last executing test programs: 2.374618082s ago: executing program 4 (id=745): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="00002db4d43e00000000000000003b7aaa18b4d625cf6e4f890200"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = dup2(r1, r1) sendto$inet6(r2, &(0x7f0000000800)="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", 0x1a3, 0x2400c880, 0x0, 0x0) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000040)='./file1\x00', 0x2000775) write$binfmt_elf64(r5, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x78) close(r5) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000440)={[], [{@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00\x8db\x183$\xe5M\xdd\xb5\xb3\xd0\xaf\xfeG%WI\x8a}'}}, {@fowner_gt}]}, 0x2, 0x50d, &(0x7f0000000dc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r7, 0xc020662a, &(0x7f0000000140)={0x1fffffff800, 0x800000000402, 0x4, 0x100}) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES16=r1, @ANYBLOB="e700000600000000a4d2126efd8fc5e536576f782006c56b831d308a5590a29bbe86aa19c4d7000089f70dfe6470d2f410b867", @ANYRES8=r5, @ANYRES32, @ANYRESOCT=r3], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000002c0)='GPL\x00', 0x0, r6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000000c060101000000000000000025000000050001"], 0x28}}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) socket(0x2a, 0x80000, 0x200006) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.284858544s ago: executing program 4 (id=746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket$kcm(0x11, 0xa, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0xc14002, &(0x7f0000000300)=ANY=[], 0x0, 0x729, &(0x7f0000001340)="$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") futimesat(r3, &(0x7f0000000000)='./file1\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") 2.252520554s ago: executing program 4 (id=747): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000006c0)='./file0\x00', 0x50) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x1, 0x2}) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.205611635s ago: executing program 4 (id=748): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x512, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x9, 0xb58}, 0x0, 0x90000, 0x1, 0x1, 0x8, 0x20008, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) r2 = fsmount(r1, 0x0, 0x8) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xce9, @private1, 0x1}, 0x1c) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"a2e3ad21ed0d09f91b5f090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f09006d090890e0878f0e1ac6e7049b336c959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3c2b802181acfc90c41bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78203cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e74130d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b12d94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14007693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1d0af76d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x100, 0x70bd2d, 0x25dfdbfd, {{{@in=@multicast2, @in6=@local, 0x4e22, 0xf, 0x4e23, 0x7fff, 0x2, 0x40, 0x80}, {@in6=@private2, 0x4d4, 0x2b}, @in6=@private2, {0x7, 0x8, 0x98, 0x9, 0x3ff, 0x0, 0x3, 0x7}, {0x6, 0x8, 0x2, 0x2}, {0x2, 0x4, 0x8000}, 0x70bd29, 0x3504, 0x2, 0x2, 0x40, 0x41}, 0x2}}, 0xf8}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r8, &(0x7f00000002c0)={0x2c, 0x4, r10}, 0x10) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r5, 0x200, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r11 = msgget$private(0x0, 0x200) msgsnd(r11, &(0x7f0000000200)=ANY=[], 0xff, 0x0) msgrcv(r11, 0x0, 0x0, 0xffffffffffffffff, 0x2000) msgctl$IPC_SET(r11, 0x1, &(0x7f00000005c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x0, 0x0, 0x7, 0xfffffffffffffffb, 0x1000, 0x2, 0x6, 0xa722, 0x7}) msgctl$MSG_STAT_ANY(r11, 0xd, &(0x7f0000000040)=""/88) 1.634863564s ago: executing program 3 (id=765): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x42) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000c"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) execve(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) creat(0x0, 0xdd) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 1.545624985s ago: executing program 0 (id=771): semtimedop(0x0, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0xce) (async) timer_create(0x3, 0x0, &(0x7f0000000280)) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) (async) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r10, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) (async) creat(&(0x7f0000000380)='./file0\x00', 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) socket(0x10, 0x3, 0x0) 1.491309997s ago: executing program 0 (id=774): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$RTC_UIE_OFF(r1, 0x7004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.461742087s ago: executing program 0 (id=776): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={r2, &(0x7f0000000640), 0x0}, 0x20) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) ioctl$SG_BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}, 0x8010) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) removexattr(0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r6 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000140)=""/67) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r7, 0x400, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000080000000000"], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) timer_settime(0x0, 0x1, 0x0, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") 1.461245167s ago: executing program 1 (id=777): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) r4 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 1.431939798s ago: executing program 1 (id=778): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x111}}, 0x20) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @val=@netfilter={0x3, 0x0, 0xa, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x804, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2b0, &(0x7f00000015c0)="$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") r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r8, &(0x7f0000000140)='./file1\x00', r8, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x63}}) close(r0) 1.200560121s ago: executing program 0 (id=779): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000015006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x401, 0x4b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24044004}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.067608873s ago: executing program 2 (id=781): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r1) 1.067117963s ago: executing program 4 (id=782): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x2000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, &(0x7f0000000000)) 1.060134733s ago: executing program 2 (id=783): sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) getcwd(&(0x7f0000000240)=""/75, 0x4b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a310000ffff0500010007000000280007800c00018008000140fffffff705"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1.014351754s ago: executing program 1 (id=784): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000440), 0x3, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) (async) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800bcb8010000003588000006400000181100c491bf0095a841bd9d766c70fd51121d67a807fb51b8075424d519b8cb496cbfa90663fbb6898a", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (rerun: 64) r2 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r2) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) (async) r4 = msgget$private(0x0, 0x200) msgsnd(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="a4437bf2be7c3fc3"], 0x8, 0x800) (async, rerun: 32) msgctl$MSG_INFO(r4, 0xc, &(0x7f00000004c0)=""/181) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r5 = socket$netlink(0x10, 0x3, 0x14) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, 0x0, 0x8844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 951.955845ms ago: executing program 2 (id=785): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, '.\x00'}) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f00000000c0)=0xffffffc4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x6903, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 951.654925ms ago: executing program 1 (id=786): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x45, 0x12}, 0x18) close(r0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x1) close(0x3) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x2, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x837}], 0x3}, 0x0) 860.865936ms ago: executing program 1 (id=787): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$RTC_UIE_OFF(r1, 0x7004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 765.820338ms ago: executing program 1 (id=788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x105341, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x26, &(0x7f0000000900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='bcache_write\x00', r1, 0x0, 0x7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r4}, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000000)=0xc) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="74726172aa36215293ea9abc3dc34181156e733d66642c7266646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',dfltuid=', @ANYRESHEX=r9, @ANYBLOB=',dirsync,appraise,smackfsroot=!}*$[[%,k']) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@grpquota}, {@bh}, {@quota}], [{@fsuuid={'fsuuid', 0x3d, {[0x63, 0x34, 0x32, 0x64, 0x33, 0xc0c42cfff374324e, 0x35, 0x35], 0x2d, [0x65, 0x34, 0x33, 0x37], 0x2d, [0x38, 0x37, 0x63, 0x38], 0x2d, [0x37, 0x30, 0x0, 0x38], 0x2d, [0x33, 0x36, 0x2, 0xb, 0x32, 0x37, 0x37, 0x38]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_measure}, {@seclabel}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r10 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) read(r10, &(0x7f0000000340)=""/72, 0x48) 436.032333ms ago: executing program 3 (id=789): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x3000046, &(0x7f0000000840)={[{@noinit_itable}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}], [{@seclabel}, {@uid_lt={'uid<', 0xee00}}, {@dont_measure}, {@permit_directio}, {@euid_lt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syzkaller\x00'}}, {@euid_eq}, {@seclabel}]}, 0x1, 0x581, &(0x7f0000000d80)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) 270.078526ms ago: executing program 3 (id=790): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000004, 0x4, 0x1, 0x9, {0x9, 0x0, 0x9, 0x3, 0x3, 0x3}, {0x9, 0x0, 0x0, 0xd, 0x9, 0x4}, 0x9, 0x7a2, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x101, 0x4, 0x3, 0x4, 0x7, 0x6, 0x6, 0x3, 0x8, 0x9, 0x1000000, 0x5, 0x7, 0x1, 0x81, 0x8, 0x5, 0xa1c, 0xd, 0x4, 0x80, 0x400, 0x72dd, 0x9, 0x8, 0xfffffff7, 0x0, 0x0, 0xe, 0x6, 0x2, 0x66, 0x9, 0x4, 0x40, 0x9, 0x5, 0xa07, 0xf, 0x200, 0x6, 0xfffffff8, 0xf, 0xffffffff, 0xa5, 0x5, 0x7, 0x81, 0x1b4, 0x80000000, 0x404, 0x3, 0x6, 0xc, 0x8, 0x221e0033, 0x5, 0xffff, 0x80000000, 0x1, 0x8f0f, 0x0, 0xffffff8b, 0x0, 0x0, 0x8, 0xfffffff9, 0x3, 0x7, 0x200, 0x2c, 0x7e309646, 0xfffffff9, 0x6, 0x10000, 0x39, 0x80000001, 0x1ff, 0x800, 0x8, 0x4, 0xffffffff, 0x81d, 0xf1d1, 0x4, 0x1, 0x6ab9, 0x2, 0x6, 0x0, 0x4, 0x535a, 0x40, 0x6, 0x9, 0x5, 0x3, 0x5, 0x5, 0x8bb6, 0x7, 0x3, 0xe000000, 0x200, 0x3, 0x0, 0x1, 0x6e, 0xa9, 0x193a, 0xb0a3, 0xd4, 0x81, 0x3, 0xc94, 0x1, 0xfffffffb, 0x10, 0x7fffffff, 0x8, 0x30, 0x1ff, 0x5, 0xb, 0x0, 0x8, 0x1, 0x3, 0xfffff001, 0x15b, 0x6, 0x3, 0x6cb, 0x9, 0x2, 0x3bd3, 0x7, 0x9, 0x7, 0xffff8001, 0x1a7c, 0x8, 0x9f, 0x2, 0x0, 0x1, 0x6, 0x8, 0x4de142e3, 0x2, 0x5, 0x1, 0xb, 0x6, 0x4, 0x6, 0x4, 0x5, 0x3, 0x6, 0x3, 0xd, 0x5, 0x0, 0x5, 0x5, 0x101, 0x5, 0x101, 0x1, 0x81, 0xb5e, 0x6, 0xff, 0x2, 0x19, 0xe48, 0xfffffff5, 0x1, 0x10000, 0x2, 0x5, 0xffff, 0x9, 0xe1, 0x2d, 0x10000, 0x80, 0x7, 0x80, 0x4, 0x13d, 0x81, 0x7, 0xc000, 0x8, 0x9, 0x5, 0x81, 0x4537c492, 0x8001, 0x73, 0x401, 0x2, 0xf2ea, 0xa1e3, 0x43294b6d, 0x3ff, 0x5, 0x89e, 0x5, 0xb, 0x8, 0x0, 0x200, 0x3ff, 0x0, 0x4, 0x0, 0x100, 0xf, 0x5, 0x3, 0x40, 0x3, 0x1, 0x800, 0x400, 0x7, 0x9, 0x7, 0x0, 0x401, 0xfffffc01, 0x1ff, 0xffff2546, 0x9, 0x9, 0x3, 0x80, 0xd, 0x3, 0x8a, 0x88, 0x8, 0x9, 0x3ff, 0x3, 0x3, 0x7fff, 0x50000000, 0x5, 0x3, 0xff, 0x1f, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x6f93, 0x101, 0x1, 0x6, 0xda, 0x5815c37c, 0x4, 0x2, 0x1, 0x10, 0x2, 0x2, 0x14, 0x80000000, 0x6, 0x1858, 0xed5, 0x9, 0xd0, 0x8, 0xfffffff9, 0xff, 0x67ef, 0xfffffff7, 0x4, 0x7, 0x8ed1, 0xa43c, 0x9, 0x3, 0x8001, 0x9, 0xffff879c, 0x5, 0x0, 0x5, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x7, 0x7, 0x2, 0x6, 0x3, 0x7, 0x7, 0x10a, 0x80000001, 0x401, 0x3d6, 0x7, 0x3, 0x8, 0x0, 0x1, 0x2, 0x1ee4, 0x1, 0x0, 0x7, 0x7, 0x101, 0x0, 0x4, 0xb50, 0x7d, 0x80, 0x7, 0x3, 0x2, 0x0, 0xfffff510, 0x80000001, 0x3, 0x4, 0x4504, 0x8, 0x8, 0x8, 0xb73, 0x1, 0x2, 0x7, 0x4, 0xebf, 0xf4, 0x1, 0x48, 0x1, 0x3, 0x10, 0x1, 0x2, 0xd, 0x0, 0x6, 0x7, 0x6, 0x7, 0x0, 0x39, 0x2, 0x4, 0xa829, 0x6c52, 0xffffffee, 0x5, 0x1, 0x200, 0x8, 0x5, 0x346b, 0x1, 0x1, 0x7, 0xa, 0xa6, 0x5, 0x0, 0x8, 0x8000, 0xffff, 0xfffffffc, 0x3, 0x8, 0x6, 0x9, 0xcc, 0xad0c, 0x37, 0x9, 0x1, 0x6, 0x9, 0x1, 0x53, 0x0, 0x6, 0xe96, 0x6, 0x0, 0xfff, 0x6, 0xbb4, 0x0, 0x81, 0x6fe639b1, 0xfff, 0x9, 0x0, 0x6, 0xb, 0x8, 0x5, 0x85, 0x4, 0x2, 0x0, 0xfff, 0x6, 0xd, 0x10001, 0x8b, 0x4, 0x7, 0x1, 0x3, 0x7fff, 0xfffffff9, 0x6, 0x0, 0x653, 0x4, 0x688, 0x10000, 0x1, 0x8c2000, 0x275, 0x1, 0xa718, 0x7, 0x4, 0x8, 0xfffffffc, 0x0, 0xe, 0x9, 0xffff, 0x10001, 0xd45, 0x400, 0x7a, 0x93, 0x2, 0xea, 0x1, 0x400, 0x80, 0x5, 0x1, 0xf705, 0x8, 0xffff, 0x3, 0x1ff, 0xb4, 0x0, 0xd0, 0x553, 0x9, 0x4, 0x10, 0x6724, 0x4144, 0xffff, 0x9, 0xfffffffe, 0xb2, 0x101, 0x7, 0xcee, 0x6, 0x6, 0x6, 0x4, 0x7, 0x10, 0x7f, 0x400, 0x80000000, 0x80000000, 0xff, 0x6, 0x7, 0x2, 0x40, 0x6, 0x101, 0x8, 0xdfb6, 0x2, 0xb, 0x8, 0x6, 0xb41, 0x0, 0x9, 0x80, 0x0, 0x2, 0x4, 0x3, 0xc]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) fcntl$notify(r2, 0x402, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_open_procfs(r7, &(0x7f0000000000)='net/fib_trie\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x4ab}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 249.074746ms ago: executing program 4 (id=791): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) fsopen(0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x11, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0xfffffffffffffebc, &(0x7f0000000280), 0x1}}], 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1000, 0x1) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000140)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(0x0, 0x80ff, 0x88) vmsplice(r6, 0x0, 0x0, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a17d71010db9c0410eb46a0418cff491679739e1b828aa198655dd4600fe48d8f9b8b431ca9b06b734d87927f0df37888360793802a158c6aec2b89cf1007df57258"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) socket$inet6(0xa, 0x80002, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 183.941687ms ago: executing program 3 (id=792): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") (async) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$eJzs281qE1EYxvGnH9ov20Sr1VbEF93oZmjjFYTSghhQaiN+gDC1Ew2ZJiUTKhGx3bn1LoTi0p0g3kA3XoELd9247EIc6UxskzaiFXRs8/9tzhvOPOGcnDPhLGY2775aKhUCp+DW1N1l6pX6tSWl1a0exboabXdUH1ezNV0dzX26cPve/RvZXG5mzmw2O38tY2YjF98/ff7m0ofa0J23I+/6tJF+uPkl83ljbGN889v8k2JgxcDKlZq5tlCp1NwF37PFYlByzG75nht4ViwHXrWlv+BXlpfr5pYXhweXq14QmFuuW8mrW61itWrd3MdusWyO49jwoPAr+fW5OTeb9Cjwd1WrWXda0sS+nvx6IgMCAACJanP+X+P83yk4/3eC7fP/g8b924rzPwAAAAAAAAAAAAAAAAAAAAAAh8FWGKbCMEz9aI9J0Rs+YePzgKRBSUOSTkgaljQiKSUpLemkpFOSRiWdlnRG0piks5LOSRpv+q6k54r9kln/gSSnjCbc/52N9e9sTS/u9ktLL1fyK/m4jfuzBRXly9OkUvoarWVDXM9ez81MWiSt80urjfzqSr6nNT+l1PaGaZefivPWmu+L9t1OPqPU9gZrl8+0zffryuWmvKOUPj5SRb4Woz25m38xZTZ9M7cnPxFdd9Q5tqPt+jnOz/rj/AH2x57ft1cTvcnOHVJQf1Zyfd+rUlAcheK1/othHP4i6X8m/Au7i570SAAAAAAAAAAAAAAAAAAAB/GnTwiGq3H+dy5Oeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOz1PQAA//+5gF2o") (async) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14d5be, 0x21) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000800004e00000000000000bd300000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) (async) fallocate(r0, 0x1, 0x0, 0x1001f0) r1 = creat(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f51000000000000000000000000000000000000fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9560df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6eeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"], 0x0) (async) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) (async) getpeername$l2tp6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000100)=0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) (async) fallocate(r2, 0x0, 0x0, 0x1001f0) (async) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r2, 0x8008f511, &(0x7f0000000040)) pwritev2(r2, 0x0, 0x0, 0xfff, 0xc, 0x4) (async) rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') (async) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) 135.030348ms ago: executing program 0 (id=793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r1) 134.832648ms ago: executing program 3 (id=794): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 121.359518ms ago: executing program 2 (id=795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 106.531328ms ago: executing program 3 (id=796): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408003, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x1, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet6(0xa, 0x80803, 0x87) socket(0x2b, 0x80801, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) time(&(0x7f00000001c0)) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x46) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4604070003050000000000000003000300060000000903000200000000fdffffff0e00000000402000"], 0x38) close(r5) mkdirat(r5, &(0x7f0000000100)='./file1\x00', 0x66) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) 77.717268ms ago: executing program 0 (id=797): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000140), 0xc}, 0x2, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='block_plug\x00', r1, 0x0, 0x8}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6b, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) sendmmsg$sock(r7, &(0x7f0000004880)=[{{&(0x7f0000000500)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x40e2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000340)="8bdc938ee634cec043ea", 0xa}, {&(0x7f0000000580)="94d87ec07eb1e9e6a1c0f9b964d8671e545bdae76f26726f1d34a6ecfb8ea830e705b455e766c2254d8493aec9c7aaf18e47dd01fd67307d76f7fc8cbe9a9296e6ca727dfb001219e35b2f71b04dd86197f5c1c4aa6978e4db85545ad267afce03ad65d912d4850f41666e5498e2ca", 0x6f}, {&(0x7f0000000600)="84d812a601c1219fd9b245ac4e8845718c4798eb318715ae58a1bce65527824f7bf4ffc8f9982c893918245138e605de119242ed8668e6c7bbd96301c2939e304cbbdb5e7ab0195b02f604270dd571407d2472b5df6573b53e820611fdccea77baf2aa04f3608625a2c13b05b2dcfe9b1d37955ff2809f32a8e41806cd98c5dc10bb567954a4a0d3bbb0aa823bc8e76ae4", 0x91}, {&(0x7f00000006c0)="2f65557c085c1da49e62e295e6d2e4a3fabb09e47242a540e6dcb4afacb61defecfb5144cc0c9a7e396cb566e2e82e1d1e8a97c9395e2404a923fcbc5ca0e018c5cb4b1e81f74e2a68d1d1d34ba117446a35335c4efe0fce1e72260a524edb9c54881c5bc4f631b85daf6151ccd1d370f6431c73e9f159a5ca96d43f1d0d5bb16f56487272156c707712b6e7a5e28dcc7dd13d808193a6345a8a05bca4ab1c50517d472035f73f605508d5603dcb7846062632d6980d97389441", 0xba}, {&(0x7f00000008c0)="93ca019e3228c389318022a2f0d62c4a65ec92a8ddfb325e8b46e8cbb2b80b352e0a83115940afb4a9942e907ec28f9e04207ca5858983f58853105e00db936174ee4bf37939d4b086b8ff594134bf6a7eb67e3d29f97fa7f6d2d0f952755427f5c5b38ebbd3fbfa1ec1e7a80bb146e96d9c8be5dbd2f69753376fde9d86040716f142bd2b06d8993c37e878c199064738346efff9990b616c93c399fdaa4f93ca53002b0cf62d15b2d777ed72ce00f2c2754d0b71bcc347bf84d9e944b516a6b338959543c7b022b2b9039659ddb2411b748c2ee64e44ff31b0ff075ddd2965a0e3a0e6612c6df131e17f96f17fc7804e14", 0xf2}, {&(0x7f00000003c0)="039c7b085eef2f58b63b394f9ffd55488ca02a30ef62d5e0d34fb20439cbc2c0d10176cedecfaae8626374e251", 0x2d}, {&(0x7f00000009c0)="8c53d41b719b104e02330035f6031b3de379c8d8facd15955dd322e1f2a6e58b4d455c598915a4fd30274f3cd369fb0dd43ccbb5aec5d5cb82b2e3dc3396e3b0df3802ae08d09de4c93047d2f9b91414e175bd362473c3a6a7ce7d7ecd8f0c840e7bdbaf5a0507a47a97bf5d9045e75dfec18944bf73b05f2b7d9658f364d45475a1687f1032257c929022786d4dbb35f0696fbbf3bd54a2227ab70fb161495db589d0e23ebd469eab97fed5d156202d0d010e46b7622792153a532134", 0xbd}, {&(0x7f0000000bc0)="05cf3b4d5b18d0d83128cb7ce54ed51abd7b6c0100fff1bcfcd2155ceb681d5289c892acc1bc9e91aa820c0dc0964072bb769283d5baf9aa20f15c0db5a9220a334417e23f55e161d0074602afceee573e0de77b4fcc26160ba7de1c864881625e1871073950d6eaf69b9e9b27f9cd1761e552f4921e576ed723", 0x7a}, {&(0x7f0000000440)="729c24d15d6e4bd850b5acf7cc18d06edb74dfe33ec34897d48256f0ff5e51550b1354c4951f5165b4f2853646d39efb7214950804042ebfb905e237db", 0x3d}, {&(0x7f0000000c40)="84bf2032af47414418b5e51e95fb4dd6318ecdd41d983a4f0a849bd1ba86e82bfc088f30eb8831a29bc905e80be7549b963d1c534cdd08511c5bcca2b2aeef178f822605a73d452e2f23c0995d73878f3333f185673bcf11f5157a27c4f31e7c115acc47d32d4379ee72bfbdee948baaf7d9d915d0871786aa0153a7513644a356d90822dd284b876c13d65c610dd19ae48f704f3276c7e246b3be8a35a72aa296301bc4303fc8fa", 0xa8}], 0xa, &(0x7f0000000dc0)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffc0}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}], 0xd8}}, {{&(0x7f0000000ec0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x40}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000f40)="8c6e191f7a4a4f585928c644e0fd61da645d8e4363b636098717df18a491945dfe65f5061ae4379802722fe4bae26d06d6cca00aedef4ecb188c80a13f10e904ed22aca4654171d4668ab4e3a71b4b972efb370e58c1d56362103e35feed80e88febfdb9df8e4f3e30b566ec6388a992ede64c013772a80b493c606b38464b35b78e2001cd90943a75fe46edf3548e63e6b3c5d5cc48aceba626089ac384e7093124dfadafff2911af83410bf15e943f8a80d2e0b21ee4e755b18d7878b0ed9731323fc8eba3ba77f3e8e15bce0e", 0xce}, {&(0x7f0000001040)="86e18c95fa530f323eabd4d9f0fcd04b10ecfc50111f1c1a98dd9d080a66b23d2a6ca2fce4091f566e5e37dcdfd80e1a32a9010abe2e2b680dbc9ed6d3a70f3f94a769f56541eaf7f450bf12f85f472d59efac9bd28e59c4a15552b4c963f1cb4a3d46bcc6db03b0d2e00a5899c5abc91f63758d43df4d2a6ae18bb593d57f233f876096eb77b8a8048527f83d234f9c5cbb", 0x92}, {&(0x7f0000000840)="f9b06f11b9c2f51f203030d030156ec5ade5397e8c987a315cc72b28365685d243629131675c74c77736bde831bccbd3789f22c999dc2a0fa7db41", 0x3b}, {&(0x7f0000001100)="3099ea5f9a963d971cea8a8e4776530fd16f9987843712743fe2e4fb7b5991c7f52c46a9da732e9ed344f7c1c475ab2d3aab61a80c7f92d834a824d0d4a90c8c8de9a1a44676e102aee113daf897985810276d8129eb32c22d78599928040cb256bb6e3ec78010f568f8a3084de32d8fbfb09cba225cbe78155bd28130108b0f12828b71d5358cce006cb1eb5d70b056acc6901881b987548522efaa1e1865c080d4d647b219bf68a459cc7d04ff040b9812cdcf837fbf51d4ab6262ed3d5e01abe544d0e06e4966245a1788ac2aa01fa74a4580c84f295e54897c1e9526d74afaa5", 0xe2}], 0x4, &(0x7f0000001240)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa1}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xa8}}, {{&(0x7f0000001300)=@ax25={{0x3, @default, 0x6}, [@null, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001380)="fde875d2e2c75ac93a9e378fe63bdf66e51e79ae50e57679becfe5d6a7526c862cc30c0a849a7fd9d43ad548ca4e11a58795ea44ffd844475839381d046bf62321c2b8e41afae4bed13ba2c4f054f988a5558fd53a8cac18327a2890a203b78d8614a86407129c21096691bdaf810a65befc3cfcfc49", 0x76}, {0x0}, {&(0x7f0000001580)="a4e0ca228275f550e3affea47d1bc54433926a11999cb76c5e299bc15ba4cd03e9a95a9ef84b05e748c9839da859b0a0fb181ee09b7d01c9c14e98532e5c55379681a2424c376f089f402f9796d49e4dfa897cb072bf996fde08e62e90112331bb52e716b7f1c0bd5417e0350605be333eacc2daeb17e47d371ef2cccc9d16544ae5bae7c49422350f35dbec35aae57c0e149e2a0bab0ad8349184b846d1d7359395a27d28d64d0c95e3218407b885fe31e13c111c14c8baadc606b994eb85b4cbdd3dc0bf658060929bb733f2f7fcebb282a4bad6f25ea67151ff2dc7106fffb592f28301814f25c2aa722601176299", 0xf0}, {&(0x7f0000001680)="ed67e61d5c2742a11815adbd98015602d9d234f4a548862272349da5ca2d03e27608c646d6be2d1522ff95a4726ed3b1115cde1d7fbc8887f04bd7c36329c1f3544455fb5d50aa10fe85e08d446d2e3c63b43adaf0dc95f506b1fac2aea123189f7ff51698df4c81280d3eab75c6f7e720b66f0c0948ab446acb632a9d76eb85853665bafea9788edd1e7bd8a0fb9975fc7923", 0x93}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="af531e718e50a1da1d26186b987665d78b15b6418dd29c80bf8ba90872e9c7c37874ada525747f4649e90ee66c488d46ad9549b03a344c04c2e0fe53bfccde9e3d299f005b7bf1174f03299ef8ea30b9708910c7fa480beaa140bd3189b865d1e230ce4351e79f0b82ca3bb29543ead22384cd81bccc925eafab451917b371d299e0a50d6e6b8dfd41b9c8c1e0f8fd02297c43d284", 0x95}, {&(0x7f0000002800)="9e1993df95218119fd21c32f4c701f78267783af06e28e2b870347a01a639be5c15a03bcbd1ee9e02ff95c269770c5ed0d6fe0415b5522ea8a627f628468acd280125d20e7058e62ff01e5b5553b667906f0e6896d0a2a7e697632e15779746ba9100508ce55eeb1bf0b216061515d284f271a202a02e627899c04aa7662874f49a204c5769d99821ab09a97d644732467a13411cb240a2144a311ea7fc1c9bf42c26463169d", 0xa6}], 0x7, &(0x7f0000002940)=[@mark={{0x14, 0x1, 0x24, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x9d}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x90}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}], 0xd8}}, {{&(0x7f0000002a40)=@l2tp={0x2, 0x0, @empty, 0x3}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000001400)="c0a9216f3c7100f12f70cba62debb42db7089d260ebd0e4167341e7dda77f8cf5a01fbe93cd4ae4b42b2d1f34effefea", 0x30}, {&(0x7f0000002ac0)="74720d6557e2fdf70974827472b8632293733960976e0379f02a8a3f9c7b29931f8baf46dbe40318f4fee4702e223988c12d682dc5ba3e64a61b682e16ba0376aaf6950907c39e7cc75d8132eff6108912d5d377c79900fef949c54d1ebc58db4aeb47bca1a1427f8f6b4d16bf5f237a263bffd3e0bc3985f27a43dcad4b7aa207f90a6e7608dbf6739605", 0x8b}, {&(0x7f0000002b80)="37e784477c0e8988a2d3cc04cce02efde4ab5583cb722e88510aa6b23b8176d3000b8cbfbc7713a7a5473d0e600b45b68470ee43258086401cf8a9836a97a9f1e484505ded0806e4857a4bfb8eee41ef8d87c0ad6511014caa61e2f631145326a239569698ced53caf40091e1b3429581366cccb6da3f19c2a52dd76193aa2806dbf5e98f6dbe714ae8f55b920c88d8a6cd4f52c54df", 0x96}, {&(0x7f0000002c40)="917731e453017c7327954807f2185f2d0cbf93177750c343baa1bf4f2c5c122b5edccd93ecdd1d9c91a131f9dcaa22273a6189b885eead15f96a42ce2f9d5e09c6ec06b8a68e7a127ac5d54ec61f260aee520f7daa37a664b2dd263de48936f7a0fef96a29661a55a52171703c4fce824f611ca60aad78ec259844539e6febdafffb1c2be70059ffcbd3df1fcf1ca4ead959ef543f47ed70998da76f570fe9ec186ba4af941c10db8e9132e6376a0601e5b8ec46cffabf8ecdc0ae1662acf16487fd1aeb3c058faf61ff146a5f1169183f764b026c9ef9dbd7", 0xd9}, {&(0x7f0000002d40)="b3a17ff9fd156b5b5ecfd282de189fac874a6bff64d365399ed6998a1c171cefa12d145ae83d45a7518936abdb11662d460eddd17fbf62e6120b09199935535649594d7eabe7368be7d251bf2df7766d9a6e0fe41facdcbd7d16b2a81104af9750bfa71931afe4fd", 0x68}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002e40)="a2659da0d8faf076465421b80d3105751c29aa223fffed3680abcc702e26df4653039fc79a9ebc672781e36990009bb67a7700ee4a49ade34e9601be02fefb6bbb1a376fe9d448c1694aa459354ab61a9bc0705e247944a706139e6a6897d58c7a5013496edf93ae815ce096b2e2889ca05d3f46fc757cbd91f16532a613143dbca0eb4ec5308ccafa1939e93b05e4ca8698e76373bef2b1cd793f9e0467969c8f7c5b", 0xa3}, {&(0x7f0000002f00)="0c7576a015544271223d1f32c86664a9e83efce28fba1ddb7a0425f585b28ea6e3cb33e94016be6b8877772f92b93fb376f0773938ae", 0x36}], 0x2, &(0x7f0000002f80)=[@txtime={{0x18, 0x1, 0x3d, 0xd33}}], 0x18}}, {{&(0x7f0000003000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x1, 0x4, 0x2, 0x4, {0xa, 0x4e20, 0x0, @local}}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000003080)="e52f72b015ca26776c4f53059e7ffb32319493259a2728acd365683d4416b86c41c99b58794136d6da0067f8c4b6d3fb1f05e1bae67b4c7689c1513db9031c46bd127004860be96dd8fdd7e777353cd453f8d8f02bc1955d9222c83f6951583f5767db2b8bc54dc14cb8b1fa7339b40ee40399a23dd13dcdae47f11466af37920e06f49f66475f32dbbb0a93b0f0e3d4a309748a38ca4c1c952f0ef7a21e87de899066d1e7ea3a8cc0ce083879f077bd80f2d68998abf9b5ff785c1533148522889882c3ac7e06a3f225613b88c1c4d0", 0xd0}, {&(0x7f0000003180)="63ca36fd3526cf64edf989a08923999bb893bf5574b4922135c26085382b030891ed3df6f0b212e7d451ea2e15f5d056c082078416351eec80222e3d224653c9e1c0f9ead2532acd69b84691ffe2c9e552ccb358d890d090a68f14be2610e42f38f8513c264d215588b0d2e7d9703c2e8cdd257a39ac096d1eade829fc8c11160fcb20aaa6d5ff7ebb500835d78bce70d8de760b4241e1b9c9fe6b5053ab1282139b75999682b6025654a8836b297fc40a01624a8175b45a8f7ecf460d1e895607e8d526f2e15c18ea2a63d36b704466b3d0343fc8da2720732949329c1c4631511fad1ac656bae84122b4f5", 0xec}, {&(0x7f0000003280)="8bbeed0c6aeb", 0x6}, {&(0x7f00000032c0)="9cb3377c1cbf1815dd0973b4131969c6768fca33e60d4bd7b4ca2fe0e67423b2f4a716641a8d488e216b2166393fe77b624c80cc0eb0a3329b4a2cf16ce1294c1f82945b5ee417fddcc90f8e4e18a1d42b66dbba36865fb2007b22ba7f986b89cbed2a4d3bfa6d474abf032243a83c5c4650b6d994e893f49bae2aa168fb1769261d8f7561e6d770b8640c240d3f5bdadd2fd8b80f2bffc22bdaf29816f528051c3b4c3a676b1ef30a000722dea8a91efddfb7d8911d466afb55d14c7496eaaec70c27a3a3700a3aaa854ed8d343c6f114939b1504208f8ddd13d143fef0b8438f2066372764483592756692d1eba26789", 0xf1}, {&(0x7f00000033c0)="8903f771bd176d6e677e08b55b7bd7c2da5f21a9c98f2ada183258e0584cebc98b22b3b77b2469a58fce23fd7767729ed6ef82d6107e164b7615821a54122ff5edabf319760ba5ae26084720f552c43e4d01872ccb4743e2f0e53e3e7f3408b7e3f766daa95ad0b2817479dc5ced2babe6db73c37d377858e14ffc5883548db471d49625da091577", 0x88}, {&(0x7f0000003480)="721ea7d6ef0597f125e2d8a41a537be2ebba114ca56a323d98f2bfe9225a2b2bdcfd0b6cfaff62f5e18225c4c4ec40c392bd63cc4b1d305070c0be58e0b3af3950ae129edde8764d7e634d91f89996eb735e99f40013df9f9618d0008885ddb1e59ffcbc98a216369f59febd7818fe6f749497563dc2f5d521140980a8d4b2a56c66f515d5349c860b0d33b103f11d815e0904fe42ec59232caa2bdaab4fcd8de75f2893f8e81479bb9f504b5b87ece60d27da3ade0f1b5635a645bedf269e35f6449e44cb1134dd4539", 0xca}, {&(0x7f0000003580)="04e1f08943a94820c5538c4519d7b12f49bcd6daf2b7b02476fb0c43e41c0fe3cbea3af06b272011b931b3278eac175fcc0501f0ff99b9a841b962b790fc6f4eb7be512cbf9e74e49fa8c98d6f0fc911fb7cc7026e4f6caa89822f1962024d373bfb005742d8c6a3805f14f5", 0x6c}], 0x7, &(0x7f0000003680)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}}, {{&(0x7f0000003700)=@nfc={0x27, r9, 0x0, 0x1}, 0x80, &(0x7f0000004800)=[{&(0x7f0000003780)="d46e41048cafe0d2bda9e1e9df211b2c5f517ed1a24c1dcea7f37b078160de7f259adbcb486b31a7a1b2f694ceb2f903adef16bfa17afb3e971877a256ce71934a4c3f2f762e8e1261435851e9ab0cd78fcbc906bfbbc627cecf09a69a5ca6928deb0d974c041a6c227fe7fd55d443b2ca61a19d2f26dd813b472ab287684dc29fb2efe7b157dec6f7013b07c3a6a4f88e744f1f5603", 0x96}, {&(0x7f0000003840)="5435d3d9c336aa9656ffdf467f83dcc1e527d594d4b3f1baf639bb473677064fa1ef5dd97332b5cfacb5d75c446d84ad7ef322922dd5fdc1935ab04de40d9c22dbdbb053a4463bb871526229277654f1c9b8a14cc1d2a84275d69cba23dc93798824834316e4475039f2bcb59a8171b42eb9825b873e10831531d3c1f07b2cefeefa52a99e7afbdf0e8ace7fb5eafbb61d40fa6acff2d619bc854f2ae25f31bb81518cad9fb281", 0xa7}], 0x2, &(0x7f0000004840)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}}], 0x7, 0x844) ioctl$SNAPSHOT_FREE(r0, 0x3305) 76.734409ms ago: executing program 2 (id=798): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002b80), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$RTC_UIE_OFF(r1, 0x7004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 2 (id=799): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6(0xa, 0x3, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@local, 0x0, 0x3, 0x4e20, 0x0, 0x2}, {0x0, 0x15000000000000, 0x0, 0x2, 0x8001, 0xffffffffffffffff, 0x0, 0xd3d}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x4d6, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1}}, 0xe8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r4 = syz_clone(0x20180080, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0xee00, 0x0) tkill(r4, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) clock_settime(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) kernel console output (not intermixed with test programs): _call+0x2920/0x2fb0 [ 51.517358][ T4036] do_syscall_64+0xd2/0x200 [ 51.517380][ T4036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.517412][ T4036] ? clear_bhb_loop+0x40/0x90 [ 51.517457][ T4036] ? clear_bhb_loop+0x40/0x90 [ 51.517486][ T4036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.517514][ T4036] RIP: 0033:0x7f5945d6e929 [ 51.517533][ T4036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.517555][ T4036] RSP: 002b:00007f59443d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 51.517579][ T4036] RAX: ffffffffffffffda RBX: 00007f5945f95fa0 RCX: 00007f5945d6e929 [ 51.517660][ T4036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 51.517674][ T4036] RBP: 00007f59443d7090 R08: 0000000000000000 R09: 0000000000000000 [ 51.517688][ T4036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.517700][ T4036] R13: 0000000000000000 R14: 00007f5945f95fa0 R15: 00007ffd06255758 [ 51.517723][ T4036] [ 51.747342][ T4043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4043 comm=syz.2.143 [ 51.797351][ T4045] loop1: detected capacity change from 0 to 2048 [ 51.844033][ T4049] binfmt_misc: register: failed to install interpreter file ./file2 [ 51.856633][ T4045] EXT4-fs (loop1): failed to initialize system zone (-117) [ 51.863992][ T4045] EXT4-fs (loop1): mount failed [ 51.935305][ T4053] loop1: detected capacity change from 0 to 512 [ 51.943784][ T4053] EXT4-fs: Ignoring removed mblk_io_submit option [ 51.959381][ T4055] smc: net device bond0 applied user defined pnetid SYZ2 [ 51.959782][ T2994] udevd[2994]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 51.975345][ T4053] EXT4-fs: Ignoring removed bh option [ 51.983392][ T4053] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 52.139799][ T4067] loop2: detected capacity change from 0 to 1024 [ 52.146867][ T4067] ext4: Unknown parameter 'uid<00000000000000060928' [ 52.177489][ T4060] loop0: detected capacity change from 0 to 1024 [ 52.191696][ T4060] ext4: Unknown parameter 'smackfshat' [ 52.196450][ T4071] atomic_op ffff888119176128 conn xmit_atomic 0000000000000000 [ 52.243727][ T4077] bridge0: port 3(team0) entered blocking state [ 52.250232][ T4077] bridge0: port 3(team0) entered disabled state [ 52.257415][ T4077] team0: entered allmulticast mode [ 52.262570][ T4077] team_slave_0: entered allmulticast mode [ 52.268551][ T4077] team_slave_1: entered allmulticast mode [ 52.275622][ T4077] team0: entered promiscuous mode [ 52.280838][ T4077] team_slave_0: entered promiscuous mode [ 52.286670][ T4077] team_slave_1: entered promiscuous mode [ 52.292841][ T4075] lo speed is unknown, defaulting to 1000 [ 52.298770][ T4075] lo speed is unknown, defaulting to 1000 [ 52.304855][ T4075] lo speed is unknown, defaulting to 1000 [ 52.311166][ T4075] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.319843][ T4075] infiniband qyz2: RDMA CMA: cma_listen_on_dev, error -98 [ 52.350830][ T4075] lo speed is unknown, defaulting to 1000 [ 52.358805][ T4075] lo speed is unknown, defaulting to 1000 [ 52.364908][ T4075] lo speed is unknown, defaulting to 1000 [ 52.371118][ T4075] lo speed is unknown, defaulting to 1000 [ 52.379076][ T4075] lo speed is unknown, defaulting to 1000 [ 52.404140][ T4083] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.480977][ T4089] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.655275][ T4104] syz.2.163 uses obsolete (PF_INET,SOCK_PACKET) [ 52.665581][ T3153] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 52.759099][ T4112] __nla_validate_parse: 6 callbacks suppressed [ 52.759171][ T4112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 52.796206][ T3440] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 52.804140][ T3440] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 52.816710][ T4114] loop2: detected capacity change from 0 to 1024 [ 52.823990][ T4114] ext4: Unknown parameter 'uid<00000000000000060928' [ 52.932858][ T4120] netlink: 'syz.0.168': attribute type 27 has an invalid length. [ 52.942312][ T4121] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 52.965134][ T4120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.973572][ T4120] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.983348][ T4120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.999143][ T3624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 53.059694][ T4120] lo speed is unknown, defaulting to 1000 [ 53.068017][ T4124] FAULT_INJECTION: forcing a failure. [ 53.068017][ T4124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.081166][ T4124] CPU: 0 UID: 0 PID: 4124 Comm: syz.2.170 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 53.081217][ T4124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.081311][ T4124] Call Trace: [ 53.081319][ T4124] [ 53.081329][ T4124] __dump_stack+0x1d/0x30 [ 53.081355][ T4124] dump_stack_lvl+0xe8/0x140 [ 53.081380][ T4124] dump_stack+0x15/0x1b [ 53.081399][ T4124] should_fail_ex+0x265/0x280 [ 53.081496][ T4124] should_fail+0xb/0x20 [ 53.081612][ T4124] should_fail_usercopy+0x1a/0x20 [ 53.081679][ T4124] _copy_from_iter+0xcf/0xe40 [ 53.081713][ T4124] ? __build_skb_around+0x1a0/0x200 [ 53.081748][ T4124] ? __alloc_skb+0x223/0x320 [ 53.081860][ T4124] netlink_sendmsg+0x471/0x6b0 [ 53.081888][ T4124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.081913][ T4124] __sock_sendmsg+0x145/0x180 [ 53.081945][ T4124] ____sys_sendmsg+0x31e/0x4e0 [ 53.082058][ T4124] ___sys_sendmsg+0x17b/0x1d0 [ 53.082163][ T4124] __x64_sys_sendmsg+0xd4/0x160 [ 53.082193][ T4124] x64_sys_call+0x2999/0x2fb0 [ 53.082344][ T4124] do_syscall_64+0xd2/0x200 [ 53.082426][ T4124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.082453][ T4124] ? clear_bhb_loop+0x40/0x90 [ 53.082610][ T4124] ? clear_bhb_loop+0x40/0x90 [ 53.082638][ T4124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.082666][ T4124] RIP: 0033:0x7f463a49e929 [ 53.082689][ T4124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.082761][ T4124] RSP: 002b:00007f4638b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.082784][ T4124] RAX: ffffffffffffffda RBX: 00007f463a6c5fa0 RCX: 00007f463a49e929 [ 53.082800][ T4124] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 53.082815][ T4124] RBP: 00007f4638b07090 R08: 0000000000000000 R09: 0000000000000000 [ 53.082830][ T4124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.082923][ T4124] R13: 0000000000000000 R14: 00007f463a6c5fa0 R15: 00007ffe15360c28 [ 53.082947][ T4124] [ 53.320634][ T4128] loop1: detected capacity change from 0 to 164 [ 53.342007][ T4126] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 53.359186][ T4132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.410444][ T4136] netlink: 'syz.2.174': attribute type 4 has an invalid length. [ 53.435592][ T3624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 53.447642][ T4138] atomic_op ffff8881198c8528 conn xmit_atomic 0000000000000000 [ 53.584477][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4146 comm=syz.2.178 [ 53.598502][ T4146] loop2: detected capacity change from 0 to 164 [ 53.605029][ T4146] iso9660: Unknown parameter '@' [ 53.613268][ T4151] pim6reg: entered allmulticast mode [ 53.624803][ T4146] tmpfs: Bad value for 'mpol' [ 53.626859][ T4155] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 53.693022][ T4151] pim6reg: left allmulticast mode [ 53.738012][ T4153] loop4: detected capacity change from 0 to 764 [ 53.768969][ T4170] FAULT_INJECTION: forcing a failure. [ 53.768969][ T4170] name failslab, interval 1, probability 0, space 0, times 0 [ 53.781712][ T4170] CPU: 0 UID: 0 PID: 4170 Comm: syz.2.186 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 53.781746][ T4170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.781828][ T4170] Call Trace: [ 53.781837][ T4170] [ 53.781846][ T4170] __dump_stack+0x1d/0x30 [ 53.781872][ T4170] dump_stack_lvl+0xe8/0x140 [ 53.781896][ T4170] dump_stack+0x15/0x1b [ 53.781914][ T4170] should_fail_ex+0x265/0x280 [ 53.781962][ T4170] should_failslab+0x8c/0xb0 [ 53.781993][ T4170] __kmalloc_node_noprof+0xa9/0x410 [ 53.782108][ T4170] ? alloc_slab_obj_exts+0x31/0x80 [ 53.782142][ T4170] alloc_slab_obj_exts+0x31/0x80 [ 53.782175][ T4170] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 53.782288][ T4170] kmem_cache_alloc_noprof+0x220/0x310 [ 53.782322][ T4170] ? alloc_empty_file+0x76/0x200 [ 53.782372][ T4170] alloc_empty_file+0x76/0x200 [ 53.782404][ T4170] alloc_file_pseudo+0xc6/0x160 [ 53.782494][ T4170] sock_alloc_file+0x9c/0x1e0 [ 53.782527][ T4170] __sys_socketpair+0x2b8/0x430 [ 53.782566][ T4170] __x64_sys_socketpair+0x52/0x60 [ 53.782630][ T4170] x64_sys_call+0x23f2/0x2fb0 [ 53.782658][ T4170] do_syscall_64+0xd2/0x200 [ 53.782681][ T4170] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.782716][ T4170] ? clear_bhb_loop+0x40/0x90 [ 53.782761][ T4170] ? clear_bhb_loop+0x40/0x90 [ 53.782813][ T4170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.782840][ T4170] RIP: 0033:0x7f463a4a087a [ 53.782873][ T4170] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.782896][ T4170] RSP: 002b:00007f4638b06f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 53.782920][ T4170] RAX: ffffffffffffffda RBX: 00007f463a6c5f00 RCX: 00007f463a4a087a [ 53.782936][ T4170] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 53.783003][ T4170] RBP: 00007f4638b07090 R08: 0000000000000000 R09: 0000000000000000 [ 53.783018][ T4170] R10: 00007f4638b06f98 R11: 0000000000000246 R12: 0000000000000001 [ 53.783034][ T4170] R13: 0000000000000000 R14: 00007f463a6c5fa0 R15: 00007ffe15360c28 [ 53.783058][ T4170] [ 53.784271][ T4153] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.818474][ T4170] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 54.012672][ T4170] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.020535][ T4170] vhci_hcd vhci_hcd.0: Device attached [ 54.032489][ T4153] lo speed is unknown, defaulting to 1000 [ 54.038524][ T4171] vhci_hcd: connection closed [ 54.045477][ T147] vhci_hcd: stop threads [ 54.054479][ T147] vhci_hcd: release socket [ 54.058975][ T147] vhci_hcd: disconnect device [ 54.079249][ T4153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.131104][ T4177] ipvlan2: entered promiscuous mode [ 54.136993][ T4177] bridge0: port 3(ipvlan2) entered blocking state [ 54.143502][ T4177] bridge0: port 3(ipvlan2) entered disabled state [ 54.150196][ T4177] ipvlan2: entered allmulticast mode [ 54.155555][ T4177] bridge0: entered allmulticast mode [ 54.161367][ T4177] ipvlan2: left allmulticast mode [ 54.166449][ T4177] bridge0: left allmulticast mode [ 54.287002][ T4179] netlink: 'syz.1.188': attribute type 27 has an invalid length. [ 54.433329][ T4182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.443216][ T4182] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.455971][ T4182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.509790][ T4179] lo speed is unknown, defaulting to 1000 [ 54.578329][ T4192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 54.617160][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 54.617178][ T29] audit: type=1400 audit(1751746340.828:1728): avc: denied { execmem } for pid=4195 comm="syz.0.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.651445][ T4196] loop0: detected capacity change from 0 to 2048 [ 54.672189][ T4200] loop1: detected capacity change from 0 to 1024 [ 54.679076][ T4200] ext4: Unknown parameter 'uid<00000000000000060928' [ 54.741898][ T29] audit: type=1326 audit(1751746340.958:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.767344][ T29] audit: type=1326 audit(1751746340.988:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.790720][ T29] audit: type=1326 audit(1751746340.988:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.799241][ T4206] loop1: detected capacity change from 0 to 128 [ 54.814887][ T29] audit: type=1326 audit(1751746340.988:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.842096][ T4206] syz.1.196: attempt to access beyond end of device [ 54.842096][ T4206] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 54.844359][ T29] audit: type=1326 audit(1751746340.988:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.857092][ T4206] syz.1.196: attempt to access beyond end of device [ 54.857092][ T4206] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 54.881531][ T29] audit: type=1326 audit(1751746340.988:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.918372][ T29] audit: type=1326 audit(1751746340.988:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.940610][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.941748][ T29] audit: type=1326 audit(1751746340.988:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 54.957111][ T4196] netlink: 'syz.0.192': attribute type 4 has an invalid length. [ 54.978810][ T29] audit: type=1326 audit(1751746340.988:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4203 comm="syz.1.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd44902e963 code=0x7ffc0000 [ 54.985611][ T4196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.192'. [ 55.141507][ T4273] pim6reg: entered allmulticast mode [ 55.153693][ T4210] syz.1.196: attempt to access beyond end of device [ 55.153693][ T4210] loop1: rw=2049, sector=153, nr_sectors = 32 limit=128 [ 55.167973][ T4210] syz.1.196: attempt to access beyond end of device [ 55.167973][ T4210] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 55.181535][ T4210] syz.1.196: attempt to access beyond end of device [ 55.181535][ T4210] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 55.195079][ T4210] syz.1.196: attempt to access beyond end of device [ 55.195079][ T4210] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 55.195184][ T4273] pim6reg: left allmulticast mode [ 55.208589][ T4210] syz.1.196: attempt to access beyond end of device [ 55.208589][ T4210] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 55.208715][ T4210] syz.1.196: attempt to access beyond end of device [ 55.208715][ T4210] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 55.208757][ T4210] syz.1.196: attempt to access beyond end of device [ 55.208757][ T4210] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 55.208799][ T4210] syz.1.196: attempt to access beyond end of device [ 55.208799][ T4210] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 55.284622][ T4207] lo speed is unknown, defaulting to 1000 [ 55.328222][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.627256][ T4291] netlink: 'syz.2.205': attribute type 27 has an invalid length. [ 55.671075][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.678381][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.728716][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.740236][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.772805][ T4291] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.781302][ T4291] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.789817][ T4291] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.798277][ T4291] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.813805][ T3386] lo speed is unknown, defaulting to 1000 [ 55.820387][ T3386] qyz2: Port: 1 Link DOWN [ 55.891023][ T4295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.899283][ T4295] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.946936][ T4295] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.987717][ T4298] lo speed is unknown, defaulting to 1000 [ 55.993843][ T4185] lo speed is unknown, defaulting to 1000 [ 55.993863][ T4185] qyz2: Port: 1 Link ACTIVE [ 56.096782][ T4316] vhci_hcd: invalid port number 96 [ 56.103034][ T4316] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 56.234364][ T4323] cgroup: noprefix used incorrectly [ 56.453099][ T4326] lo speed is unknown, defaulting to 1000 [ 56.522505][ T4331] loop1: detected capacity change from 0 to 1024 [ 56.588706][ T4331] ext4: Unknown parameter 'uid<00000000000000060928' [ 56.677975][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 56.853486][ T4352] netlink: 'syz.0.225': attribute type 27 has an invalid length. [ 56.886693][ T4333] loop3: detected capacity change from 0 to 32768 [ 56.910569][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 56.934912][ T4360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.953524][ T4360] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.969709][ T4361] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 56.977585][ T4361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.229'. [ 56.991414][ T4333] loop3: p1 p2 p3 < > [ 56.998611][ T4333] loop3: p1 size 242222080 extends beyond EOD, truncated [ 57.008938][ T4360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.029625][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.037783][ T4333] loop3: p2 start 4294967295 is beyond EOD, truncated [ 57.048659][ T4359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.086496][ T4361] dummy0: entered promiscuous mode [ 57.092757][ T4361] bridge0: port 4(dummy0) entered blocking state [ 57.100022][ T4361] bridge0: port 4(dummy0) entered disabled state [ 57.106707][ T4361] dummy0: entered allmulticast mode [ 57.114240][ T4361] bridge0: port 4(dummy0) entered blocking state [ 57.120661][ T4361] bridge0: port 4(dummy0) entered forwarding state [ 57.139364][ T4352] lo speed is unknown, defaulting to 1000 [ 57.154664][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.173887][ T4373] loop3: detected capacity change from 0 to 1024 [ 57.180961][ T4373] ext4: Unknown parameter 'uid<00000000000000060928' [ 57.203390][ T4375] netlink: 'syz.2.232': attribute type 2 has an invalid length. [ 57.226193][ T4377] netlink: 'syz.3.233': attribute type 27 has an invalid length. [ 57.292910][ T4377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.309200][ T4377] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.319998][ T4386] loop4: detected capacity change from 0 to 512 [ 57.332100][ T4377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.353028][ T4384] netlink: 72 bytes leftover after parsing attributes in process `syz.0.236'. [ 57.362793][ T4384] netlink: 72 bytes leftover after parsing attributes in process `syz.0.236'. [ 57.372031][ T4389] ÿÿÿÿÿÿ: renamed from vlan1 [ 57.378200][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.392619][ T4386] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 57.393293][ T4392] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 57.405812][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.237: corrupted inode contents [ 57.424442][ T4386] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.237: mark_inode_dirty error [ 57.440061][ T4392] veth0_vlan: entered allmulticast mode [ 57.445946][ T4392] veth0_vlan: left promiscuous mode [ 57.452035][ T4386] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.237: corrupted inode contents [ 57.465122][ T4392] veth0_vlan: entered promiscuous mode [ 57.472224][ T4392] team0: Device veth0_vlan failed to register rx_handler [ 57.479860][ T4386] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.237: mark_inode_dirty error [ 57.513492][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.524492][ T4388] lo speed is unknown, defaulting to 1000 [ 57.525963][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.546005][ T4394] loop0: detected capacity change from 0 to 512 [ 57.553108][ T4394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.575961][ T4394] EXT4-fs (loop0): 1 truncate cleaned up [ 57.585345][ T4394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.596143][ T4263] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.605370][ T4263] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.619471][ T4394] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.698038][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.780449][ T4415] netlink: 'syz.0.246': attribute type 27 has an invalid length. [ 57.817189][ T4415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.825550][ T4415] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.835546][ T4415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.868555][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 57.879210][ T4415] lo speed is unknown, defaulting to 1000 [ 57.952606][ T4424] netlink: 96 bytes leftover after parsing attributes in process `syz.3.249'. [ 58.031554][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 58.059859][ T4436] mmap: syz.1.253 (4436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.203652][ T4441] loop4: detected capacity change from 0 to 512 [ 58.210351][ T4441] ext4: Unknown parameter 'nouser_xattr' [ 58.231147][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 58.290717][ T4452] loop4: detected capacity change from 0 to 1024 [ 58.297612][ T4452] EXT4-fs: Ignoring removed i_version option [ 58.304074][ T4452] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.317388][ T4452] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.259: Invalid block bitmap block 0 in block_group 0 [ 58.331017][ T4452] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.259: Failed to acquire dquot type 0 [ 58.342560][ T4452] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.259: Freeing blocks not in datazone - block = 0, count = 4096 [ 58.356327][ T4452] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.259: Invalid inode bitmap blk 0 in block_group 0 [ 58.369068][ T4452] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 58.377821][ T4221] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 0 [ 58.377887][ T4452] EXT4-fs (loop4): 1 orphan inode deleted [ 58.395850][ T4452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.418725][ T4452] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.430565][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 58.442338][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.455212][ T4461] netlink: 'syz.1.262': attribute type 27 has an invalid length. [ 58.569140][ T4461] bridge0: port 4(dummy0) entered disabled state [ 58.627157][ T4473] Driver unsupported XDP return value 0 on prog (id 186) dev N/A, expect packet loss! [ 58.659553][ T4472] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.660237][ T4468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.677077][ T4468] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.677396][ T4482] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 58.685879][ T4468] bridge0: port 4(dummy0) entered blocking state [ 58.691666][ T4482] netlink: 'syz.0.267': attribute type 2 has an invalid length. [ 58.697907][ T4468] bridge0: port 4(dummy0) entered forwarding state [ 58.712437][ T4482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 58.722767][ T4468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.737100][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.745913][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.753620][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.761453][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 58.768838][ T3153] rtc rtc0: __rtc_set_alarm: err=-22 [ 58.778412][ T4263] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 58.831626][ T4482] loop0: detected capacity change from 0 to 512 [ 58.838420][ T4476] lo speed is unknown, defaulting to 1000 [ 58.847190][ T4482] ext4: Unknown parameter 'measure' [ 58.871979][ T4482] loop0: detected capacity change from 0 to 128 [ 58.873677][ T4493] loop4: detected capacity change from 0 to 512 [ 58.917541][ T4493] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 58.928693][ T4493] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.271: iget: bad i_size value: 12154757448730 [ 58.946964][ T4493] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.271: couldn't read orphan inode 13 (err -117) [ 58.977431][ T4493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.991444][ T4498] pim6reg: entered allmulticast mode [ 58.999874][ T4494] pim6reg: left allmulticast mode [ 59.022102][ T4500] SELinux: ebitmap: truncated map [ 59.028117][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.035065][ T4500] SELinux: failed to load policy [ 59.116346][ T4510] loop3: detected capacity change from 0 to 1024 [ 59.129859][ T4510] ext4: Unknown parameter 'uid<00000000000000060928' [ 59.140208][ T4503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 59.168109][ T4512] netlink: 404 bytes leftover after parsing attributes in process `syz.1.278'. [ 59.180885][ T4512] loop1: detected capacity change from 0 to 512 [ 59.188500][ T4512] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.217199][ T4512] EXT4-fs (loop1): 1 truncate cleaned up [ 59.223509][ T4512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.269311][ T23] IPVS: starting estimator thread 0... [ 59.306229][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.343243][ T4524] loop3: detected capacity change from 0 to 512 [ 59.356423][ T4519] IPVS: using max 2016 ests per chain, 100800 per kthread [ 59.371341][ T4524] EXT4-fs: Ignoring removed oldalloc option [ 59.377380][ T4524] EXT4-fs: inline encryption not supported [ 59.393135][ T4524] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 59.432479][ T4524] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 59.449411][ T4531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.286'. [ 59.462607][ T4536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.287'. [ 59.575187][ T4543] pim6reg: entered allmulticast mode [ 59.588996][ T4543] pim6reg: left allmulticast mode [ 59.659529][ T4551] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 59.669295][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 59.669308][ T29] audit: type=1400 audit(1751747114.079:2151): avc: denied { relabelto } for pid=4550 comm="syz.3.293" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 59.767608][ T4555] netlink: 32 bytes leftover after parsing attributes in process `syz.3.295'. [ 59.783801][ T29] audit: type=1400 audit(1751747114.079:2152): avc: denied { associate } for pid=4550 comm="syz.3.293" name="cgroup.procs" dev="cgroup" ino=53 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:net_conf_t:s0" [ 59.812287][ T29] audit: type=1400 audit(1751747114.121:2153): avc: denied { mount } for pid=4552 comm="syz.3.294" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 59.812302][ T4216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 59.842416][ T4216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 59.877326][ T29] audit: type=1326 audit(1751747114.278:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.295" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5945d6e929 code=0x0 [ 59.961116][ T29] audit: type=1400 audit(1751747114.383:2155): avc: denied { mounton } for pid=4546 comm="syz.0.291" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 59.987467][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 60.005181][ T4559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.296'. [ 60.062115][ T29] audit: type=1326 audit(1751747114.488:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463a49e929 code=0x7ffc0000 [ 60.086465][ T29] audit: type=1326 audit(1751747114.488:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463a49e929 code=0x7ffc0000 [ 60.121171][ T29] audit: type=1326 audit(1751747114.541:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f463a49e929 code=0x7ffc0000 [ 60.144615][ T29] audit: type=1326 audit(1751747114.541:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463a49e929 code=0x7ffc0000 [ 60.168043][ T29] audit: type=1326 audit(1751747114.541:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.2.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f463a49e929 code=0x7ffc0000 [ 60.201887][ T4572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 60.244268][ T4580] netlink: 60 bytes leftover after parsing attributes in process `syz.2.300'. [ 60.256474][ T4580] loop2: detected capacity change from 0 to 512 [ 60.271523][ T4580] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.281549][ T4580] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.288761][ T4580] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.300: Failed to acquire dquot type 1 [ 60.301369][ T4580] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.300: bg 0: block 40: padding at end of block bitmap is not set [ 60.317709][ T4580] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 60.328852][ T4580] EXT4-fs (loop2): 1 truncate cleaned up [ 60.335296][ T4580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.356705][ T4584] bond_slave_1: entered promiscuous mode [ 60.404138][ T4588] random: crng reseeded on system resumption [ 60.412932][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.469788][ T4596] Restarting kernel threads ... [ 60.475021][ T4596] Done restarting kernel threads. [ 60.604956][ T4609] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 60.616026][ T4605] loop1: detected capacity change from 0 to 1024 [ 60.624437][ T4605] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.631610][ T4605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.643480][ T4609] lo speed is unknown, defaulting to 1000 [ 60.651913][ T4605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.684697][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.725229][ T4618] loop3: detected capacity change from 0 to 2048 [ 60.737115][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.749441][ T4622] loop1: detected capacity change from 0 to 2048 [ 60.796016][ T4622] Alternate GPT is invalid, using primary GPT. [ 60.802399][ T4622] loop1: p2 p3 p7 [ 61.029286][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.149210][ T4583] bond_slave_1: left promiscuous mode [ 61.253036][ T4651] netlink: 'syz.4.327': attribute type 34 has an invalid length. [ 61.263849][ T4649] vhci_hcd: invalid port number 96 [ 61.269022][ T4649] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 61.391314][ T4667] FAULT_INJECTION: forcing a failure. [ 61.391314][ T4667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.404696][ T4667] CPU: 1 UID: 0 PID: 4667 Comm: syz.3.334 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 61.404731][ T4667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.404747][ T4667] Call Trace: [ 61.404754][ T4667] [ 61.404763][ T4667] __dump_stack+0x1d/0x30 [ 61.404858][ T4667] dump_stack_lvl+0xe8/0x140 [ 61.404880][ T4667] dump_stack+0x15/0x1b [ 61.404896][ T4667] should_fail_ex+0x265/0x280 [ 61.404981][ T4667] should_fail+0xb/0x20 [ 61.405064][ T4667] should_fail_usercopy+0x1a/0x20 [ 61.405158][ T4667] _copy_from_user+0x1c/0xb0 [ 61.405286][ T4667] proc_do_submiturb+0x866/0x1d00 [ 61.405309][ T4667] ? proc_do_submiturb+0x111/0x1d00 [ 61.405337][ T4667] ? should_fail_ex+0xdb/0x280 [ 61.405412][ T4667] proc_submiturb+0x7b/0xa0 [ 61.405450][ T4667] usbdev_ioctl+0xcc2/0x1710 [ 61.405480][ T4667] ? __pfx_usbdev_ioctl+0x10/0x10 [ 61.405536][ T4667] __se_sys_ioctl+0xce/0x140 [ 61.405573][ T4667] __x64_sys_ioctl+0x43/0x50 [ 61.405676][ T4667] x64_sys_call+0x19a8/0x2fb0 [ 61.405752][ T4667] do_syscall_64+0xd2/0x200 [ 61.405775][ T4667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.405806][ T4667] ? clear_bhb_loop+0x40/0x90 [ 61.405832][ T4667] ? clear_bhb_loop+0x40/0x90 [ 61.405858][ T4667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.405959][ T4667] RIP: 0033:0x7f5945d6e929 [ 61.405974][ T4667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.405993][ T4667] RSP: 002b:00007f59443d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.406011][ T4667] RAX: ffffffffffffffda RBX: 00007f5945f95fa0 RCX: 00007f5945d6e929 [ 61.406023][ T4667] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 61.406036][ T4667] RBP: 00007f59443d7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.406094][ T4667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.406108][ T4667] R13: 0000000000000000 R14: 00007f5945f95fa0 R15: 00007ffd06255758 [ 61.406203][ T4667] [ 61.653581][ T4671] FAULT_INJECTION: forcing a failure. [ 61.653581][ T4671] name failslab, interval 1, probability 0, space 0, times 0 [ 61.666386][ T4671] CPU: 0 UID: 0 PID: 4671 Comm: syz.4.335 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 61.666470][ T4671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.666558][ T4671] Call Trace: [ 61.666565][ T4671] [ 61.666579][ T4671] __dump_stack+0x1d/0x30 [ 61.666602][ T4671] dump_stack_lvl+0xe8/0x140 [ 61.666623][ T4671] dump_stack+0x15/0x1b [ 61.666640][ T4671] should_fail_ex+0x265/0x280 [ 61.666673][ T4671] should_failslab+0x8c/0xb0 [ 61.666698][ T4671] kmem_cache_alloc_node_noprof+0x57/0x320 [ 61.666728][ T4671] ? __alloc_skb+0x101/0x320 [ 61.666828][ T4671] __alloc_skb+0x101/0x320 [ 61.666878][ T4671] rtmsg_ifinfo_build_skb+0x5f/0x1b0 [ 61.666918][ T4671] ? raw_notifier_call_chain+0x190/0x1b0 [ 61.666938][ T4671] ? call_netdevice_notifiers_info+0x9c/0x100 [ 61.667039][ T4671] unregister_netdevice_many_notify+0xe0c/0x1690 [ 61.667069][ T4671] unregister_netdevice_queue+0x1f5/0x220 [ 61.667106][ T4671] ip6_tnl_siocdevprivate+0x2e0/0x920 [ 61.667183][ T4671] dev_ifsioc+0x8f5/0xaa0 [ 61.667204][ T4671] dev_ioctl+0x78d/0x960 [ 61.667223][ T4671] sock_ioctl+0x593/0x610 [ 61.667247][ T4671] ? __pfx_sock_ioctl+0x10/0x10 [ 61.667270][ T4671] __se_sys_ioctl+0xce/0x140 [ 61.667356][ T4671] __x64_sys_ioctl+0x43/0x50 [ 61.667386][ T4671] x64_sys_call+0x19a8/0x2fb0 [ 61.667408][ T4671] do_syscall_64+0xd2/0x200 [ 61.667427][ T4671] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.667497][ T4671] ? clear_bhb_loop+0x40/0x90 [ 61.667519][ T4671] ? clear_bhb_loop+0x40/0x90 [ 61.667542][ T4671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.667564][ T4671] RIP: 0033:0x7f614793e929 [ 61.667636][ T4671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.667654][ T4671] RSP: 002b:00007f6145fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.667673][ T4671] RAX: ffffffffffffffda RBX: 00007f6147b65fa0 RCX: 00007f614793e929 [ 61.667686][ T4671] RDX: 0000200000000600 RSI: 00000000000089f2 RDI: 0000000000000003 [ 61.667698][ T4671] RBP: 00007f6145fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 61.667710][ T4671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.667722][ T4671] R13: 0000000000000000 R14: 00007f6147b65fa0 R15: 00007ffd19ac9a58 [ 61.667801][ T4671] [ 61.942623][ T4673] loop3: detected capacity change from 0 to 8192 [ 61.968610][ T4674] serio: Serial port ptm0 [ 61.975303][ T4673] loop3: p1 p4 < > [ 61.979283][ T4673] loop3: p1 start 4261412864 is beyond EOD, truncated [ 61.992542][ T4678] random: crng reseeded on system resumption [ 62.044026][ T4673] netlink: 'syz.3.336': attribute type 3 has an invalid length. [ 62.062658][ T4679] Restarting kernel threads ... [ 62.067793][ T4679] Done restarting kernel threads. [ 62.113292][ T4622] syz.1.314 (4622) used greatest stack depth: 6712 bytes left [ 62.122998][ T4683] ÿÿÿÿÿÿ: renamed from vlan1 [ 62.243414][ T4708] lo speed is unknown, defaulting to 1000 [ 62.249373][ T4709] loop2: detected capacity change from 0 to 2048 [ 62.249386][ T4708] lo speed is unknown, defaulting to 1000 [ 62.261928][ T4708] lo speed is unknown, defaulting to 1000 [ 62.268345][ T4708] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 62.278865][ T4708] lo speed is unknown, defaulting to 1000 [ 62.280705][ T4709] Alternate GPT is invalid, using primary GPT. [ 62.284999][ T4708] lo speed is unknown, defaulting to 1000 [ 62.291189][ T4709] loop2: p2 p3 p7 [ 62.298203][ T4708] lo speed is unknown, defaulting to 1000 [ 62.306698][ T4708] lo speed is unknown, defaulting to 1000 [ 62.312762][ T4708] lo speed is unknown, defaulting to 1000 [ 62.341128][ T4712] FAULT_INJECTION: forcing a failure. [ 62.341128][ T4712] name failslab, interval 1, probability 0, space 0, times 0 [ 62.354129][ T4712] CPU: 1 UID: 0 PID: 4712 Comm: syz.1.350 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 62.354214][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 62.354226][ T4712] Call Trace: [ 62.354232][ T4712] [ 62.354239][ T4712] __dump_stack+0x1d/0x30 [ 62.354258][ T4712] dump_stack_lvl+0xe8/0x140 [ 62.354277][ T4712] dump_stack+0x15/0x1b [ 62.354302][ T4712] should_fail_ex+0x265/0x280 [ 62.354463][ T4712] should_failslab+0x8c/0xb0 [ 62.354489][ T4712] __kvmalloc_node_noprof+0x123/0x4e0 [ 62.354531][ T4712] ? alloc_netdev_mqs+0x8b7/0xab0 [ 62.354570][ T4712] ? __kmalloc_cache_noprof+0x22e/0x320 [ 62.354659][ T4712] alloc_netdev_mqs+0x8b7/0xab0 [ 62.354749][ T4712] rtnl_create_link+0x239/0x710 [ 62.354794][ T4712] rtnl_newlink_create+0x14c/0x620 [ 62.354818][ T4712] ? security_capable+0x83/0x90 [ 62.354843][ T4712] ? netlink_ns_capable+0x86/0xa0 [ 62.354908][ T4712] rtnl_newlink+0xf29/0x12d0 [ 62.354935][ T4712] ? bpf_trace_run3+0x12c/0x1d0 [ 62.354958][ T4712] ? __kfree_skb+0x109/0x150 [ 62.354985][ T4712] ? mod_memcg_lruvec_state+0x20e/0x2e0 [ 62.355091][ T4712] ? __kfree_skb+0x109/0x150 [ 62.355124][ T4712] ? __rcu_read_unlock+0x4f/0x70 [ 62.355182][ T4712] ? avc_has_perm_noaudit+0x1b1/0x200 [ 62.355245][ T4712] ? selinux_capable+0x1f9/0x270 [ 62.355277][ T4712] ? security_capable+0x83/0x90 [ 62.355351][ T4712] ? ns_capable+0x7d/0xb0 [ 62.355368][ T4712] ? __pfx_rtnl_newlink+0x10/0x10 [ 62.355388][ T4712] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 62.355492][ T4712] netlink_rcv_skb+0x120/0x220 [ 62.355588][ T4712] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 62.355614][ T4712] rtnetlink_rcv+0x1c/0x30 [ 62.355632][ T4712] netlink_unicast+0x5a1/0x670 [ 62.355661][ T4712] netlink_sendmsg+0x58b/0x6b0 [ 62.355717][ T4712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.355795][ T4712] __sock_sendmsg+0x145/0x180 [ 62.355817][ T4712] ____sys_sendmsg+0x31e/0x4e0 [ 62.355850][ T4712] ___sys_sendmsg+0x17b/0x1d0 [ 62.355933][ T4712] __x64_sys_sendmsg+0xd4/0x160 [ 62.355953][ T4712] x64_sys_call+0x2999/0x2fb0 [ 62.355973][ T4712] do_syscall_64+0xd2/0x200 [ 62.355988][ T4712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.356018][ T4712] ? clear_bhb_loop+0x40/0x90 [ 62.356036][ T4712] ? clear_bhb_loop+0x40/0x90 [ 62.356055][ T4712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.356073][ T4712] RIP: 0033:0x7fd44902e929 [ 62.356086][ T4712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.356101][ T4712] RSP: 002b:00007fd447697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.356172][ T4712] RAX: ffffffffffffffda RBX: 00007fd449255fa0 RCX: 00007fd44902e929 [ 62.356186][ T4712] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 62.356212][ T4712] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 62.356223][ T4712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 62.356233][ T4712] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 62.356250][ T4712] [ 62.748555][ T4722] syzkaller1: entered promiscuous mode [ 62.754065][ T4722] syzkaller1: entered allmulticast mode [ 62.814307][ T4722] netlink: 96 bytes leftover after parsing attributes in process `syz.1.355'. [ 62.901371][ T4734] loop4: detected capacity change from 0 to 1024 [ 62.911149][ T4734] ext4: Unknown parameter 'uid<00000000000000060928' [ 62.979145][ T4753] tmpfs: Bad value for 'mpol' [ 63.028577][ T4762] FAULT_INJECTION: forcing a failure. [ 63.028577][ T4762] name failslab, interval 1, probability 0, space 0, times 0 [ 63.028639][ T4762] CPU: 0 UID: 0 PID: 4762 Comm: syz.2.370 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 63.028718][ T4762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.028732][ T4762] Call Trace: [ 63.028739][ T4762] [ 63.028821][ T4762] __dump_stack+0x1d/0x30 [ 63.028853][ T4762] dump_stack_lvl+0xe8/0x140 [ 63.028880][ T4762] dump_stack+0x15/0x1b [ 63.028903][ T4762] should_fail_ex+0x265/0x280 [ 63.029026][ T4762] should_failslab+0x8c/0xb0 [ 63.029169][ T4762] __kmalloc_noprof+0xa5/0x3e0 [ 63.029214][ T4762] ? tcf_idr_create+0x41/0x4a0 [ 63.029249][ T4762] tcf_idr_create+0x41/0x4a0 [ 63.029314][ T4762] tcf_idr_create_from_flags+0x60/0x80 [ 63.029351][ T4762] tcf_pedit_init+0x27b/0x970 [ 63.029454][ T4762] ? should_fail_ex+0xdb/0x280 [ 63.029501][ T4762] tcf_action_init_1+0x367/0x4a0 [ 63.029655][ T4762] tcf_action_init+0x267/0x6d0 [ 63.029858][ T4762] tc_ctl_action+0x291/0x830 [ 63.029919][ T4762] ? __pfx_tc_ctl_action+0x10/0x10 [ 63.029955][ T4762] rtnetlink_rcv_msg+0x657/0x6d0 [ 63.029993][ T4762] netlink_rcv_skb+0x120/0x220 [ 63.030064][ T4762] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 63.030105][ T4762] rtnetlink_rcv+0x1c/0x30 [ 63.030133][ T4762] netlink_unicast+0x5a1/0x670 [ 63.030187][ T4762] netlink_sendmsg+0x58b/0x6b0 [ 63.030218][ T4762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.030305][ T4762] __sock_sendmsg+0x145/0x180 [ 63.030372][ T4762] ____sys_sendmsg+0x31e/0x4e0 [ 63.030424][ T4762] ___sys_sendmsg+0x17b/0x1d0 [ 63.030512][ T4762] __x64_sys_sendmsg+0xd4/0x160 [ 63.030652][ T4762] x64_sys_call+0x2999/0x2fb0 [ 63.030683][ T4762] do_syscall_64+0xd2/0x200 [ 63.030709][ T4762] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.030744][ T4762] ? clear_bhb_loop+0x40/0x90 [ 63.030845][ T4762] ? clear_bhb_loop+0x40/0x90 [ 63.030876][ T4762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.030906][ T4762] RIP: 0033:0x7f463a49e929 [ 63.030926][ T4762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.030981][ T4762] RSP: 002b:00007f4638b07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.031007][ T4762] RAX: ffffffffffffffda RBX: 00007f463a6c5fa0 RCX: 00007f463a49e929 [ 63.031023][ T4762] RDX: 0000000000040000 RSI: 0000200000000000 RDI: 0000000000000003 [ 63.031040][ T4762] RBP: 00007f4638b07090 R08: 0000000000000000 R09: 0000000000000000 [ 63.031057][ T4762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.031141][ T4762] R13: 0000000000000000 R14: 00007f463a6c5fa0 R15: 00007ffe15360c28 [ 63.031167][ T4762] [ 63.104420][ T4769] loop2: detected capacity change from 0 to 512 [ 63.105861][ T4769] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.119078][ T4769] EXT4-fs (loop2): 1 truncate cleaned up [ 63.172890][ T4756] loop4: detected capacity change from 0 to 764 [ 63.183687][ T4777] loop0: detected capacity change from 0 to 1024 [ 63.189587][ T4769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.194799][ T4777] ext4: Unknown parameter 'uid<00000000000000060928' [ 63.393840][ T4769] FAULT_INJECTION: forcing a failure. [ 63.393840][ T4769] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 63.393914][ T4769] CPU: 0 UID: 0 PID: 4769 Comm: syz.2.373 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 63.394024][ T4769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 63.394043][ T4769] Call Trace: [ 63.394053][ T4769] [ 63.394062][ T4769] __dump_stack+0x1d/0x30 [ 63.394093][ T4769] dump_stack_lvl+0xe8/0x140 [ 63.394121][ T4769] dump_stack+0x15/0x1b [ 63.394145][ T4769] should_fail_ex+0x265/0x280 [ 63.394228][ T4769] should_fail_alloc_page+0xf2/0x100 [ 63.394331][ T4769] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.394425][ T4769] alloc_pages_mpol+0xb3/0x250 [ 63.394470][ T4769] folio_alloc_noprof+0x97/0x150 [ 63.394514][ T4769] filemap_alloc_folio_noprof+0x66/0x210 [ 63.394659][ T4769] __filemap_get_folio+0x28f/0x6b0 [ 63.394704][ T4769] ? ext4_writepage_trans_blocks+0x1bf/0x1e0 [ 63.394741][ T4769] ext4_write_begin+0x234/0xd30 [ 63.394778][ T4769] ? mark_buffer_dirty+0xf1/0x210 [ 63.394866][ T4769] ? folio_unlock+0xd9/0x120 [ 63.394908][ T4769] ? ext4_write_end+0x495/0x730 [ 63.394980][ T4769] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 63.395020][ T4769] generic_perform_write+0x181/0x490 [ 63.395056][ T4769] ext4_buffered_write_iter+0x1ee/0x3c0 [ 63.395133][ T4769] ext4_file_write_iter+0xdbf/0xf00 [ 63.395211][ T4769] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 63.395243][ T4769] vfs_write+0x4a0/0x8e0 [ 63.395313][ T4769] ksys_write+0xda/0x1a0 [ 63.395360][ T4769] __x64_sys_write+0x40/0x50 [ 63.395457][ T4769] x64_sys_call+0x2cdd/0x2fb0 [ 63.395552][ T4769] do_syscall_64+0xd2/0x200 [ 63.395578][ T4769] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.395673][ T4769] ? clear_bhb_loop+0x40/0x90 [ 63.395703][ T4769] ? clear_bhb_loop+0x40/0x90 [ 63.395735][ T4769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.395792][ T4769] RIP: 0033:0x7f463a49e929 [ 63.395813][ T4769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.395871][ T4769] RSP: 002b:00007f4638b07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.395898][ T4769] RAX: ffffffffffffffda RBX: 00007f463a6c5fa0 RCX: 00007f463a49e929 [ 63.395913][ T4769] RDX: 0000000000032600 RSI: 0000200000000000 RDI: 0000000000000004 [ 63.395931][ T4769] RBP: 00007f4638b07090 R08: 0000000000000000 R09: 0000000000000000 [ 63.395947][ T4769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 63.395964][ T4769] R13: 0000000000000000 R14: 00007f463a6c5fa0 R15: 00007ffe15360c28 [ 63.395990][ T4769] [ 63.420197][ T4756] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 63.431702][ T4756] lo speed is unknown, defaulting to 1000 [ 63.431994][ T4756] lo speed is unknown, defaulting to 1000 [ 63.437474][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.474803][ T4785] loop2: detected capacity change from 0 to 512 [ 63.475214][ T4785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.486134][ T4788] loop0: detected capacity change from 0 to 1024 [ 63.501161][ T4788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.520494][ T4785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.532208][ T4788] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, [ 63.534010][ T4785] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.539875][ T4788] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 63.608005][ T4797] bridge0: port 3(vlan2) entered blocking state [ 63.613125][ C0] ip6_tnl_xmit_ctl: 5 callbacks suppressed [ 63.613146][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 63.749413][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.749734][ T4797] bridge0: port 3(vlan2) entered disabled state [ 63.850579][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 63.863983][ T4797] vlan2: entered allmulticast mode [ 63.864004][ T4797] bridge0: entered allmulticast mode [ 63.864688][ T4797] vlan2: left allmulticast mode [ 63.864748][ T4797] bridge0: left allmulticast mode [ 64.009865][ T4819] netlink: 'syz.1.388': attribute type 27 has an invalid length. [ 64.060870][ T4821] loop2: detected capacity change from 0 to 1024 [ 64.069020][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 64.111470][ T4824] loop3: detected capacity change from 0 to 256 [ 64.119943][ T4824] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 64.148453][ T4819] bridge0: port 4(dummy0) entered disabled state [ 64.161332][ T3386] lo speed is unknown, defaulting to 1000 [ 64.167252][ T3386] syz0: Port: 1 Link DOWN [ 64.179718][ T4827] loop4: detected capacity change from 0 to 512 [ 64.201176][ T4827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.222114][ T4827] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.242855][ T4822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.250710][ T4828] rtc_cmos 00:00: Alarms can be up to one day in the future [ 64.251268][ T4822] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.276756][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 64.285503][ T4822] bridge0: port 4(dummy0) entered blocking state [ 64.291997][ T4822] bridge0: port 4(dummy0) entered forwarding state [ 64.310102][ T4822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.334928][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 64.345172][ T9] lo speed is unknown, defaulting to 1000 [ 64.351032][ T9] syz0: Port: 1 Link ACTIVE [ 64.357728][ T147] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 64.370067][ T147] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.370067][ T147] [ 64.379794][ T147] EXT4-fs (loop0): Total free blocks count 0 [ 64.385890][ T147] EXT4-fs (loop0): Free/Dirty block details [ 64.391821][ T147] EXT4-fs (loop0): free_blocks=68451041280 [ 64.397711][ T147] EXT4-fs (loop0): dirty_blocks=11520 [ 64.403160][ T147] EXT4-fs (loop0): Block reservation details [ 64.409250][ T147] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 64.417783][ T4821] bridge_slave_1 (unregistering): left allmulticast mode [ 64.424905][ T4821] bridge_slave_1 (unregistering): left promiscuous mode [ 64.431985][ T4821] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.445651][ T4825] lo speed is unknown, defaulting to 1000 [ 64.457922][ T4825] lo speed is unknown, defaulting to 1000 [ 64.465323][ T147] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 64.478972][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 64.527650][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.578047][ T4840] loop4: detected capacity change from 0 to 1024 [ 64.585856][ T4840] EXT4-fs: Ignoring removed orlov option [ 64.608297][ T4840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.635961][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 64.635980][ T29] audit: type=1400 audit(1751747119.286:2358): avc: denied { mounton } for pid=4839 comm="syz.4.395" path="/68/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.736502][ T4854] xt_hashlimit: max too large, truncated to 1048576 [ 64.761898][ T4854] loop1: detected capacity change from 0 to 512 [ 64.782572][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.794171][ T4854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.807446][ T4854] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.947066][ T4859] SELinux: failed to load policy [ 65.250711][ T4872] usb usb8: usbfs: process 4872 (syz.2.405) did not claim interface 0 before use [ 65.307458][ T29] audit: type=1400 audit(1751747119.990:2359): avc: denied { mount } for pid=4871 comm="syz.2.405" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 65.340758][ T4881] FAULT_INJECTION: forcing a failure. [ 65.340758][ T4881] name failslab, interval 1, probability 0, space 0, times 0 [ 65.353481][ T4881] CPU: 1 UID: 0 PID: 4881 Comm: syz.3.408 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 65.353575][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.353591][ T4881] Call Trace: [ 65.353599][ T4881] [ 65.353609][ T4881] __dump_stack+0x1d/0x30 [ 65.353666][ T4881] dump_stack_lvl+0xe8/0x140 [ 65.353691][ T4881] dump_stack+0x15/0x1b [ 65.353725][ T4881] should_fail_ex+0x265/0x280 [ 65.353765][ T4881] ? tcx_link_attach+0xae/0x5f0 [ 65.353794][ T4881] should_failslab+0x8c/0xb0 [ 65.353824][ T4881] __kmalloc_cache_noprof+0x4c/0x320 [ 65.353920][ T4881] tcx_link_attach+0xae/0x5f0 [ 65.353954][ T4881] link_create+0x536/0x6c0 [ 65.353980][ T4881] __sys_bpf+0x4c7/0x790 [ 65.354143][ T4881] __x64_sys_bpf+0x41/0x50 [ 65.354176][ T4881] x64_sys_call+0x2478/0x2fb0 [ 65.354197][ T4881] do_syscall_64+0xd2/0x200 [ 65.354288][ T4881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 65.354320][ T4881] ? clear_bhb_loop+0x40/0x90 [ 65.354348][ T4881] ? clear_bhb_loop+0x40/0x90 [ 65.354377][ T4881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.354439][ T4881] RIP: 0033:0x7f5945d6e929 [ 65.354453][ T4881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.354473][ T4881] RSP: 002b:00007f59443d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.354496][ T4881] RAX: ffffffffffffffda RBX: 00007f5945f95fa0 RCX: 00007f5945d6e929 [ 65.354511][ T4881] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 65.354527][ T4881] RBP: 00007f59443d7090 R08: 0000000000000000 R09: 0000000000000000 [ 65.354542][ T4881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.354557][ T4881] R13: 0000000000000000 R14: 00007f5945f95fa0 R15: 00007ffd06255758 [ 65.354645][ T4881] [ 65.555491][ T147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.635814][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.643548][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.648981][ T4885] loop3: detected capacity change from 0 to 8192 [ 65.651254][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.651613][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 65.651632][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 65.658377][ T3624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 65.737609][ T29] audit: type=1400 audit(1751747120.452:2360): avc: denied { read write } for pid=4891 comm="syz.3.411" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.761903][ T29] audit: type=1400 audit(1751747120.452:2361): avc: denied { open } for pid=4891 comm="syz.3.411" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.796972][ T29] audit: type=1400 audit(1751747120.504:2362): avc: denied { ioctl } for pid=4891 comm="syz.3.411" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.822687][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.021004][ T29] audit: type=1400 audit(1751747120.735:2363): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 66.049984][ T4898] random: crng reseeded on system resumption [ 66.115130][ T4899] Restarting kernel threads ... [ 66.122003][ T4899] Done restarting kernel threads. [ 66.231799][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.258792][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.281186][ T4901] !: renamed from dummy0 (while UP) [ 66.292525][ T4903] loop1: detected capacity change from 0 to 256 [ 66.305574][ T4901] loop0: detected capacity change from 0 to 512 [ 66.334326][ T29] audit: type=1326 audit(1751747121.071:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 66.358553][ T29] audit: type=1326 audit(1751747121.071:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 66.381968][ T29] audit: type=1326 audit(1751747121.071:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 66.405513][ T29] audit: type=1326 audit(1751747121.071:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4902 comm="syz.1.413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 66.453227][ T4901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.466757][ T4901] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.545302][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.561098][ T4922] pim6reg: entered allmulticast mode [ 66.570873][ T4924] lo speed is unknown, defaulting to 1000 [ 66.577347][ T4924] lo speed is unknown, defaulting to 1000 [ 66.585199][ T147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.593168][ T147] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 66.607057][ T4930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.616806][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 66.648739][ T4926] erspan0: entered promiscuous mode [ 66.670340][ T4922] pim6reg: left allmulticast mode [ 66.706793][ T4939] FAULT_INJECTION: forcing a failure. [ 66.706793][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 66.719635][ T4939] CPU: 0 UID: 0 PID: 4939 Comm: syz.1.426 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 66.719672][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 66.719689][ T4939] Call Trace: [ 66.719696][ T4939] [ 66.719705][ T4939] __dump_stack+0x1d/0x30 [ 66.719771][ T4939] dump_stack_lvl+0xe8/0x140 [ 66.719792][ T4939] dump_stack+0x15/0x1b [ 66.719815][ T4939] should_fail_ex+0x265/0x280 [ 66.719924][ T4939] ? nft_delchain+0x34/0x220 [ 66.719951][ T4939] should_failslab+0x8c/0xb0 [ 66.719983][ T4939] __kmalloc_cache_noprof+0x4c/0x320 [ 66.720024][ T4939] nft_delchain+0x34/0x220 [ 66.720053][ T4939] nft_flush_table+0x58d/0x790 [ 66.720103][ T4939] nf_tables_deltable+0x37f/0x8c0 [ 66.720152][ T4939] nfnetlink_rcv+0xb99/0x1690 [ 66.720217][ T4939] netlink_unicast+0x5a1/0x670 [ 66.720333][ T4939] netlink_sendmsg+0x58b/0x6b0 [ 66.720363][ T4939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.720387][ T4939] __sock_sendmsg+0x145/0x180 [ 66.720491][ T4939] ____sys_sendmsg+0x31e/0x4e0 [ 66.720546][ T4939] ___sys_sendmsg+0x17b/0x1d0 [ 66.720610][ T4939] __x64_sys_sendmsg+0xd4/0x160 [ 66.720705][ T4939] x64_sys_call+0x2999/0x2fb0 [ 66.720735][ T4939] do_syscall_64+0xd2/0x200 [ 66.720800][ T4939] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 66.720850][ T4939] ? clear_bhb_loop+0x40/0x90 [ 66.720878][ T4939] ? clear_bhb_loop+0x40/0x90 [ 66.720908][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.720936][ T4939] RIP: 0033:0x7fd44902e929 [ 66.720967][ T4939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.721024][ T4939] RSP: 002b:00007fd447697038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.721045][ T4939] RAX: ffffffffffffffda RBX: 00007fd449255fa0 RCX: 00007fd44902e929 [ 66.721061][ T4939] RDX: 000000000000c050 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 66.721077][ T4939] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 66.721149][ T4939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.721165][ T4939] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 66.721268][ T4939] [ 66.998805][ T4943] loop1: detected capacity change from 0 to 164 [ 67.009045][ T4945] netlink: 'syz.3.429': attribute type 27 has an invalid length. [ 67.017640][ T4943] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.104813][ T4945] erspan0: left promiscuous mode [ 67.130483][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.140591][ T4945] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.153114][ T4945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.175767][ T4956] pim6reg: entered allmulticast mode [ 67.195339][ T4956] loop1: detected capacity change from 0 to 512 [ 67.210576][ T4956] EXT4-fs: Ignoring removed i_version option [ 67.235275][ T4956] bio_check_eod: 37 callbacks suppressed [ 67.235293][ T4956] syz.1.434: attempt to access beyond end of device [ 67.235293][ T4956] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 67.255281][ T4956] EXT4-fs (loop1): unable to read superblock [ 67.258542][ T4952] lo speed is unknown, defaulting to 1000 [ 67.268356][ T4957] pim6reg: left allmulticast mode [ 67.280119][ T4952] lo speed is unknown, defaulting to 1000 [ 67.363894][ T4971] random: crng reseeded on system resumption [ 67.436355][ T4980] Restarting kernel threads ... [ 67.441690][ T4980] Done restarting kernel threads. [ 67.652696][ T4996] SELinux: syz.4.450 (4996) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.675143][ T4998] netlink: 'syz.3.451': attribute type 27 has an invalid length. [ 67.740565][ T5004] loop4: detected capacity change from 0 to 512 [ 67.743374][ T4998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.766101][ T4998] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.772547][ T5004] ext4: Unknown parameter 'fsmagic' [ 67.801713][ T4998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.875284][ T5002] lo speed is unknown, defaulting to 1000 [ 67.899012][ T5002] lo speed is unknown, defaulting to 1000 [ 67.899112][ T5008] lo speed is unknown, defaulting to 1000 [ 67.925867][ T5008] lo speed is unknown, defaulting to 1000 [ 67.959295][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 68.271533][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 68.289764][ T5030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.462'. [ 68.641445][ T4271] ip6_tnl_xmit_ctl: 7 callbacks suppressed [ 68.641503][ T4271] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 68.803089][ T5046] loop0: detected capacity change from 0 to 1024 [ 68.810149][ T5046] ext4: Unknown parameter 'uid<00000000000000060928' [ 68.844350][ T5052] loop0: detected capacity change from 0 to 512 [ 68.851493][ T5052] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.887259][ T5052] EXT4-fs (loop0): 1 truncate cleaned up [ 68.897821][ T5052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.913658][ T5052] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 68.921466][ T5052] netlink: 'syz.0.469': attribute type 3 has an invalid length. [ 68.932418][ T5052] netlink: 16 bytes leftover after parsing attributes in process `syz.0.469'. [ 68.952062][ T5054] loop4: detected capacity change from 0 to 1024 [ 68.960275][ T5054] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.000458][ T5054] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.470: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 69.031821][ T5027] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.067924][ T5054] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.470: couldn't read orphan inode 11 (err -117) [ 69.087437][ T5073] loop3: detected capacity change from 0 to 512 [ 69.095303][ T5076] loop2: detected capacity change from 0 to 1024 [ 69.098502][ T5073] ext4: Unknown parameter 'measure' [ 69.109528][ T5054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.122676][ T5076] ext4: Unknown parameter 'uid<00000000000000060928' [ 69.134872][ T5073] FAULT_INJECTION: forcing a failure. [ 69.134872][ T5073] name failslab, interval 1, probability 0, space 0, times 0 [ 69.148376][ T5073] CPU: 1 UID: 0 PID: 5073 Comm: syz.3.478 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 69.148488][ T5073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.148503][ T5073] Call Trace: [ 69.148511][ T5073] [ 69.148520][ T5073] __dump_stack+0x1d/0x30 [ 69.148542][ T5073] dump_stack_lvl+0xe8/0x140 [ 69.148561][ T5073] dump_stack+0x15/0x1b [ 69.148605][ T5073] should_fail_ex+0x265/0x280 [ 69.148645][ T5073] should_failslab+0x8c/0xb0 [ 69.148675][ T5073] kmem_cache_alloc_noprof+0x50/0x310 [ 69.148705][ T5073] ? __anon_vma_prepare+0x70/0x2f0 [ 69.148744][ T5073] ? pte_alloc_one+0xf8/0x120 [ 69.148767][ T5073] __anon_vma_prepare+0x70/0x2f0 [ 69.148805][ T5073] handle_mm_fault+0x1d19/0x2be0 [ 69.148889][ T5073] ? mas_walk+0xf2/0x120 [ 69.148932][ T5073] do_user_addr_fault+0x636/0x1090 [ 69.148966][ T5073] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.149077][ T5073] exc_page_fault+0x62/0xa0 [ 69.149129][ T5073] asm_exc_page_fault+0x26/0x30 [ 69.149153][ T5073] RIP: 0033:0x7f5945c30ca3 [ 69.149169][ T5073] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 69.149185][ T5073] RSP: 002b:00007f59443d64a0 EFLAGS: 00010206 [ 69.149200][ T5073] RAX: 0000000000000000 RBX: 00007f59443d6540 RCX: 00007f593bfb7000 [ 69.149213][ T5073] RDX: 00007f59443d66e0 RSI: 000000000000003f RDI: 00007f59443d65e0 [ 69.149228][ T5073] RBP: 0000000000000139 R08: 0000000000000008 R09: 00000000000000b3 [ 69.149259][ T5073] R10: 00000000000000c0 R11: 00007f59443d6540 R12: 00007f59443d6540 [ 69.149274][ T5073] R13: 00007f5945e0c3a0 R14: 00000000000000eb R15: 00007f59443d65e0 [ 69.149297][ T5073] [ 69.149308][ T5073] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 69.202055][ T5080] tipc: Started in network mode [ 69.244858][ T5073] loop3: detected capacity change from 0 to 128 [ 69.247937][ T5080] tipc: Node identity ac14140f, cluster identity 4711 [ 69.337682][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.358196][ T5080] tipc: New replicast peer: 255.255.255.255 [ 69.368115][ T5080] tipc: Enabled bearer , priority 10 [ 69.374636][ T5083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 69.383648][ T5083] tipc: Disabling bearer [ 69.428734][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 69.428751][ T29] audit: type=1400 audit(1751747124.315:2588): avc: denied { sys_module } for pid=5079 comm="syz.2.481" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 69.448635][ T5091] loop0: detected capacity change from 0 to 8192 [ 69.456573][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.468924][ T29] audit: type=1400 audit(1751747124.357:2589): avc: denied { bind } for pid=5079 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.536561][ T29] audit: type=1400 audit(1751747124.399:2590): avc: denied { setopt } for pid=5079 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.557079][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.564968][ T29] audit: type=1400 audit(1751747124.399:2591): avc: denied { read } for pid=5079 comm="syz.2.481" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.589204][ T29] audit: type=1400 audit(1751747124.399:2592): avc: denied { open } for pid=5079 comm="syz.2.481" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.613820][ T29] audit: type=1400 audit(1751747124.399:2593): avc: denied { ioctl } for pid=5079 comm="syz.2.481" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 69.640584][ T3153] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.651737][ T4216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.659680][ T4216] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 69.671630][ T29] audit: type=1400 audit(1751747124.578:2594): avc: denied { write } for pid=5081 comm="syz.1.483" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 69.735856][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.743791][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.751518][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.759349][ T3153] rtc_cmos 00:00: Alarms can be up to one day in the future [ 69.766688][ T3153] rtc rtc0: __rtc_set_alarm: err=-22 [ 69.777193][ T29] audit: type=1400 audit(1751747124.693:2595): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.799111][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.872103][ T29] audit: type=1400 audit(1751747124.788:2596): avc: denied { write } for pid=5090 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 69.996536][ T29] audit: type=1326 audit(1751747124.924:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5090 comm="syz.0.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 70.070058][ T5105] lo speed is unknown, defaulting to 1000 [ 70.076481][ T5105] lo speed is unknown, defaulting to 1000 [ 70.256543][ T5116] loop4: detected capacity change from 0 to 1024 [ 70.264473][ T5116] ext4: Unknown parameter 'uid<00000000000000060928' [ 70.402764][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 70.461449][ T5132] ALSA: seq fatal error: cannot create timer (-19) [ 70.498439][ T5134] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 70.507127][ T5134] team0: Device macvtap0 failed to register rx_handler [ 70.545689][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 70.758751][ T5150] Invalid ELF header magic: != ELF [ 70.781390][ T5152] FAULT_INJECTION: forcing a failure. [ 70.781390][ T5152] name failslab, interval 1, probability 0, space 0, times 0 [ 70.794204][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: syz.1.506 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 70.794238][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.794250][ T5152] Call Trace: [ 70.794257][ T5152] [ 70.794267][ T5152] __dump_stack+0x1d/0x30 [ 70.794369][ T5152] dump_stack_lvl+0xe8/0x140 [ 70.794391][ T5152] dump_stack+0x15/0x1b [ 70.794412][ T5152] should_fail_ex+0x265/0x280 [ 70.794482][ T5152] should_failslab+0x8c/0xb0 [ 70.794533][ T5152] __kmalloc_cache_node_noprof+0x54/0x320 [ 70.794564][ T5152] ? __get_vm_area_node+0x106/0x1d0 [ 70.794604][ T5152] __get_vm_area_node+0x106/0x1d0 [ 70.794686][ T5152] __vmalloc_node_range_noprof+0x273/0xe00 [ 70.794727][ T5152] ? kernel_read_file+0x2c3/0x500 [ 70.794748][ T5152] ? avc_has_perm_noaudit+0x1b1/0x200 [ 70.794778][ T5152] ? avc_has_perm+0xd3/0x150 [ 70.794820][ T5152] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 70.794908][ T5152] ? kernel_read_file+0x2c3/0x500 [ 70.794928][ T5152] vmalloc_noprof+0x82/0xc0 [ 70.795045][ T5152] ? kernel_read_file+0x2c3/0x500 [ 70.795072][ T5152] kernel_read_file+0x2c3/0x500 [ 70.795102][ T5152] __se_sys_finit_module+0x2d3/0x460 [ 70.795169][ T5152] __x64_sys_finit_module+0x3e/0x50 [ 70.795226][ T5152] x64_sys_call+0x2029/0x2fb0 [ 70.795254][ T5152] do_syscall_64+0xd2/0x200 [ 70.795272][ T5152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.795339][ T5152] ? clear_bhb_loop+0x40/0x90 [ 70.795357][ T5152] ? clear_bhb_loop+0x40/0x90 [ 70.795387][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.795478][ T5152] RIP: 0033:0x7fd44902e929 [ 70.795492][ T5152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.795507][ T5152] RSP: 002b:00007fd447697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 70.795523][ T5152] RAX: ffffffffffffffda RBX: 00007fd449255fa0 RCX: 00007fd44902e929 [ 70.795533][ T5152] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000006 [ 70.795543][ T5152] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 70.795560][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.795570][ T5152] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 70.795587][ T5152] [ 70.795594][ T5152] syz.1.506: vmalloc error: size 136, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 71.041494][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: syz.1.506 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 71.041525][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.041539][ T5152] Call Trace: [ 71.041547][ T5152] [ 71.041555][ T5152] __dump_stack+0x1d/0x30 [ 71.041642][ T5152] dump_stack_lvl+0xe8/0x140 [ 71.041667][ T5152] dump_stack+0x15/0x1b [ 71.041689][ T5152] warn_alloc+0x12b/0x1a0 [ 71.041736][ T5152] __vmalloc_node_range_noprof+0x297/0xe00 [ 71.041780][ T5152] ? avc_has_perm_noaudit+0x1b1/0x200 [ 71.041822][ T5152] ? avc_has_perm+0xd3/0x150 [ 71.041887][ T5152] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 71.041923][ T5152] ? kernel_read_file+0x2c3/0x500 [ 71.041981][ T5152] vmalloc_noprof+0x82/0xc0 [ 71.042016][ T5152] ? kernel_read_file+0x2c3/0x500 [ 71.042043][ T5152] kernel_read_file+0x2c3/0x500 [ 71.042145][ T5152] __se_sys_finit_module+0x2d3/0x460 [ 71.042196][ T5152] __x64_sys_finit_module+0x3e/0x50 [ 71.042237][ T5152] x64_sys_call+0x2029/0x2fb0 [ 71.042380][ T5152] do_syscall_64+0xd2/0x200 [ 71.042404][ T5152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.042438][ T5152] ? clear_bhb_loop+0x40/0x90 [ 71.042471][ T5152] ? clear_bhb_loop+0x40/0x90 [ 71.042501][ T5152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.042605][ T5152] RIP: 0033:0x7fd44902e929 [ 71.042625][ T5152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.042653][ T5152] RSP: 002b:00007fd447697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 71.042726][ T5152] RAX: ffffffffffffffda RBX: 00007fd449255fa0 RCX: 00007fd44902e929 [ 71.042742][ T5152] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000006 [ 71.042758][ T5152] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 71.042822][ T5152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.042838][ T5152] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 71.042863][ T5152] [ 71.042883][ T5152] Mem-Info: [ 71.103084][ T5159] pim6reg: entered allmulticast mode [ 71.105102][ T5152] active_anon:6831 inactive_anon:0 isolated_anon:0 [ 71.105102][ T5152] active_file:16213 inactive_file:2208 isolated_file:0 [ 71.105102][ T5152] unevictable:0 dirty:300 writeback:0 [ 71.105102][ T5152] slab_reclaimable:3007 slab_unreclaimable:15048 [ 71.105102][ T5152] mapped:31955 shmem:3029 pagetables:1256 [ 71.105102][ T5152] sec_pagetables:0 bounce:0 [ 71.105102][ T5152] kernel_misc_reclaimable:0 [ 71.105102][ T5152] free:1869792 free_pcp:30837 free_cma:0 [ 71.157767][ T5157] pim6reg: left allmulticast mode [ 71.161544][ T5152] Node 0 active_anon:27208kB inactive_anon:0kB active_file:64852kB inactive_file:8832kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127820kB dirty:1200kB writeback:0kB shmem:12116kB writeback_tmp:0kB kernel_stack:4608kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 71.161610][ T5152] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 71.161726][ T5152] lowmem_reserve[]: 0 2882 7860 7860 [ 71.161759][ T5152] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 71.161908][ T5152] lowmem_reserve[]: 0 0 4978 4978 [ 71.161942][ T5152] Node 0 Normal free:4515984kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27208kB inactive_anon:0kB active_file:64852kB inactive_file:8832kB unevictable:0kB writepending:1160kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:119884kB local_pcp:73928kB free_cma:0kB [ 71.400616][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 71.445688][ T5152] lowmem_reserve[]: 0 0 0 0 [ 71.450321][ T5152] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 71.463110][ T5152] Node 0 DMA32: 4*4kB (M) 4*8kB (M) 4*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 71.479357][ T5152] Node 0 Normal: 531*4kB (UME) 1183*8kB (UME) 603*16kB (UME) 529*32kB (UME) 379*64kB (UME) 76*128kB (UME) 54*256kB (UME) 38*512kB (UME) 37*1024kB (UME) 25*2048kB (U) 1055*4096kB (UM) = 4515796kB [ 71.498843][ T5152] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 71.508277][ T5152] 21447 total pagecache pages [ 71.512971][ T5152] 0 pages in swap cache [ 71.517146][ T5152] Free swap = 124996kB [ 71.521383][ T5152] Total swap = 124996kB [ 71.525555][ T5152] 2097051 pages RAM [ 71.529408][ T5152] 0 pages HighMem/MovableOnly [ 71.534238][ T5152] 80813 pages reserved [ 71.760717][ T5184] pim6reg: entered allmulticast mode [ 71.801270][ T5187] pim6reg: left allmulticast mode [ 71.847583][ T5193] netlink: 'syz.1.517': attribute type 13 has an invalid length. [ 71.884421][ T5193] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.908499][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 71.949678][ T5181] FAULT_INJECTION: forcing a failure. [ 71.949678][ T5181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.964706][ T5181] CPU: 0 UID: 0 PID: 5181 Comm: syz.4.516 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 71.964739][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.964757][ T5181] Call Trace: [ 71.964785][ T5181] [ 71.964794][ T5181] __dump_stack+0x1d/0x30 [ 71.964820][ T5181] dump_stack_lvl+0xe8/0x140 [ 71.964873][ T5181] dump_stack+0x15/0x1b [ 71.964895][ T5181] should_fail_ex+0x265/0x280 [ 71.964984][ T5181] should_fail+0xb/0x20 [ 71.965020][ T5181] should_fail_usercopy+0x1a/0x20 [ 71.965163][ T5181] _copy_to_user+0x20/0xa0 [ 71.965191][ T5181] bpf_test_finish+0x106/0x500 [ 71.965233][ T5181] bpf_prog_test_run_skb+0xb2b/0xbd0 [ 71.965298][ T5181] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 71.965390][ T5181] bpf_prog_test_run+0x227/0x390 [ 71.965416][ T5181] __sys_bpf+0x3dc/0x790 [ 71.965468][ T5181] __x64_sys_bpf+0x41/0x50 [ 71.965504][ T5181] x64_sys_call+0x2478/0x2fb0 [ 71.965599][ T5181] do_syscall_64+0xd2/0x200 [ 71.965622][ T5181] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 71.965727][ T5181] ? clear_bhb_loop+0x40/0x90 [ 71.965810][ T5181] ? clear_bhb_loop+0x40/0x90 [ 71.965839][ T5181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.965860][ T5181] RIP: 0033:0x7f614793e929 [ 71.965879][ T5181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.965999][ T5181] RSP: 002b:00007f6145fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.966048][ T5181] RAX: ffffffffffffffda RBX: 00007f6147b65fa0 RCX: 00007f614793e929 [ 71.966064][ T5181] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 71.966080][ T5181] RBP: 00007f6145fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 71.966095][ T5181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.966107][ T5181] R13: 0000000000000000 R14: 00007f6147b65fa0 R15: 00007ffd19ac9a58 [ 71.966129][ T5181] [ 72.230867][ T5197] loop4: detected capacity change from 0 to 1024 [ 72.237976][ T5197] EXT4-fs: Ignoring removed bh option [ 72.365449][ T5197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.389252][ T5198] lo speed is unknown, defaulting to 1000 [ 72.395497][ T5198] lo speed is unknown, defaulting to 1000 [ 72.426456][ T5197] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.773678][ T5220] loop3: detected capacity change from 0 to 1024 [ 72.787373][ T5221] netlink: 'syz.4.526': attribute type 27 has an invalid length. [ 72.802257][ T5220] ext4: Unknown parameter 'uid<00000000000000060928' [ 72.880469][ T5221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.888496][ T5221] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.925406][ T5221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.234918][ T5231] lo speed is unknown, defaulting to 1000 [ 73.285123][ T5231] lo speed is unknown, defaulting to 1000 [ 73.375219][ T5249] netlink: 5 bytes leftover after parsing attributes in process `syz.3.537'. [ 73.390934][ T5249] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 73.399328][ T5249] 0ªî{X¹¦: entered allmulticast mode [ 73.408092][ T5249] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 73.441143][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 73.441192][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 73.618342][ T5274] loop4: detected capacity change from 0 to 512 [ 73.627470][ T5274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 73.641005][ T5281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'. [ 73.641202][ T5274] EXT4-fs (loop4): 1 truncate cleaned up [ 73.655960][ T3624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 73.672181][ T5281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.549'. [ 73.682386][ T5278] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 73.693607][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.722456][ T5286] netlink: 104 bytes leftover after parsing attributes in process `syz.1.551'. [ 73.731991][ T5278] loop0: detected capacity change from 0 to 1764 [ 73.747716][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.774967][ T3624] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 73.824700][ T5278] loop0: detected capacity change from 0 to 8192 [ 73.831267][ T5294] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 73.837841][ T5294] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 73.845504][ T5294] vhci_hcd vhci_hcd.0: Device attached [ 73.853846][ T5295] vhci_hcd: connection closed [ 73.854935][ T147] vhci_hcd: stop threads [ 73.864732][ T147] vhci_hcd: release socket [ 73.869283][ T147] vhci_hcd: disconnect device [ 73.899743][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.044550][ T5316] syzkaller0: entered promiscuous mode [ 74.050186][ T5316] syzkaller0: entered allmulticast mode [ 74.131400][ T4221] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.140035][ T4221] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.158065][ T5326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.169499][ T5328] netlink: 104 bytes leftover after parsing attributes in process `syz.2.570'. [ 74.186606][ T5326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.266419][ T5343] netlink: 'syz.0.575': attribute type 3 has an invalid length. [ 74.294715][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 74.294733][ T29] audit: type=1400 audit(1751747129.428:2802): avc: denied { read } for pid=5348 comm="syz.1.577" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.324753][ T29] audit: type=1400 audit(1751747129.428:2803): avc: denied { open } for pid=5348 comm="syz.1.577" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.369246][ T29] audit: type=1400 audit(1751747129.439:2804): avc: denied { ioctl } for pid=5348 comm="syz.1.577" path="socket:[12760]" dev="sockfs" ino=12760 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 74.394167][ T29] audit: type=1400 audit(1751747129.439:2805): avc: denied { ioctl } for pid=5348 comm="syz.1.577" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.419774][ T29] audit: type=1400 audit(1751747129.439:2806): avc: denied { create } for pid=5348 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.439719][ T29] audit: type=1400 audit(1751747129.439:2807): avc: denied { bind } for pid=5348 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.459485][ T29] audit: type=1400 audit(1751747129.439:2808): avc: denied { read } for pid=5348 comm="syz.1.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.479231][ T29] audit: type=1400 audit(1751747129.470:2809): avc: denied { listen } for pid=5349 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 74.527115][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.529536][ T29] audit: type=1400 audit(1751747129.670:2810): avc: denied { write } for pid=5371 comm="syz.2.582" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.566374][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 74.589066][ T5374] FAULT_INJECTION: forcing a failure. [ 74.589066][ T5374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.603005][ T5374] CPU: 1 UID: 0 PID: 5374 Comm: syz.1.583 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 74.603035][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 74.603051][ T5374] Call Trace: [ 74.603058][ T5374] [ 74.603067][ T5374] __dump_stack+0x1d/0x30 [ 74.603094][ T5374] dump_stack_lvl+0xe8/0x140 [ 74.603152][ T5374] dump_stack+0x15/0x1b [ 74.603173][ T5374] should_fail_ex+0x265/0x280 [ 74.603221][ T5374] should_fail+0xb/0x20 [ 74.603253][ T5374] should_fail_usercopy+0x1a/0x20 [ 74.603327][ T5374] _copy_from_user+0x1c/0xb0 [ 74.603353][ T5374] kstrtouint_from_user+0x69/0xf0 [ 74.603392][ T5374] ? 0xffffffff81000000 [ 74.603409][ T5374] ? selinux_file_permission+0x1e4/0x320 [ 74.603473][ T5374] proc_fail_nth_write+0x50/0x160 [ 74.603519][ T5374] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.603554][ T5374] vfs_write+0x269/0x8e0 [ 74.603634][ T5374] ? vfs_read+0x47f/0x6f0 [ 74.603673][ T5374] ? __rcu_read_unlock+0x4f/0x70 [ 74.603701][ T5374] ? __fget_files+0x184/0x1c0 [ 74.603730][ T5374] ksys_write+0xda/0x1a0 [ 74.603828][ T5374] __x64_sys_write+0x40/0x50 [ 74.603864][ T5374] x64_sys_call+0x2cdd/0x2fb0 [ 74.603891][ T5374] do_syscall_64+0xd2/0x200 [ 74.603915][ T5374] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 74.603957][ T5374] ? clear_bhb_loop+0x40/0x90 [ 74.603980][ T5374] ? clear_bhb_loop+0x40/0x90 [ 74.604007][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.604034][ T5374] RIP: 0033:0x7fd44902d3df [ 74.604053][ T5374] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.604074][ T5374] RSP: 002b:00007fd447697030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.604119][ T5374] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd44902d3df [ 74.604135][ T5374] RDX: 0000000000000001 RSI: 00007fd4476970a0 RDI: 0000000000000004 [ 74.604149][ T5374] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 74.604169][ T5374] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 74.604251][ T5374] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 74.604275][ T5374] [ 74.824775][ T5375] loop2: detected capacity change from 0 to 1024 [ 74.832650][ T5375] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 74.843303][ T5375] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 74.854090][ T5375] EXT4-fs (loop2): invalid journal inode [ 74.862950][ T5377] process 'syz.1.584' launched '/dev/fd/3' with NULL argv: empty string added [ 74.863362][ T29] audit: type=1400 audit(1751747130.027:2811): avc: denied { execute } for pid=5376 comm="syz.1.584" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.914121][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 75.060486][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 75.071130][ T5394] netlink: 'syz.3.591': attribute type 27 has an invalid length. [ 75.087803][ T5394] 0ªî{X¹¦: left allmulticast mode [ 75.108856][ T5395] pim6reg: entered allmulticast mode [ 75.119439][ T5395] pim6reg: left allmulticast mode [ 75.149628][ T5394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.158909][ T5394] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.171537][ T5394] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 75.268707][ T5399] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.344786][ T5394] lo speed is unknown, defaulting to 1000 [ 75.352155][ T5394] lo speed is unknown, defaulting to 1000 [ 75.463996][ T5372] infiniband syz!: set down [ 75.468578][ T5372] infiniband syz!: added team_slave_0 [ 75.484889][ T5372] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 75.485100][ T5372] infiniband syz!: Couldn't open port 1 [ 75.544244][ T5425] loop0: detected capacity change from 0 to 1024 [ 75.559685][ T5425] ext4: Unknown parameter 'uid<00000000000000060928' [ 75.573679][ T5372] RDS/IB: syz!: added [ 75.578224][ T5372] smc: adding ib device syz! with port count 1 [ 75.598554][ T5372] smc: ib device syz! port 1 has pnetid [ 75.736896][ T4181] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.744655][ T4181] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.752531][ T4181] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.760301][ T4181] rtc_cmos 00:00: Alarms can be up to one day in the future [ 75.767732][ T4181] rtc rtc0: __rtc_set_alarm: err=-22 [ 75.823825][ T5450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.607'. [ 75.922352][ T5459] pim6reg: entered allmulticast mode [ 75.932661][ T5460] pim6reg: entered allmulticast mode [ 75.940859][ T5460] pim6reg: left allmulticast mode [ 75.950564][ T5459] pim6reg: left allmulticast mode [ 76.077187][ T5476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 76.090041][ T5476] dummy0: left allmulticast mode [ 76.095046][ T5476] dummy0: left promiscuous mode [ 76.100800][ T5476] bridge0: port 4(dummy0) entered disabled state [ 76.107831][ T5476] team0: left allmulticast mode [ 76.115730][ T5476] team_slave_0: left allmulticast mode [ 76.121430][ T5476] team_slave_1: left allmulticast mode [ 76.127088][ T5476] team0: left promiscuous mode [ 76.131969][ T5476] team_slave_0: left promiscuous mode [ 76.137577][ T5476] team_slave_1: left promiscuous mode [ 76.143276][ T5476] bridge0: port 3(team0) entered disabled state [ 76.150370][ T5476] bridge_slave_1: left allmulticast mode [ 76.156658][ T5476] bridge_slave_1: left promiscuous mode [ 76.162342][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.170028][ T5476] bridge_slave_0: left allmulticast mode [ 76.175855][ T5476] bridge_slave_0: left promiscuous mode [ 76.181547][ T5476] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.324763][ T5483] loop2: detected capacity change from 0 to 512 [ 76.342048][ T5483] ext4: Unknown parameter 'audit' [ 76.399961][ T5487] netlink: 'syz.2.622': attribute type 13 has an invalid length. [ 76.407852][ T5487] netlink: 'syz.2.622': attribute type 17 has an invalid length. [ 76.417534][ T5488] netlink: 'syz.0.623': attribute type 13 has an invalid length. [ 76.425337][ T5488] netlink: 'syz.0.623': attribute type 17 has an invalid length. [ 76.464860][ T5487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.507177][ T5488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.600956][ T5489] loop2: detected capacity change from 0 to 1024 [ 76.625126][ T5489] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.638401][ T5492] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 76.648833][ T5492] loop4: detected capacity change from 0 to 512 [ 76.657094][ T5492] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm +}[@: corrupted in-inode xattr: invalid ea_ino [ 76.671316][ T5492] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm +}[@: couldn't read orphan inode 15 (err -117) [ 76.683705][ T5492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.697430][ T5492] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm +}[@: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 76.718388][ T5492] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm +}[@: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 76.751851][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.814531][ T5511] rtc_cmos 00:00: Alarms can be up to one day in the future [ 76.992050][ T5523] pim6reg: entered allmulticast mode [ 76.998254][ T5523] pim6reg: left allmulticast mode [ 77.126776][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.151762][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 77.275795][ T5539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.640'. [ 77.462538][ T5553] netlink: 'syz.4.644': attribute type 10 has an invalid length. [ 77.472214][ T5553] team0: Device macvtap0 failed to register rx_handler [ 77.565398][ T5558] FAULT_INJECTION: forcing a failure. [ 77.565398][ T5558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.579543][ T5558] CPU: 1 UID: 0 PID: 5558 Comm: syz.1.647 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 77.579606][ T5558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.579679][ T5558] Call Trace: [ 77.579689][ T5558] [ 77.579697][ T5558] __dump_stack+0x1d/0x30 [ 77.579720][ T5558] dump_stack_lvl+0xe8/0x140 [ 77.579815][ T5558] dump_stack+0x15/0x1b [ 77.579834][ T5558] should_fail_ex+0x265/0x280 [ 77.579864][ T5558] should_fail+0xb/0x20 [ 77.579892][ T5558] should_fail_usercopy+0x1a/0x20 [ 77.579962][ T5558] _copy_from_user+0x1c/0xb0 [ 77.579989][ T5558] copy_from_bpfptr+0x5c/0x90 [ 77.580047][ T5558] bpf_prog_load+0x74a/0x1070 [ 77.580097][ T5558] ? security_bpf+0x2b/0x90 [ 77.580141][ T5558] __sys_bpf+0x51d/0x790 [ 77.580232][ T5558] __x64_sys_bpf+0x41/0x50 [ 77.580282][ T5558] x64_sys_call+0x2478/0x2fb0 [ 77.580338][ T5558] do_syscall_64+0xd2/0x200 [ 77.580362][ T5558] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.580389][ T5558] ? clear_bhb_loop+0x40/0x90 [ 77.580411][ T5558] ? clear_bhb_loop+0x40/0x90 [ 77.580483][ T5558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.580512][ T5558] RIP: 0033:0x7fd44902e929 [ 77.580531][ T5558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.580552][ T5558] RSP: 002b:00007fd447697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 77.580575][ T5558] RAX: ffffffffffffffda RBX: 00007fd449255fa0 RCX: 00007fd44902e929 [ 77.580596][ T5558] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 77.580608][ T5558] RBP: 00007fd447697090 R08: 0000000000000000 R09: 0000000000000000 [ 77.580690][ T5558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.580705][ T5558] R13: 0000000000000000 R14: 00007fd449255fa0 R15: 00007ffcde489998 [ 77.580849][ T5558] [ 77.735059][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.781682][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.789388][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.797088][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 77.804589][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 78.386578][ T5603] FAULT_INJECTION: forcing a failure. [ 78.386578][ T5603] name failslab, interval 1, probability 0, space 0, times 0 [ 78.399479][ T5603] CPU: 1 UID: 0 PID: 5603 Comm: syz.0.666 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 78.399514][ T5603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.399527][ T5603] Call Trace: [ 78.399534][ T5603] [ 78.399541][ T5603] __dump_stack+0x1d/0x30 [ 78.399587][ T5603] dump_stack_lvl+0xe8/0x140 [ 78.399612][ T5603] dump_stack+0x15/0x1b [ 78.399634][ T5603] should_fail_ex+0x265/0x280 [ 78.399692][ T5603] ? sctp_association_new+0x71/0x1200 [ 78.399728][ T5603] should_failslab+0x8c/0xb0 [ 78.399769][ T5603] __kmalloc_cache_noprof+0x4c/0x320 [ 78.399807][ T5603] sctp_association_new+0x71/0x1200 [ 78.399876][ T5603] ? __ipv6_addr_type+0x1ed/0x210 [ 78.399915][ T5603] sctp_connect_new_asoc+0x1a8/0x3a0 [ 78.399973][ T5603] sctp_sendmsg+0xf10/0x18d0 [ 78.400011][ T5603] ? selinux_socket_sendmsg+0x81/0x1b0 [ 78.400134][ T5603] ? __pfx_sctp_sendmsg+0x10/0x10 [ 78.400205][ T5603] inet_sendmsg+0xc2/0xd0 [ 78.400224][ T5603] __sock_sendmsg+0x102/0x180 [ 78.400249][ T5603] __sys_sendto+0x268/0x330 [ 78.400296][ T5603] __x64_sys_sendto+0x76/0x90 [ 78.400372][ T5603] x64_sys_call+0x2eb6/0x2fb0 [ 78.400394][ T5603] do_syscall_64+0xd2/0x200 [ 78.400479][ T5603] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.400507][ T5603] ? clear_bhb_loop+0x40/0x90 [ 78.400529][ T5603] ? clear_bhb_loop+0x40/0x90 [ 78.400682][ T5603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.400700][ T5603] RIP: 0033:0x7f7db148e929 [ 78.400714][ T5603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.400759][ T5603] RSP: 002b:00007f7dafaf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 78.400776][ T5603] RAX: ffffffffffffffda RBX: 00007f7db16b5fa0 RCX: 00007f7db148e929 [ 78.400863][ T5603] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000007 [ 78.400874][ T5603] RBP: 00007f7dafaf7090 R08: 0000200000000140 R09: 000000000000001c [ 78.400884][ T5603] R10: 000000000400c0d4 R11: 0000000000000246 R12: 0000000000000002 [ 78.400895][ T5603] R13: 0000000000000000 R14: 00007f7db16b5fa0 R15: 00007ffd1da7cc78 [ 78.400911][ T5603] [ 78.689227][ T5609] lo speed is unknown, defaulting to 1000 [ 78.695594][ T5609] lo speed is unknown, defaulting to 1000 [ 78.716525][ T5607] netlink: 'syz.1.668': attribute type 21 has an invalid length. [ 78.726963][ T5607] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 78.734738][ T5607] netlink: 144 bytes leftover after parsing attributes in process `syz.1.668'. [ 78.751376][ T5607] pim6reg: entered allmulticast mode [ 78.790842][ T5607] pim6reg: left allmulticast mode [ 78.851264][ T4181] ip6_tnl_xmit_ctl: 24 callbacks suppressed [ 78.851282][ T4181] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 78.925342][ T5620] pim6reg: entered allmulticast mode [ 78.953745][ T5620] pim6reg: left allmulticast mode [ 79.093888][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 79.093907][ T29] audit: type=1326 audit(1751747134.468:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.198528][ T29] audit: type=1326 audit(1751747134.510:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.222499][ T29] audit: type=1326 audit(1751747134.510:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.246121][ T29] audit: type=1326 audit(1751747134.510:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.269533][ T29] audit: type=1326 audit(1751747134.521:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.292860][ T29] audit: type=1400 audit(1751747134.521:2919): avc: denied { read } for pid=5631 comm="syz.1.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.312127][ T29] audit: type=1326 audit(1751747134.521:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.335581][ T29] audit: type=1326 audit(1751747134.521:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.359139][ T29] audit: type=1326 audit(1751747134.521:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd44902e929 code=0x7ffc0000 [ 79.382684][ T29] audit: type=1326 audit(1751747134.521:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.1.676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd44902e963 code=0x7ffc0000 [ 79.455227][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 79.554434][ T5648] tipc: Started in network mode [ 79.559395][ T5648] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 79.569176][ T5648] tipc: Enabling of bearer rejected, failed to enable media [ 79.663031][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 79.673784][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 79.793616][ T5664] netlink: 'syz.3.688': attribute type 13 has an invalid length. [ 79.826926][ T5664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.842815][ T3386] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 79.851326][ T5665] netlink: 76 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.860259][ T5665] netlink: 72 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.869220][ T5665] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 79.876930][ T5665] netlink: 11 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.897167][ T5664] netlink: 76 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.906138][ T5664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.915225][ T5664] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 79.923603][ T5664] netlink: 11 bytes leftover after parsing attributes in process `syz.3.688'. [ 79.974546][ T5671] random: crng reseeded on system resumption [ 80.115596][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 80.134865][ T5682] Restarting kernel threads ... [ 80.147555][ T5682] Done restarting kernel threads. [ 80.375430][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 80.680555][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 80.806525][ T5704] loop3: detected capacity change from 0 to 2048 [ 80.849258][ T5705] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 80.857087][ T5705] netlink: 224 bytes leftover after parsing attributes in process `syz.0.701'. [ 80.881857][ T5704] Alternate GPT is invalid, using primary GPT. [ 80.888256][ T5704] loop3: p1 p2 p3 [ 80.908322][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 80.947727][ T5709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.956456][ T5709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.084541][ T5723] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.241507][ T5733] random: crng reseeded on system resumption [ 81.290169][ T5736] SELinux: Context system_u:object_r:chfn_exec_t:s0 is not valid (left unmapped). [ 81.330522][ T5737] Restarting kernel threads ... [ 81.335813][ T5737] Done restarting kernel threads. [ 81.365476][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 81.502975][ T5744] loop4: detected capacity change from 0 to 1024 [ 81.520402][ T5744] EXT4-fs: Ignoring removed bh option [ 81.691687][ T5744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.872534][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.880325][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.887989][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.895683][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.903180][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 81.912633][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.935361][ T5755] loop3: detected capacity change from 0 to 8192 [ 82.608817][ T5793] random: crng reseeded on system resumption [ 82.683789][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 82.693850][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.703304][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.713919][ T5812] Restarting kernel threads ... [ 82.719031][ T5812] Done restarting kernel threads. [ 82.727530][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.737073][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.757296][ T5819] vti0: entered promiscuous mode [ 82.762377][ T5819] vti0: entered allmulticast mode [ 82.825582][ T5821] loop4: detected capacity change from 0 to 512 [ 82.833147][ T5821] ext4: Unknown parameter 'smackfsdef' [ 82.862677][ T5824] loop4: detected capacity change from 0 to 164 [ 82.869958][ T5824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.878916][ T5824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 82.887475][ T5824] Symlink component flag not implemented [ 82.893282][ T5824] Symlink component flag not implemented [ 82.899306][ T5824] Symlink component flag not implemented (7) [ 82.905327][ T5824] Symlink component flag not implemented (116) [ 83.165364][ T5839] netlink: 'syz.1.751': attribute type 4 has an invalid length. [ 83.173724][ T5839] hsr_slave_0: left promiscuous mode [ 83.180744][ T5839] hsr_slave_1: left promiscuous mode [ 83.203274][ T5841] FAULT_INJECTION: forcing a failure. [ 83.203274][ T5841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.216427][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz.3.753 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 83.216485][ T5841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.216501][ T5841] Call Trace: [ 83.216509][ T5841] [ 83.216517][ T5841] __dump_stack+0x1d/0x30 [ 83.216605][ T5841] dump_stack_lvl+0xe8/0x140 [ 83.216622][ T5841] dump_stack+0x15/0x1b [ 83.216636][ T5841] should_fail_ex+0x265/0x280 [ 83.216663][ T5841] should_fail+0xb/0x20 [ 83.216752][ T5841] should_fail_usercopy+0x1a/0x20 [ 83.216779][ T5841] _copy_to_user+0x20/0xa0 [ 83.216845][ T5841] simple_read_from_buffer+0xb5/0x130 [ 83.216873][ T5841] proc_fail_nth_read+0x100/0x140 [ 83.217000][ T5841] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.217030][ T5841] vfs_read+0x1a0/0x6f0 [ 83.217056][ T5841] ? __rcu_read_unlock+0x4f/0x70 [ 83.217076][ T5841] ? __fget_files+0x184/0x1c0 [ 83.217179][ T5841] ksys_read+0xda/0x1a0 [ 83.217209][ T5841] __x64_sys_read+0x40/0x50 [ 83.217295][ T5841] x64_sys_call+0x2d77/0x2fb0 [ 83.217368][ T5841] do_syscall_64+0xd2/0x200 [ 83.217385][ T5841] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 83.217463][ T5841] ? clear_bhb_loop+0x40/0x90 [ 83.217482][ T5841] ? clear_bhb_loop+0x40/0x90 [ 83.217536][ T5841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.217555][ T5841] RIP: 0033:0x7f5945d6d33c [ 83.217568][ T5841] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 83.217584][ T5841] RSP: 002b:00007f59443d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.217600][ T5841] RAX: ffffffffffffffda RBX: 00007f5945f95fa0 RCX: 00007f5945d6d33c [ 83.217611][ T5841] RDX: 000000000000000f RSI: 00007f59443d70a0 RDI: 0000000000000004 [ 83.217686][ T5841] RBP: 00007f59443d7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.217697][ T5841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.217708][ T5841] R13: 0000000000000000 R14: 00007f5945f95fa0 R15: 00007ffd06255758 [ 83.217755][ T5841] [ 83.223594][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 83.340357][ T5848] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.521205][ T5867] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.533355][ T5869] __nla_validate_parse: 8 callbacks suppressed [ 83.533376][ T5869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.764'. [ 83.607582][ T5881] capability: warning: `syz.2.768' uses 32-bit capabilities (legacy support in use) [ 83.612421][ T5878] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 83.764816][ T5905] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.773747][ T5905] Â: renamed from pim6reg1 [ 83.873802][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 83.873818][ T29] audit: type=1326 audit(1751747139.487:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 83.904582][ T29] audit: type=1326 audit(1751747139.487:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 83.928698][ T29] audit: type=1326 audit(1751747139.487:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 83.952275][ T29] audit: type=1326 audit(1751747139.487:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 83.976349][ T29] audit: type=1326 audit(1751747139.487:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.000156][ T29] audit: type=1326 audit(1751747139.487:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.024548][ T29] audit: type=1326 audit(1751747139.487:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.048222][ T29] audit: type=1326 audit(1751747139.487:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.072386][ T29] audit: type=1326 audit(1751747139.487:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.095873][ T29] audit: type=1326 audit(1751747139.487:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5900 comm="syz.0.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f7db148e929 code=0x7ffc0000 [ 84.330105][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 84.354280][ T5918] vhci_hcd: invalid port number 96 [ 84.359497][ T5918] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 84.453345][ T5936] random: crng reseeded on system resumption [ 84.487595][ T5936] lo speed is unknown, defaulting to 1000 [ 84.494014][ T5936] lo speed is unknown, defaulting to 1000 [ 84.843896][ T5941] loop3: detected capacity change from 0 to 1024 [ 84.863373][ T5941] ext4: Unknown parameter 'uid<00000000000000060928' [ 84.994759][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.037786][ T5956] SELinux: syz.1.788 (5956) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 85.102942][ T5969] random: crng reseeded on system resumption [ 85.163096][ T5967] loop3: detected capacity change from 0 to 512 [ 85.181145][ T5975] Restarting kernel threads ... [ 85.189011][ T5967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.197872][ T5975] Done restarting kernel threads. [ 85.211365][ T3311] ================================================================== [ 85.211843][ T5967] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.219514][ T3311] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 85.237445][ T3311] [ 85.239796][ T3311] read-write to 0xffff8881198bb748 of 8 bytes by task 5974 on cpu 0: [ 85.247892][ T3311] shmem_recalc_inode+0x36/0x1c0 [ 85.252883][ T3311] shmem_get_folio_gfp+0x7a3/0xd60 [ 85.258042][ T3311] shmem_write_begin+0xa8/0x190 [ 85.262935][ T3311] generic_perform_write+0x181/0x490 [ 85.268248][ T3311] shmem_file_write_iter+0xc5/0xf0 [ 85.273400][ T3311] __kernel_write_iter+0x256/0x4c0 [ 85.278565][ T3311] dump_user_range+0x407/0x8c0 [ 85.283370][ T3311] elf_core_dump+0x1dc2/0x1f80 [ 85.288171][ T3311] do_coredump+0x1dfa/0x27b0 [ 85.292814][ T3311] get_signal+0xd85/0xf70 [ 85.297185][ T3311] arch_do_signal_or_restart+0x96/0x480 [ 85.302786][ T3311] irqentry_exit_to_user_mode+0x5e/0xa0 [ 85.308398][ T3311] irqentry_exit+0x12/0x50 [ 85.312862][ T3311] asm_exc_page_fault+0x26/0x30 [ 85.317749][ T3311] [ 85.320092][ T3311] read to 0xffff8881198bb748 of 8 bytes by task 3311 on cpu 1: [ 85.327672][ T3311] shmem_getattr+0x41/0x200 [ 85.332214][ T3311] vfs_getattr_nosec+0x146/0x1e0 [ 85.337197][ T3311] vfs_statx+0x113/0x390 [ 85.341478][ T3311] vfs_fstatat+0x115/0x170 [ 85.345937][ T3311] __se_sys_newfstatat+0x55/0x260 [ 85.351011][ T3311] __x64_sys_newfstatat+0x55/0x70 [ 85.356079][ T3311] x64_sys_call+0x2c22/0x2fb0 [ 85.360790][ T3311] do_syscall_64+0xd2/0x200 [ 85.365336][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.371267][ T3311] [ 85.373609][ T3311] value changed: 0x0000000000000317 -> 0x000000000000031b [ 85.380729][ T3311] [ 85.383067][ T3311] Reported by Kernel Concurrency Sanitizer on: [ 85.389227][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 85.401830][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.411902][ T3311] ================================================================== [ 85.420895][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.430480][ T5967] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.796: corrupted xattr block 33: e_value out of bounds [ 85.452378][ T36] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 85.460588][ T5967] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.469840][ T5967] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.796: corrupted xattr block 33: e_value out of bounds [ 85.483898][ T5980] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.796: corrupted xattr block 33: e_value out of bounds [ 85.497971][ T5980] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.507344][ T5967] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 85.549761][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.842213][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 88.452137][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 89.670920][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 93.328717][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!