T332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.756842][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5986'. [ 314.863611][ T332] bridge0: port 4(hsr0) entered disabled state [ 314.877736][ T332] team0: left allmulticast mode [ 314.882641][ T332] team_slave_0: left allmulticast mode [ 314.888188][ T332] team_slave_1: left allmulticast mode [ 314.893722][ T332] team0: left promiscuous mode [ 314.898573][ T332] team_slave_0: left promiscuous mode [ 314.904085][ T332] team_slave_1: left promiscuous mode [ 314.909693][ T332] bridge0: port 3(team0) entered disabled state [ 314.994410][ T332] bridge_slave_1: left allmulticast mode [ 315.000250][ T332] bridge_slave_1: left promiscuous mode [ 315.005923][ T332] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.034082][ T332] bridge_slave_0: left allmulticast mode [ 315.039861][ T332] bridge_slave_0: left promiscuous mode [ 315.045558][ T332] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.281256][ T332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.306956][ T332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.318766][ T332] bond0 (unregistering): Released all slaves [ 315.326872][T26235] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 315.340031][T26231] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5987'. [ 315.348332][T26241] loop1: detected capacity change from 0 to 512 [ 315.398272][ T332] tipc: Disabling bearer [ 315.406639][T26241] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 315.418831][ T332] tipc: Left network mode [ 315.444658][ T332] hsr_slave_0: left promiscuous mode [ 315.468222][ T332] 0·: left promiscuous mode [ 315.493824][ T332] veth1_macvtap: left promiscuous mode [ 315.499452][ T332] veth0_macvtap: left promiscuous mode [ 315.505096][ T332] veth1_vlan: left promiscuous mode [ 315.510444][ T332] veth0_vlan: left promiscuous mode [ 315.527614][T26241] EXT4-fs (loop1): 1 truncate cleaned up [ 315.538722][T26241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.601783][T26337] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 315.634249][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.864979][T26358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5997'. [ 315.885640][ T332] team0 (unregistering): Port device team_slave_1 removed [ 315.907263][ T332] team0 (unregistering): Port device team_slave_0 removed [ 315.965610][T26366] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 315.990159][T26357] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6000'. [ 316.006197][T26183] chnl_net:caif_netlink_parms(): no params data found [ 316.130572][T26418] netlink: 'syz.0.6005': attribute type 10 has an invalid length. [ 316.184599][T26183] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.191738][T26183] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.223151][T26183] bridge_slave_0: entered allmulticast mode [ 316.236432][T26183] bridge_slave_0: entered promiscuous mode [ 316.249210][T26183] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.256349][T26183] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.276541][T26183] bridge_slave_1: entered allmulticast mode [ 316.303618][T26183] bridge_slave_1: entered promiscuous mode [ 316.310206][T26445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6010'. [ 316.324849][T26444] netlink: 'syz.4.6009': attribute type 10 has an invalid length. [ 316.362357][T26444] bond0: (slave netdevsim1): Releasing backup interface [ 316.390047][T26444] team0: Port device netdevsim1 added [ 316.452817][T26183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.478086][T26183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.506509][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 316.506526][ T29] audit: type=1400 audit(1727363465.209:9610): avc: denied { create } for pid=26487 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.568693][T26183] team0: Port device team_slave_0 added [ 316.572667][ T29] audit: type=1400 audit(1727363465.209:9611): avc: denied { ioctl } for pid=26487 comm="syz.2.6013" path="socket:[66520]" dev="sockfs" ino=66520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 316.575734][T26183] team0: Port device team_slave_1 added [ 316.617494][T26520] FAULT_INJECTION: forcing a failure. [ 316.617494][T26520] name failslab, interval 1, probability 0, space 0, times 0 [ 316.630331][T26520] CPU: 1 UID: 0 PID: 26520 Comm: syz.0.6016 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 316.641073][T26520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.651138][T26520] Call Trace: [ 316.654409][T26520] [ 316.657346][T26520] dump_stack_lvl+0xf2/0x150 [ 316.661945][T26520] dump_stack+0x15/0x20 [ 316.666185][T26520] should_fail_ex+0x223/0x230 [ 316.670871][T26520] ? sel_netport_sid+0x1e0/0x420 [ 316.675887][T26520] should_failslab+0x8f/0xb0 [ 316.680476][T26520] __kmalloc_cache_noprof+0x4b/0x2a0 [ 316.685768][T26520] sel_netport_sid+0x1e0/0x420 [ 316.690551][T26520] selinux_socket_connect_helper+0x37c/0x4b0 [ 316.696611][T26520] selinux_sctp_bind_connect+0x1b8/0x270 [ 316.702255][T26520] security_sctp_bind_connect+0x51/0x90 [ 316.707855][T26520] sctp_getsockopt_connectx3+0x206/0x350 [ 316.713563][T26520] sctp_getsockopt+0x805/0xab0 [ 316.718341][T26520] sock_common_getsockopt+0x5b/0x70 [ 316.723651][T26520] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 316.729541][T26520] do_sock_getsockopt+0x1ca/0x260 [ 316.734578][T26520] __sys_getsockopt+0x18a/0x200 [ 316.739540][T26520] __x64_sys_getsockopt+0x66/0x80 [ 316.744577][T26520] x64_sys_call+0x11cd/0x2d60 [ 316.749252][T26520] do_syscall_64+0xc9/0x1c0 [ 316.753775][T26520] ? clear_bhb_loop+0x55/0xb0 [ 316.758503][T26520] ? clear_bhb_loop+0x55/0xb0 [ 316.763277][T26520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.769226][T26520] RIP: 0033:0x7f492736df39 [ 316.773718][T26520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.793390][T26520] RSP: 002b:00007f4925fe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 316.801800][T26520] RAX: ffffffffffffffda RBX: 00007f4927525f80 RCX: 00007f492736df39 [ 316.809825][T26520] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 316.817792][T26520] RBP: 00007f4925fe7090 R08: 0000000020000180 R09: 0000000000000000 [ 316.825767][T26520] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.833769][T26520] R13: 0000000000000000 R14: 00007f4927525f80 R15: 00007ffe9294e0d8 [ 316.841828][T26520] [ 316.861909][ T29] audit: type=1400 audit(1727363465.329:9612): avc: denied { shutdown } for pid=26487 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.881805][ T29] audit: type=1400 audit(1727363465.329:9613): avc: denied { connect } for pid=26487 comm="syz.2.6013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 316.901737][ T29] audit: type=1400 audit(1727363465.549:9614): avc: denied { name_connect } for pid=26487 comm="syz.2.6013" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 316.961419][T26183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.968516][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.994540][T26183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.007186][ T29] audit: type=1400 audit(1727363465.709:9615): avc: denied { setopt } for pid=26487 comm="syz.2.6013" lport=36977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 317.008340][T26183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.034942][T26183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.060988][T26183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.087316][ T29] audit: type=1326 audit(1727363465.779:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 317.110961][ T29] audit: type=1326 audit(1727363465.779:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 317.134473][ T29] audit: type=1326 audit(1727363465.779:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="syz.1.6019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 317.158210][ T29] audit: type=1326 audit(1727363465.779:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26552 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 317.210749][T26183] hsr_slave_0: entered promiscuous mode [ 317.226010][T26183] hsr_slave_1: entered promiscuous mode [ 317.232228][T26183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.241916][T26183] Cannot create hsr debugfs directory [ 317.377417][T26642] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 317.377417][T26642] program syz.2.6023 not setting count and/or reply_len properly [ 317.466106][T26652] loop1: detected capacity change from 0 to 512 [ 317.472771][T26652] EXT4-fs: Ignoring removed mblk_io_submit option [ 317.480967][T26652] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 317.562698][T26346] coredump: 514(syz.4.5994): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 317.619041][T26652] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 317.627389][T26652] EXT4-fs (loop1): orphan cleanup on readonly fs [ 317.639030][T26652] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6021: Invalid block bitmap block 0 in block_group 0 [ 317.655607][T26652] EXT4-fs (loop1): Remounting filesystem read-only [ 317.662426][T26652] EXT4-fs (loop1): 1 orphan inode deleted [ 317.760458][T26652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 317.773196][T26652] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 317.780072][T26652] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.819806][T26183] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.833719][T26183] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.850863][T26183] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.862813][T26183] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.924726][T26696] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 317.936600][T26183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.965209][T26183] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.987069][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.994173][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.048322][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.055475][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.221511][T26183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.289495][T26717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6032'. [ 318.377310][T26183] veth0_vlan: entered promiscuous mode [ 318.401185][T26727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'. [ 318.410332][T26727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'. [ 318.419321][T26727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'. [ 318.443209][T26183] veth1_vlan: entered promiscuous mode [ 318.491899][T26183] veth0_macvtap: entered promiscuous mode [ 318.519413][T26183] veth1_macvtap: entered promiscuous mode [ 318.546873][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.557469][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.567346][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.577794][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.587705][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.598172][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.608121][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.618566][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.628394][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.638830][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.652421][T26183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.687241][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.697819][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.707665][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.718113][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.727946][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.738417][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.748274][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.758714][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.768547][T26183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.778982][T26183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.825956][T26727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6035'. [ 318.920019][T26183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.953729][T26183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.962609][T26183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.971350][T26183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.980088][T26183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.256486][T26757] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 319.317285][T26760] validate_nla: 1 callbacks suppressed [ 319.317301][T26760] netlink: 'syz.0.6044': attribute type 10 has an invalid length. [ 319.633000][T26703] coredump: 537(syz.4.6027): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 319.714834][T26795] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 319.905232][T26804] netlink: 'syz.2.6058': attribute type 10 has an invalid length. [ 319.930589][T26804] bond0: (slave netdevsim1): Releasing backup interface [ 319.975390][T26804] team0: Port device netdevsim1 added [ 320.079842][T26818] __nla_validate_parse: 9 callbacks suppressed [ 320.079864][T26818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6065'. [ 320.239110][T26830] netlink: 'syz.0.6070': attribute type 39 has an invalid length. [ 320.358769][T26834] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6072'. [ 320.371703][T26836] netlink: 'syz.1.6073': attribute type 10 has an invalid length. [ 320.391456][T26836] bond0: (slave netdevsim1): Releasing backup interface [ 320.409561][T26836] team0: Port device netdevsim1 added [ 320.452773][T26836] netlink: 'syz.1.6073': attribute type 10 has an invalid length. [ 320.468163][T26836] team0: Port device netdevsim1 removed [ 320.485700][T26836] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 320.580237][T26849] loop1: detected capacity change from 0 to 1024 [ 320.603930][T26849] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 320.637641][T26849] JBD2: no valid journal superblock found [ 320.643637][T26849] EXT4-fs (loop1): Could not load journal inode [ 320.653906][T26853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6078'. [ 320.672426][T26849] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 320.794441][T26865] serio: Serial port pts0 [ 320.994031][T26880] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 321.002853][T26802] coredump: 244(syz.0.6055): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 321.044259][T26882] netlink: 'syz.2.6088': attribute type 39 has an invalid length. [ 321.251421][T26892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6091'. [ 321.337439][T26896] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 321.528943][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 321.528958][ T29] audit: type=1326 audit(1727363470.229:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.614858][ T29] audit: type=1326 audit(1727363470.229:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.638395][ T29] audit: type=1326 audit(1727363470.269:9804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="syz.0.6100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.662043][ T29] audit: type=1326 audit(1727363470.269:9805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.685037][ T29] audit: type=1326 audit(1727363470.269:9806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.708054][ T29] audit: type=1326 audit(1727363470.269:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.731031][ T29] audit: type=1326 audit(1727363470.269:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.754245][ T29] audit: type=1326 audit(1727363470.269:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.777438][ T29] audit: type=1326 audit(1727363470.269:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.800634][ T29] audit: type=1326 audit(1727363470.269:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26914 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 321.864337][T26919] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6103'. [ 321.889719][T26929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6105'. [ 322.014325][T26939] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6107'. [ 322.304202][T26861] coredump: 476(syz.1.6076): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 322.641442][T26966] netlink: 'syz.4.6116': attribute type 10 has an invalid length. [ 322.664086][T26884] coredump: 567(syz.4.6087): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 322.790929][T26970] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 322.790929][T26970] program syz.4.6118 not setting count and/or reply_len properly [ 322.848290][T26973] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6119'. [ 322.872593][T26974] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 322.961345][T26987] loop1: detected capacity change from 0 to 512 [ 323.018034][T26987] EXT4-fs: Ignoring removed nomblk_io_submit option [ 323.052184][T26987] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 323.098822][T26987] EXT4-fs (loop1): 1 truncate cleaned up [ 323.127629][T26987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.306399][T27008] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 323.404382][T27015] syz.2.6132[27015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.404449][T27015] syz.2.6132[27015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.416167][T27015] syz.2.6132[27015] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.528864][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.962442][T27029] netlink: 'syz.0.6137': attribute type 10 has an invalid length. [ 324.046693][T26909] coredump: 179(syz.2.6093): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 324.403871][T27046] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 324.712229][T27060] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6148'. [ 324.856336][T27069] syz.4.6152[27069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.856473][T27069] syz.4.6152[27069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.871594][T27071] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 324.871594][T27071] program syz.1.6153 not setting count and/or reply_len properly [ 324.914588][T27069] syz.4.6152[27069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.995862][T26989] coredump: 281(syz.0.6120): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 325.116286][T27092] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 325.131745][T27090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6158'. [ 325.229980][T27103] netlink: 'syz.3.6165': attribute type 10 has an invalid length. [ 325.280312][T27103] team0: Port device netdevsim1 added [ 325.319075][T27106] netlink: 'syz.3.6165': attribute type 10 has an invalid length. [ 325.348385][T27106] team0: Port device netdevsim1 removed [ 325.384363][T27106] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 325.396961][T27110] loop1: detected capacity change from 0 to 512 [ 325.477703][T27121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6172'. [ 325.586819][T27112] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 325.630159][T27127] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 325.630159][T27127] program syz.4.6174 not setting count and/or reply_len properly [ 325.732531][T27147] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 325.747591][T27147] netlink: 'syz.0.6182': attribute type 10 has an invalid length. [ 325.770624][T27147] team0: Port device netdevsim1 removed [ 325.784506][T27147] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 325.803285][T27149] loop1: detected capacity change from 0 to 1024 [ 325.835719][T27149] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 325.865497][T27149] JBD2: no valid journal superblock found [ 325.871276][T27149] EXT4-fs (loop1): Could not load journal inode [ 325.903170][T27149] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 325.924682][T27160] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 325.924682][T27160] program syz.0.6186 not setting count and/or reply_len properly [ 325.965625][T27165] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6187'. [ 326.034043][T27052] coredump: 607(syz.4.6142): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 326.162456][T27175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6190'. [ 326.412501][T27204] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 326.441783][T27207] loop1: detected capacity change from 0 to 512 [ 326.463302][T27207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 326.567062][T27217] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6206'. [ 326.620649][T27207] EXT4-fs (loop1): 1 truncate cleaned up [ 326.661039][T27207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.667778][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 326.667796][ T29] audit: type=1326 audit(1727363475.369:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.716155][ T29] audit: type=1326 audit(1727363475.409:10058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.739902][ T29] audit: type=1326 audit(1727363475.409:10059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.763624][ T29] audit: type=1326 audit(1727363475.409:10060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.787232][ T29] audit: type=1326 audit(1727363475.409:10061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.810857][ T29] audit: type=1326 audit(1727363475.409:10062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.834483][ T29] audit: type=1326 audit(1727363475.409:10063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.858298][ T29] audit: type=1326 audit(1727363475.409:10064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.881924][ T29] audit: type=1326 audit(1727363475.409:10065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 326.905648][ T29] audit: type=1326 audit(1727363475.409:10066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27221 comm="syz.2.6207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f566052df39 code=0x7ffc0000 [ 327.007097][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.015304][T27235] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 327.097307][T27245] netlink: 328 bytes leftover after parsing attributes in process `syz.0.6217'. [ 327.196928][T27261] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 327.215506][T27265] loop1: detected capacity change from 0 to 512 [ 327.222088][T27259] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6222'. [ 327.226507][T27269] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 327.247448][T27265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.284861][T27265] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 327.332430][T27265] EXT4-fs (loop1): 1 truncate cleaned up [ 327.362850][T27265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.485367][T27286] netlink: 328 bytes leftover after parsing attributes in process `syz.3.6231'. [ 327.620062][T27303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6233'. [ 327.714671][T27168] coredump: 507(syz.1.6183): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 327.746476][T27311] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 327.746476][T27311] program syz.2.6237 not setting count and/or reply_len properly [ 327.777627][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.830173][T27316] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 327.897873][T27305] netlink: 'syz.3.6236': attribute type 39 has an invalid length. [ 328.068692][T27340] loop1: detected capacity change from 0 to 1024 [ 328.108592][T27340] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 328.136394][T27340] JBD2: no valid journal superblock found [ 328.142278][T27340] EXT4-fs (loop1): Could not load journal inode [ 328.161341][T27343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6247'. [ 328.192014][T27340] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 328.255243][T27365] syz.0.6252[27365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.255363][T27365] syz.0.6252[27365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.266953][T27365] syz.0.6252[27365] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.225934][T27410] netlink: 'syz.0.6264': attribute type 10 has an invalid length. [ 329.231362][T27274] coredump: 227(syz.2.6223): written to core: VMAs: 31, size 91254784; core: 62112542 bytes, pos 91262976 [ 329.270754][T27410] bond0: (slave netdevsim1): Releasing backup interface [ 329.290124][T27410] team0: Port device netdevsim1 added [ 329.327800][T27366] coredump: 536(syz.1.6245): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 329.455477][T27431] blktrace: Concurrent blktraces are not allowed on loop1 [ 329.711874][T27469] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 330.441108][T27502] __nla_validate_parse: 5 callbacks suppressed [ 330.441129][T27502] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6288'. [ 330.486366][T27480] coredump: 373(syz.0.6279): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 330.671444][T27516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6289'. [ 330.801695][T27534] netlink: 'syz.3.6293': attribute type 10 has an invalid length. [ 330.811919][T27534] bond0: (slave netdevsim1): Releasing backup interface [ 330.820671][T27534] team0: Port device netdevsim1 added [ 330.934258][T27539] netlink: 1812 bytes leftover after parsing attributes in process `syz.0.6295'. [ 330.980046][T27544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6297'. [ 331.083767][T27551] syz.2.6300[27551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.083869][T27551] syz.2.6300[27551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.112816][T27551] syz.2.6300[27551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.373823][T27561] syz.2.6303[27561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.385403][T27561] syz.2.6303[27561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.397015][T27561] syz.2.6303[27561] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.966408][T27567] loop1: detected capacity change from 0 to 1024 [ 331.996649][T27567] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 332.037576][T27567] JBD2: no valid journal superblock found [ 332.043356][T27567] EXT4-fs (loop1): Could not load journal inode [ 332.060342][T27567] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 332.106891][T27576] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 332.158886][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 332.158902][ T29] audit: type=1326 audit(1727363480.859:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="syz.3.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.231568][ T29] audit: type=1326 audit(1727363480.859:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="syz.3.6309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.255305][ T29] audit: type=1326 audit(1727363480.859:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.278387][ T29] audit: type=1326 audit(1727363480.859:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.301522][ T29] audit: type=1326 audit(1727363480.859:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.324636][ T29] audit: type=1326 audit(1727363480.859:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.347773][ T29] audit: type=1326 audit(1727363480.859:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.370885][ T29] audit: type=1326 audit(1727363480.859:10244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.393966][ T29] audit: type=1326 audit(1727363480.859:10245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.417544][ T29] audit: type=1326 audit(1727363480.859:10246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27579 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 332.449128][T27585] netlink: 'syz.4.6311': attribute type 10 has an invalid length. [ 332.567945][T27599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6316'. [ 332.582718][T27603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6317'. [ 332.591852][T27603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6317'. [ 332.600951][T27603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6317'. [ 332.616914][T27604] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6315'. [ 332.630835][T27595] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 332.647812][T27603] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6317'. [ 332.799408][T27622] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 332.851711][T27626] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 332.851711][T27626] program syz.3.6321 not setting count and/or reply_len properly [ 332.937504][T27634] loop1: detected capacity change from 0 to 1024 [ 332.965034][T27634] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.054990][T27634] JBD2: no valid journal superblock found [ 333.060760][T27634] EXT4-fs (loop1): Could not load journal inode [ 333.110386][T27634] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 333.534437][T27657] netlink: 'syz.4.6328': attribute type 10 has an invalid length. [ 333.577006][T27657] netlink: 'syz.4.6328': attribute type 10 has an invalid length. [ 333.606422][T27657] team0: Port device netdevsim1 removed [ 333.614426][T27657] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 333.644631][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.061743][T27713] netlink: 'syz.0.6343': attribute type 10 has an invalid length. [ 334.251096][T27581] coredump: 553(syz.1.6305): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 334.438199][T27727] syz.4.6346[27727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.438251][T27727] syz.4.6346[27727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.467246][T27727] syz.4.6346[27727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.490483][T27655] coredump: 142(syz.3.6326): written to core: VMAs: 38, size 91516928; core: 62133461 bytes, pos 91525120 [ 334.609493][T27741] syz.1.6351[27741] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 334.647049][T27744] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 334.647049][T27744] program syz.0.6353 not setting count and/or reply_len properly [ 335.685855][T27786] __nla_validate_parse: 9 callbacks suppressed [ 335.685875][T27786] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6362'. [ 335.734308][T27618] coredump: 275(syz.2.6314): written to core: VMAs: 31, size 91254784; core: 62112542 bytes, pos 91262976 [ 336.064492][T27820] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6373'. [ 336.237983][T27830] loop1: detected capacity change from 0 to 512 [ 336.259500][T27830] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.305205][T27830] EXT4-fs (loop1): 1 truncate cleaned up [ 336.323026][T27830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.378824][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.410238][T27718] coredump: 689(syz.4.6342): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 336.550278][T27658] coredump: 567(syz.1.6323): written to core: VMAs: 33, size 91385856; core: 62124942 bytes, pos 91394048 [ 336.727453][T27861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6385'. [ 337.183830][T27868] bpf_get_probe_write_proto: 5 callbacks suppressed [ 337.183853][T27868] syz.1.6388[27868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.190645][T27868] syz.1.6388[27868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.202148][T27868] syz.1.6388[27868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.585839][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 337.585860][ T29] audit: type=1326 audit(1727363485.869:10462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="syz.1.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.627133][ T29] audit: type=1326 audit(1727363485.869:10463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="syz.1.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.650901][ T29] audit: type=1326 audit(1727363485.869:10464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="syz.1.6386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.674529][ T29] audit: type=1326 audit(1727363485.869:10465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.697764][ T29] audit: type=1326 audit(1727363485.869:10466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.721111][ T29] audit: type=1326 audit(1727363485.869:10467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.744198][ T29] audit: type=1326 audit(1727363485.869:10468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.767267][ T29] audit: type=1326 audit(1727363485.869:10469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.790408][ T29] audit: type=1326 audit(1727363485.869:10470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.813495][ T29] audit: type=1326 audit(1727363485.869:10471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27863 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 337.898629][T27872] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6387'. [ 337.923835][T27890] syz.4.6394[27890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.923944][T27890] syz.4.6394[27890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.940815][T27890] syz.4.6394[27890] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.982226][T27905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6398'. [ 338.153122][T27913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6401'. [ 338.259446][T27926] netlink: 'syz.3.6397': attribute type 39 has an invalid length. [ 338.436804][T27931] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6408'. [ 338.477575][T27937] syz.2.6411[27937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.477767][T27937] syz.2.6411[27937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.507975][T27937] syz.2.6411[27937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 338.703387][T27945] syz.2.6412[27945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.276643][T27954] loop1: detected capacity change from 0 to 1024 [ 339.296691][T27954] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 339.307220][T27958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6418'. [ 339.316259][T27958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6418'. [ 339.325228][T27958] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6418'. [ 339.338561][T27954] JBD2: no valid journal superblock found [ 339.344303][T27954] EXT4-fs (loop1): Could not load journal inode [ 339.366421][T27954] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 339.761765][T27998] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 339.808345][T28002] loop1: detected capacity change from 0 to 1024 [ 339.842971][T28002] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 339.941757][T28002] JBD2: no valid journal superblock found [ 339.947586][T28002] EXT4-fs (loop1): Could not load journal inode [ 340.038513][T28002] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 340.757764][T28008] coredump: 446(syz.0.6429): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 340.971024][T28079] __nla_validate_parse: 17 callbacks suppressed [ 340.971047][T28079] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6452'. [ 341.228009][T28107] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 341.286883][T27978] coredump: 612(syz.1.6415): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 341.302327][T28114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6461'. [ 341.324741][T28111] netlink: 'syz.0.6460': attribute type 10 has an invalid length. [ 342.005669][T28023] coredump: 619(syz.1.6431): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 342.689029][T28173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6483'. [ 342.706854][T28173] loop1: detected capacity change from 0 to 512 [ 342.753397][T28173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.766081][T28173] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.777426][T28173] __quota_error: 97 callbacks suppressed [ 342.777440][T28173] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 342.793581][T28173] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 342.803016][T28173] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6483: Failed to acquire dquot type 0 [ 342.937679][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.965467][T28193] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 342.965467][T28193] program syz.2.6490 not setting count and/or reply_len properly [ 343.146747][T28202] netlink: 1812 bytes leftover after parsing attributes in process `syz.0.6492'. [ 343.205792][T28208] loop1: detected capacity change from 0 to 1024 [ 343.216551][T28208] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 343.319476][T28208] JBD2: no valid journal superblock found [ 343.325312][T28208] EXT4-fs (loop1): Could not load journal inode [ 343.437510][T28208] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 343.631800][T28231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6498'. [ 343.738689][T28231] loop1: detected capacity change from 0 to 512 [ 343.784343][T28231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.813058][T28231] ext4 filesystem being mounted at /261/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.841046][T28231] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 343.851457][T28231] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 343.860894][T28231] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6498: Failed to acquire dquot type 0 [ 344.105162][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.287356][ T29] audit: type=1326 audit(1727363492.989:10569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.333634][ T29] audit: type=1326 audit(1727363493.019:10570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.357431][ T29] audit: type=1326 audit(1727363493.019:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.381030][ T29] audit: type=1326 audit(1727363493.019:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.404621][ T29] audit: type=1326 audit(1727363493.019:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.428230][ T29] audit: type=1326 audit(1727363493.019:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28250 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48f91df39 code=0x7ffc0000 [ 344.441955][T28253] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6504'. [ 344.568881][T28251] netlink: 'syz.4.6503': attribute type 39 has an invalid length. [ 344.605960][T28273] loop1: detected capacity change from 0 to 512 [ 344.619156][T28273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 344.636526][T28229] coredump: 643(syz.1.6488): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 344.650091][T28273] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 344.686171][T28273] EXT4-fs (loop1): 1 truncate cleaned up [ 344.692354][T28273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.933828][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.970261][T28286] netlink: 'syz.1.6507': attribute type 10 has an invalid length. [ 344.989390][T28286] bond0: (slave netdevsim1): Releasing backup interface [ 345.007234][T28286] team0: Port device netdevsim1 added [ 345.078558][T28292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6511'. [ 345.105757][T28294] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 345.300143][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6515'. [ 345.391451][T28324] bpf_get_probe_write_proto: 5 callbacks suppressed [ 345.391468][T28324] syz.0.6517[28324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.398227][T28324] syz.0.6517[28324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 345.409725][T28324] syz.0.6517[28324] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.542575][T28344] netlink: 'syz.4.6524': attribute type 10 has an invalid length. [ 346.650761][T28344] bond0: (slave netdevsim1): Releasing backup interface [ 346.685295][T28344] team0: Port device netdevsim1 added [ 346.706291][T28349] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6526'. [ 346.831926][T28357] loop1: detected capacity change from 0 to 1024 [ 346.886253][T28357] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 346.897796][T28357] JBD2: no valid journal superblock found [ 346.903584][T28357] EXT4-fs (loop1): Could not load journal inode [ 346.932968][T28357] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 347.022365][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.031487][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.040507][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.147870][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.156945][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.165964][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.280869][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.288961][T28396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6541'. [ 347.289930][T28373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6536'. [ 347.333848][T28396] loop1: detected capacity change from 0 to 512 [ 347.388963][T28396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.457269][T28396] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.523449][T28413] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 347.523449][T28413] program syz.0.6549 not setting count and/or reply_len properly [ 347.542960][T28396] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6541: Failed to acquire dquot type 0 [ 347.573680][T28417] netlink: 'syz.4.6550': attribute type 10 has an invalid length. [ 347.672209][T28310] coredump: 236(syz.3.6510): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 347.755180][T28437] netlink: 'syz.2.6555': attribute type 10 has an invalid length. [ 347.780132][T28437] team0: Port device netdevsim1 removed [ 347.803140][T28437] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 347.834463][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.945395][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 347.945413][ T29] audit: type=1326 audit(1727363496.649:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 347.975332][ T29] audit: type=1326 audit(1727363496.649:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.008602][ T29] audit: type=1326 audit(1727363496.679:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.032325][ T29] audit: type=1326 audit(1727363496.679:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.046622][T28457] netlink: 'syz.0.6554': attribute type 39 has an invalid length. [ 348.056013][ T29] audit: type=1326 audit(1727363496.679:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.056041][ T29] audit: type=1326 audit(1727363496.679:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.056078][ T29] audit: type=1326 audit(1727363496.679:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.134505][ T29] audit: type=1326 audit(1727363496.679:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.158002][ T29] audit: type=1326 audit(1727363496.679:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.181684][ T29] audit: type=1326 audit(1727363496.679:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28433 comm="syz.0.6554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f492736df39 code=0x7ffc0000 [ 348.540699][T28494] loop1: detected capacity change from 0 to 1024 [ 348.569581][T28494] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 348.596118][T28494] JBD2: no valid journal superblock found [ 348.601897][T28494] EXT4-fs (loop1): Could not load journal inode [ 348.637544][T28494] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 348.728132][T28380] coredump: 669(syz.1.6529): written to core: VMAs: 38, size 91516928; core: 62125269 bytes, pos 91525120 [ 348.974448][T28522] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 349.000167][T28524] loop1: detected capacity change from 0 to 512 [ 349.016210][T28524] EXT4-fs: Ignoring removed i_version option [ 349.022257][T28524] EXT4-fs: Ignoring removed nobh option [ 349.049476][T28524] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 349.076705][T28524] EXT4-fs (loop1): 1 truncate cleaned up [ 349.101408][T28524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.163203][T28524] syz.1.6579[28524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.163312][T28524] syz.1.6579[28524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.174897][T28524] syz.1.6579[28524] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.699149][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.741274][T28565] syz.4.6585[28565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.741329][T28565] syz.4.6585[28565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.763051][T28565] syz.4.6585[28565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.979401][T28585] netlink: 'syz.3.6591': attribute type 39 has an invalid length. [ 350.058503][T28505] coredump: 687(syz.1.6572): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 350.086771][T28526] coredump: 256(syz.3.6578): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 350.112979][T28575] netlink: 'syz.1.6592': attribute type 39 has an invalid length. [ 350.360603][T28624] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 350.360603][T28624] program syz.2.6602 not setting count and/or reply_len properly [ 350.556050][T28643] syz.0.6606[28643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.556119][T28643] syz.0.6606[28643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.578637][T28643] syz.0.6606[28643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 350.869616][T28674] loop1: detected capacity change from 0 to 512 [ 350.894174][T28674] EXT4-fs: Ignoring removed nomblk_io_submit option [ 350.901259][T28674] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 350.918009][T28674] EXT4-fs (loop1): 1 truncate cleaned up [ 350.929822][T28674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.957426][T28678] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 351.206322][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.274396][T28715] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 351.274396][T28715] program syz.0.6626 not setting count and/or reply_len properly [ 351.326160][T28725] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 351.373826][T28733] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 351.538591][T28747] loop1: detected capacity change from 0 to 512 [ 351.545403][T28747] EXT4-fs: Ignoring removed mblk_io_submit option [ 351.554445][T28747] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 351.565680][T28747] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 351.573852][T28747] EXT4-fs (loop1): orphan cleanup on readonly fs [ 351.581521][T28747] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6627: Invalid block bitmap block 0 in block_group 0 [ 351.596749][T28747] EXT4-fs (loop1): Remounting filesystem read-only [ 351.603429][T28747] EXT4-fs (loop1): 1 orphan inode deleted [ 351.661136][T28750] syz.0.6634[28750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.661382][T28750] syz.0.6634[28750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.773788][T28750] syz.0.6634[28750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.826717][T28747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.827856][T28749] syz.0.6634[28749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.838201][T28747] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 351.850596][T28749] syz.0.6634[28749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 351.862309][T28747] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.870930][T28749] syz.0.6634[28749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.051923][T28763] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 352.165167][T28769] __nla_validate_parse: 22 callbacks suppressed [ 352.165188][T28769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6641'. [ 352.242591][T28785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6646'. [ 352.258397][T28785] loop1: detected capacity change from 0 to 512 [ 352.294129][T28785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.326000][T28785] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.384535][T28785] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6646: Failed to acquire dquot type 0 [ 352.437588][T28794] syz.4.6650[28794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.495761][T28805] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 352.627616][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.795215][T28745] coredump: 797(syz.4.6630): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 353.762829][T28870] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 353.816820][T28684] coredump: 785(syz.4.6615): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 353.955610][T28889] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 353.963756][T28894] loop1: detected capacity change from 0 to 512 [ 353.973901][T28894] EXT4-fs: Ignoring removed i_version option [ 353.974267][T28892] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 353.979976][T28894] EXT4-fs: Ignoring removed nobh option [ 354.007378][T28894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 354.047532][T28894] EXT4-fs (loop1): 1 truncate cleaned up [ 354.087390][T28894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.274721][T28902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6683'. [ 354.346217][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.370957][T28920] netlink: 1816 bytes leftover after parsing attributes in process `syz.4.6688'. [ 354.601285][T28940] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6695'. [ 354.810928][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.923161][T28812] coredump: 612(syz.0.6654): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 355.570659][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 355.570675][ T29] audit: type=1326 audit(1727363504.269:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.614327][ T29] audit: type=1326 audit(1727363504.309:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.638041][ T29] audit: type=1326 audit(1727363504.309:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.661754][ T29] audit: type=1326 audit(1727363504.309:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.685357][ T29] audit: type=1326 audit(1727363504.309:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.709034][ T29] audit: type=1326 audit(1727363504.309:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.732819][ T29] audit: type=1326 audit(1727363504.309:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.756480][ T29] audit: type=1326 audit(1727363504.309:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.780174][ T29] audit: type=1326 audit(1727363504.309:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.803961][ T29] audit: type=1326 audit(1727363504.309:10948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28984 comm="syz.3.6708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 355.962561][T28896] coredump: 624(syz.0.6672): written to core: VMAs: 31, size 91254784; core: 62112542 bytes, pos 91262976 [ 355.972149][T28900] coredump: 308(syz.3.6681): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 356.078723][T29007] netlink: 1816 bytes leftover after parsing attributes in process `syz.1.6716'. [ 356.145485][T29013] loop1: detected capacity change from 0 to 1024 [ 356.154392][T29013] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 356.181226][T29013] JBD2: no valid journal superblock found [ 356.187028][T29013] EXT4-fs (loop1): Could not load journal inode [ 356.226323][T29013] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 356.474030][T29037] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6722'. [ 356.829148][T29060] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6729'. [ 356.913626][T29074] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6732'. [ 357.056592][T29081] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 357.349180][T29086] netlink: 'syz.1.6735': attribute type 39 has an invalid length. [ 357.386933][T29024] coredump: 745(syz.1.6718): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 357.590235][T29098] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 357.722772][T29094] netlink: 'syz.0.6738': attribute type 39 has an invalid length. [ 357.867793][T29114] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6747'. [ 357.870852][T29112] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 357.890029][T29110] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 358.325631][T29144] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6753'. [ 358.329808][T29087] coredump: 659(syz.0.6733): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 358.669208][T29171] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 359.191361][T29186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6766'. [ 359.332529][T29191] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6768'. [ 359.349381][T29126] coredump: 856(syz.4.6745): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 359.480510][T29125] coredump: 339(syz.3.6746): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 359.580447][T29212] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 359.621073][T29214] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 359.658660][T29219] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 359.862789][T29225] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6776'. [ 360.033149][T29243] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 360.179678][T29246] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6780'. [ 360.392520][T29267] loop1: detected capacity change from 0 to 1024 [ 360.450070][T29267] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 360.476307][T29267] JBD2: no valid journal superblock found [ 360.482255][T29267] EXT4-fs (loop1): Could not load journal inode [ 360.690642][T29276] bpf_get_probe_write_proto: 11 callbacks suppressed [ 360.690664][T29276] syz.1.6788[29276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.697589][T29276] syz.1.6788[29276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.709136][T29276] syz.1.6788[29276] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.771393][T29221] coredump: 352(syz.3.6774): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 360.776277][T29279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6789'. [ 360.803856][T29279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6789'. [ 360.812903][T29279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6789'. [ 360.970458][T29279] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6789'. [ 361.532208][T29176] coredump: 494(syz.2.6762): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 362.028417][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 362.054277][T29335] loop1: detected capacity change from 0 to 512 [ 362.096953][T29339] xt_check_match: 2 callbacks suppressed [ 362.096993][T29339] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 362.197264][T29335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.308685][T29274] coredump: 767(syz.1.6785): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 362.317231][T29335] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.388948][T29222] coredump: 879(syz.4.6775): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 362.408013][T29335] __quota_error: 200 callbacks suppressed [ 362.408091][T29335] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 362.424406][T29335] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 362.434202][T29335] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6804: Failed to acquire dquot type 0 [ 362.553921][ T29] audit: type=1326 audit(1727363511.249:11149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.635467][ T29] audit: type=1326 audit(1727363511.279:11150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.659143][ T29] audit: type=1326 audit(1727363511.279:11151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.682835][ T29] audit: type=1326 audit(1727363511.279:11152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.707060][ T29] audit: type=1326 audit(1727363511.279:11153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.730818][ T29] audit: type=1326 audit(1727363511.279:11154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.754439][ T29] audit: type=1326 audit(1727363511.279:11155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200358df39 code=0x7ffc0000 [ 362.778026][ T29] audit: type=1326 audit(1727363511.279:11156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29352 comm="syz.3.6808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f200358c8d0 code=0x7ffc0000 [ 362.886754][T29217] coredump: 876(syz.4.6773): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 362.929411][T29357] netlink: 'syz.3.6808': attribute type 39 has an invalid length. [ 362.969206][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.181310][T29369] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 363.463360][T29387] loop1: detected capacity change from 0 to 512 [ 363.471193][T29385] __nla_validate_parse: 7 callbacks suppressed [ 363.471208][T29385] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6816'. [ 363.478575][T29252] coredump: 686(syz.0.6781): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 363.510068][T29387] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.531843][T29387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 363.554583][T29387] EXT4-fs (loop1): 1 truncate cleaned up [ 363.571904][T29387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.613597][T29273] coredump: 693(syz.0.6786): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 363.908041][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.912304][T29347] coredump: 373(syz.3.6805): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 363.987514][T29402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6820'. [ 364.009193][T29402] loop1: detected capacity change from 0 to 512 [ 364.103498][T29402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.117669][T29402] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.145846][T29402] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.6820: Failed to acquire dquot type 0 [ 364.376924][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.429082][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.437287][T29429] loop1: detected capacity change from 0 to 1024 [ 364.438153][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.453596][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.464234][T29429] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 364.487122][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.496172][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.499727][T29429] JBD2: no valid journal superblock found [ 364.505137][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.510978][T29429] EXT4-fs (loop1): Could not load journal inode [ 364.542952][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.552139][T29431] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6828'. [ 364.567721][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 364.574639][T29429] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 365.226684][T29483] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 365.347160][T29481] FAULT_INJECTION: forcing a failure. [ 365.347160][T29481] name failslab, interval 1, probability 0, space 0, times 0 [ 365.359913][T29481] CPU: 0 UID: 0 PID: 29481 Comm: syz.3.6835 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 365.370361][T29481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 365.380578][T29481] Call Trace: [ 365.384055][T29481] [ 365.387081][T29481] dump_stack_lvl+0xf2/0x150 [ 365.391718][T29481] dump_stack+0x15/0x20 [ 365.395917][T29481] should_fail_ex+0x223/0x230 [ 365.400666][T29481] ? vmemdup_user+0x42/0x1b0 [ 365.405330][T29481] should_failslab+0x8f/0xb0 [ 365.409968][T29481] __kmalloc_node_noprof+0xa8/0x380 [ 365.415277][T29481] ? should_fail_usercopy+0x1a/0x20 [ 365.420580][T29481] vmemdup_user+0x42/0x1b0 [ 365.425031][T29481] path_setxattr+0x134/0x360 [ 365.429682][T29481] ? get_pid_task+0x8e/0xc0 [ 365.434259][T29481] __x64_sys_lsetxattr+0x6a/0x80 [ 365.439318][T29481] x64_sys_call+0x2931/0x2d60 [ 365.444126][T29481] do_syscall_64+0xc9/0x1c0 [ 365.448725][T29481] ? clear_bhb_loop+0x55/0xb0 [ 365.453434][T29481] ? clear_bhb_loop+0x55/0xb0 [ 365.458149][T29481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.464084][T29481] RIP: 0033:0x7f200358df39 [ 365.468573][T29481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.488202][T29481] RSP: 002b:00007f2002201038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 365.496686][T29481] RAX: ffffffffffffffda RBX: 00007f2003745f80 RCX: 00007f200358df39 [ 365.504664][T29481] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 0000000020000040 [ 365.512639][T29481] RBP: 00007f2002201090 R08: 0000000000000000 R09: 0000000000000000 [ 365.520617][T29481] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000001 [ 365.528675][T29481] R13: 0000000000000000 R14: 00007f2003745f80 R15: 00007ffc38b3e9d8 [ 365.536658][T29481] [ 365.556803][T29491] coredump: 722(syz.0.6836): coredump has not been created, error -2 [ 365.624532][T29498] loop1: detected capacity change from 0 to 512 [ 365.647837][T29498] EXT4-fs: Ignoring removed i_version option [ 365.653868][T29498] EXT4-fs: Ignoring removed nobh option [ 365.709121][T29498] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.842921][T29498] EXT4-fs (loop1): 1 truncate cleaned up [ 365.862068][T29498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.000542][T29498] syz.1.6841[29498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.000684][T29498] syz.1.6841[29498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.028481][T29498] syz.1.6841[29498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.102910][T29458] coredump: 800(syz.1.6826): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 366.423058][T29548] syz.2.6856[29548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.423164][T29548] syz.2.6856[29548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.435300][T29548] syz.2.6856[29548] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 366.546023][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.625459][T29379] coredump: 509(syz.2.6812): written to core: VMAs: 29, size 91123712; core: 62104238 bytes, pos 91131904 [ 366.670242][T29576] usb usb8: usbfs: process 29576 (syz.2.6862) did not claim interface 0 before use [ 366.814248][T29585] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 367.106223][T29605] netlink: 'syz.2.6866': attribute type 39 has an invalid length. [ 367.130781][T29606] loop1: detected capacity change from 0 to 256 [ 367.158396][T29608] FAULT_INJECTION: forcing a failure. [ 367.158396][T29608] name failslab, interval 1, probability 0, space 0, times 0 [ 367.171156][T29608] CPU: 0 UID: 0 PID: 29608 Comm: syz.4.6874 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 367.181632][T29608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.191784][T29608] Call Trace: [ 367.195077][T29608] [ 367.198018][T29608] dump_stack_lvl+0xf2/0x150 [ 367.202711][T29608] dump_stack+0x15/0x20 [ 367.206889][T29608] should_fail_ex+0x223/0x230 [ 367.211657][T29608] ? skb_clone+0x154/0x1f0 [ 367.216232][T29608] should_failslab+0x8f/0xb0 [ 367.220882][T29608] kmem_cache_alloc_noprof+0x4c/0x290 [ 367.226316][T29608] ? mod_objcg_state+0x2ea/0x4f0 [ 367.231295][T29608] skb_clone+0x154/0x1f0 [ 367.235642][T29608] dev_queue_xmit_nit+0x149/0x620 [ 367.240758][T29608] dev_hard_start_xmit+0xcc/0x3f0 [ 367.245898][T29608] ? validate_xmit_skb+0x658/0x8d0 [ 367.251069][T29608] __dev_queue_xmit+0xfe6/0x1fe0 [ 367.256218][T29608] ? __dev_queue_xmit+0x161/0x1fe0 [ 367.261354][T29608] ? should_fail_ex+0xd7/0x230 [ 367.266213][T29608] ? __skb_clone+0x2d0/0x2f0 [ 367.270961][T29608] __netlink_deliver_tap+0x39f/0x4c0 [ 367.276318][T29608] netlink_unicast+0x64a/0x670 [ 367.281180][T29608] netlink_sendmsg+0x5cc/0x6e0 [ 367.285997][T29608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.291308][T29608] __sock_sendmsg+0x140/0x180 [ 367.296027][T29608] ____sys_sendmsg+0x312/0x410 [ 367.300840][T29608] __sys_sendmsg+0x1d9/0x270 [ 367.305458][T29608] __x64_sys_sendmsg+0x46/0x50 [ 367.310261][T29608] x64_sys_call+0x2689/0x2d60 [ 367.314952][T29608] do_syscall_64+0xc9/0x1c0 [ 367.319507][T29608] ? clear_bhb_loop+0x55/0xb0 [ 367.324213][T29608] ? clear_bhb_loop+0x55/0xb0 [ 367.328923][T29608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.334941][T29608] RIP: 0033:0x7fe48f91df39 [ 367.339354][T29608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.359035][T29608] RSP: 002b:00007fe48e591038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.367465][T29608] RAX: ffffffffffffffda RBX: 00007fe48fad5f80 RCX: 00007fe48f91df39 [ 367.375440][T29608] RDX: 0000000000000000 RSI: 0000000020001680 RDI: 0000000000000003 [ 367.383545][T29608] RBP: 00007fe48e591090 R08: 0000000000000000 R09: 0000000000000000 [ 367.391609][T29608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.399673][T29608] R13: 0000000000000000 R14: 00007fe48fad5f80 R15: 00007fff229a8728 [ 367.407723][T29608] [ 367.618918][T29623] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 368.689104][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 368.689122][ T29] audit: type=1400 audit(1727363517.389:11335): avc: denied { unmount } for pid=22085 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 369.319450][T29649] __nla_validate_parse: 6 callbacks suppressed [ 369.319465][T29649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6886'. [ 369.374795][ T29] audit: type=1400 audit(1727363518.069:11336): avc: denied { create } for pid=29648 comm="syz.0.6886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 369.421394][T29649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'. [ 369.545562][T29651] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 369.666622][ T29] audit: type=1400 audit(1727363518.369:11337): avc: denied { setopt } for pid=29658 comm="syz.2.6888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.734819][ T29] audit: type=1400 audit(1727363518.389:11338): avc: denied { accept } for pid=29658 comm="syz.2.6888" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.755804][ T29] audit: type=1400 audit(1727363518.389:11339): avc: denied { write } for pid=29658 comm="syz.2.6888" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=35290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.781579][ T29] audit: type=1400 audit(1727363518.389:11340): avc: denied { read } for pid=29658 comm="syz.2.6888" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=35290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 369.811908][T29658] dccp_close: ABORT with 3412 bytes unread [ 369.889517][ T29] audit: type=1400 audit(1727363518.589:11341): avc: denied { connect } for pid=29683 comm="syz.1.6895" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.911021][T29685] syz.1.6895[29685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.911163][T29685] syz.1.6895[29685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.937509][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6890'. [ 369.960629][T29685] syz.1.6895[29685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.962418][ T29] audit: type=1326 audit(1727363518.659:11342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29683 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 369.997589][ T29] audit: type=1326 audit(1727363518.659:11343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29683 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 370.021310][ T29] audit: type=1326 audit(1727363518.659:11344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29683 comm="syz.1.6895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 370.082018][T29671] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 370.483209][T29704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1816 sclass=netlink_route_socket pid=29704 comm=syz.4.6898 [ 370.597120][T29598] coredump: 932(syz.4.6867): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 370.630135][T29706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6899'. [ 371.027426][T29729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6905'. [ 371.129542][T29731] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 371.538975][T29750] FAULT_INJECTION: forcing a failure. [ 371.538975][T29750] name failslab, interval 1, probability 0, space 0, times 0 [ 371.551723][T29750] CPU: 1 UID: 0 PID: 29750 Comm: syz.2.6913 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 371.562172][T29750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 371.572279][T29750] Call Trace: [ 371.575574][T29750] [ 371.578515][T29750] dump_stack_lvl+0xf2/0x150 [ 371.583150][T29750] dump_stack+0x15/0x20 [ 371.587393][T29750] should_fail_ex+0x223/0x230 [ 371.592125][T29750] ? usb_control_msg+0x59/0x240 [ 371.597042][T29750] should_failslab+0x8f/0xb0 [ 371.601663][T29750] __kmalloc_cache_noprof+0x4b/0x2a0 [ 371.606981][T29750] usb_control_msg+0x59/0x240 [ 371.611784][T29750] ? __pm_runtime_resume+0xe9/0x100 [ 371.614629][T29626] coredump: 946(syz.4.6879): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 371.617003][T29750] usb_set_configuration+0xb35/0x12c0 [ 371.617036][T29750] ? __rcu_read_unlock+0x4e/0x70 [ 371.638706][T29750] ? avc_has_extended_perms+0x60b/0x820 [ 371.644306][T29750] usbdev_ioctl+0x2b63/0x3e00 [ 371.649041][T29750] ? ioctl_has_perm+0x286/0x2e0 [ 371.653958][T29750] ? do_vfs_ioctl+0x96e/0x1530 [ 371.658785][T29750] ? selinux_file_ioctl+0x2f7/0x380 [ 371.664010][T29750] ? __fget_files+0x1d4/0x210 [ 371.668791][T29750] ? __pfx_usbdev_ioctl+0x10/0x10 [ 371.673854][T29750] __se_sys_ioctl+0xcd/0x140 [ 371.678483][T29750] __x64_sys_ioctl+0x43/0x50 [ 371.683175][T29750] x64_sys_call+0x15cc/0x2d60 [ 371.687876][T29750] do_syscall_64+0xc9/0x1c0 [ 371.692458][T29750] ? clear_bhb_loop+0x55/0xb0 [ 371.697297][T29750] ? clear_bhb_loop+0x55/0xb0 [ 371.702005][T29750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.707968][T29750] RIP: 0033:0x7f566052df39 [ 371.712409][T29750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.732055][T29750] RSP: 002b:00007f565f1a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.740546][T29750] RAX: ffffffffffffffda RBX: 00007f56606e5f80 RCX: 00007f566052df39 [ 371.748534][T29750] RDX: 0000000020000040 RSI: 0000000080045505 RDI: 0000000000000009 [ 371.756528][T29750] RBP: 00007f565f1a1090 R08: 0000000000000000 R09: 0000000000000000 [ 371.764516][T29750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.772606][T29750] R13: 0000000000000000 R14: 00007f56606e5f80 R15: 00007fff3d9d39d8 [ 371.780614][T29750] [ 372.066977][T29760] netlink: 'syz.1.6917': attribute type 39 has an invalid length. [ 372.094008][T29775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6931'. [ 372.313607][T29777] dccp_close: ABORT with 3412 bytes unread [ 372.589004][T29802] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6930'. [ 372.610812][T29702] coredump: 957(syz.4.6891): written to core: VMAs: 29, size 89026560; core: 60011182 bytes, pos 89034752 [ 372.698149][T29665] coredump: 954(syz.4.6885): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 372.727619][T29806] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6934'. [ 372.955031][T29831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6936'. [ 373.345791][T29854] loop1: detected capacity change from 0 to 1024 [ 373.372292][T29854] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 373.399416][T29854] JBD2: no valid journal superblock found [ 373.405377][T29854] EXT4-fs (loop1): Could not load journal inode [ 373.431714][T29854] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 373.456259][T29744] coredump: 970(syz.4.6906): written to core: VMAs: 31, size 91254784; core: 62116638 bytes, pos 91262976 [ 373.944157][T29773] coredump: 556(syz.2.6920): written to core: VMAs: 31, size 89157632; core: 60015390 bytes, pos 89165824 [ 374.259973][T29883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6949'. [ 374.274303][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 374.274317][ T29] audit: type=1400 audit(1727363522.979:11533): avc: denied { connect } for pid=29880 comm="syz.0.6948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 374.423275][T29897] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 374.597514][T29881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.606492][T29881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.808172][T29818] coredump: 787(syz.0.6932): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 374.908803][ T29] audit: type=1326 audit(1727363523.599:11534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 374.932678][ T29] audit: type=1326 audit(1727363523.599:11535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 374.956372][ T29] audit: type=1326 audit(1727363523.599:11536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 374.979948][ T29] audit: type=1326 audit(1727363523.609:11537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.121098][ T29] audit: type=1326 audit(1727363523.719:11538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.144858][ T29] audit: type=1326 audit(1727363523.719:11539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.168549][ T29] audit: type=1326 audit(1727363523.719:11540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.192200][ T29] audit: type=1326 audit(1727363523.719:11541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.215907][ T29] audit: type=1326 audit(1727363523.719:11542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29910 comm="syz.1.6953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc926df39 code=0x7ffc0000 [ 375.244733][T29863] coredump: 856(syz.1.6939): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904 [ 375.321623][T29919] netlink: 'syz.1.6953': attribute type 39 has an invalid length. [ 375.587771][T29929] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 375.949617][T29952] IPVS: length: 108 != 24 [ 376.589855][T29973] syz.4.6973[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.589920][T29973] syz.4.6973[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.649233][T29973] syz.4.6973[29973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.670839][T29982] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.755910][T29979] loop1: detected capacity change from 0 to 2048 [ 376.861141][T29993] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6980'. [ 377.111144][T29946] coredump: 804(syz.0.6960): written to core: VMAs: 29, size 89026560; core: 60007086 bytes, pos 89034752 [ 377.116189][T29995] loop1: detected capacity change from 0 to 512 [ 377.127228][T29916] coredump: 995(syz.4.6954): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 377.144999][T29904] coredump: 991(syz.4.6950): written to core: VMAs: 31, size 89157632; core: 60019486 bytes, pos 89165824 [ 377.174946][T29995] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 377.200381][T29995] EXT4-fs (loop1): 1 truncate cleaned up [ 377.208020][T29995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.345174][T22085] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.532566][T30030] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 377.650993][T30020] netlink: 'syz.0.6984': attribute type 39 has an invalid length. [ 377.672710][T21342] ================================================================== [ 377.680933][T21342] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 377.688427][T21342] [ 377.690758][T21342] read-write to 0xffff888101441a38 of 8 bytes by task 30038 on cpu 1: [ 377.698922][T21342] shmem_recalc_inode+0x36/0x1b0 [ 377.703886][T21342] shmem_get_folio_gfp+0x7ce/0xd90 [ 377.709025][T21342] shmem_write_begin+0xa2/0x180 [ 377.713916][T21342] generic_perform_write+0x1a8/0x4a0 [ 377.719224][T21342] shmem_file_write_iter+0xc2/0xe0 [ 377.724349][T21342] __kernel_write_iter+0x24b/0x4e0 [ 377.729501][T21342] dump_user_range+0x354/0x4c0 [ 377.734294][T21342] elf_core_dump+0x20b0/0x2360 [ 377.739086][T21342] do_coredump+0x186d/0x20a0 [ 377.743697][T21342] get_signal+0xdad/0x1100 [ 377.748149][T21342] arch_do_signal_or_restart+0x95/0x4b0 [ 377.753721][T21342] irqentry_exit_to_user_mode+0x9a/0x130 [ 377.759394][T21342] irqentry_exit+0x12/0x50 [ 377.763837][T21342] asm_exc_page_fault+0x26/0x30 [ 377.768722][T21342] [ 377.771053][T21342] read to 0xffff888101441a38 of 8 bytes by task 21342 on cpu 0: [ 377.778716][T21342] shmem_getattr+0x42/0x200 [ 377.783228][T21342] vfs_getattr+0x19b/0x1e0 [ 377.787654][T21342] vfs_statx+0x134/0x2f0 [ 377.791907][T21342] vfs_fstatat+0xec/0x110 [ 377.796262][T21342] __se_sys_newfstatat+0x58/0x260 [ 377.801317][T21342] __x64_sys_newfstatat+0x55/0x70 [ 377.806368][T21342] x64_sys_call+0x141f/0x2d60 [ 377.811058][T21342] do_syscall_64+0xc9/0x1c0 [ 377.815575][T21342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.821486][T21342] [ 377.823814][T21342] value changed: 0x0000000000000168 -> 0x000000000000016b [ 377.830932][T21342] [ 377.833260][T21342] Reported by Kernel Concurrency Sanitizer on: [ 377.839427][T21342] CPU: 0 UID: 0 PID: 21342 Comm: syz-executor Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 377.850045][T21342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 377.860129][T21342] ================================================================== [ 378.314474][T30038] coredump: 1012(syz.4.6988): written to core: VMAs: 29, size 91123712; core: 62108334 bytes, pos 91131904