last executing test programs: 3.525095975s ago: executing program 4 (id=586): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x2300, 0x20}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r6, 0x560e, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$TIOCSSOFTCAR(r6, 0x541a, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)="a5629bb879b06feaa92d886fbf844848d06b4a7630951fcdc626a6d1e734a346d9fd855720bf4fecef31766d396830d264db73c6fd9eb3d0ca15c57e5ffc0df64d0e924a315115a4ea6e4a02a3afc103e5a029c5a0d2ff095a5d133df6843b24bc1273b68fe8a124b4e2c0effba084fb9c391ed8469b83972c8dd7f00ae0e60204a84a8c612af262f20ad44f4457d555e55b6b8ca83519577ced395cbd73778baa5e663677a0a6d1aeba6e7a2ec291609e51ca2c28829385bd49e7004cc2f427c8aec0c8d405ad2485bcb4585643527a5059e4d7", 0xd4}, {&(0x7f0000000100)="9d32102a21dac213412d70bbfb2c9dbf0a24ad073d24350ef57b74bbd157e811128f104a4f8cc0e416386fbbcbdee9d045426cf7c1dae79967f8dd6a8fa8f273d73bf12674", 0x45}, {&(0x7f00000001c0)="58b225b70c288f4168ea580d4afbc5998b3a12a8a301133ebf7740f2bf47c7790c8801e8d6fd2f6ecba99479a636c11c3b77c22430eb5546558225561fb492cb30574335769569dcc625c3a15ba22d6eaadbfa", 0x53}, {&(0x7f00000003c0)="84eed8c70eb1b00a0d92789a38821bcc94fb6c84708d9d3c0a0986d0073ec6fb0b1785d4e4d0396301a4f2b87e26234d6e006e8b1bbbb8bceeac4e5ba93edcbb71f206a5837fb0cc815b87ed884d15284b1e723176bbead4b0abdf982b1843bab17fd55be35b617416fb20915231767ddeea137e742e7efac7528fdd6259d64e629be8f2f6a7311b72878b4b94474f792a6fec7b9880c153f028a7559c1f977862cb59164bd184388945dff6a33e804c3783d4cf5ed8e1ad235d0b088191ec02f682e368412e5323d1f14a38f5f7b9474b921e8b34a13c4ca12f56e17b", 0xdd}, {&(0x7f0000000580)="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", 0x1000}], 0x5) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="93", 0x1, 0x80, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x616, &(0x7f0000000040)=ANY=[], 0x0) 3.452299846s ago: executing program 4 (id=588): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002340)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000000850000000e00000085f8f53a21da842bc108aa37000000050000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000800000000000000000000000000850000000e0000000000950000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) acct(0x0) sendmsg$rds(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x4e25, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) removexattr(0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000004000/0x4000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/67) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="080086aadf1d9f797a806200000300000800290b419f0400004d08e7ea4fbda17d13a3007acebe9f415ddc39e32f0d"], &(0x7f0000001b80)='syzkaller\x00', 0xdeb, 0x0, 0x0, 0x41100, 0x7a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) timer_settime(0x0, 0x1, 0x0, 0x0) syz_read_part_table(0x5f8, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000007733337edc1cc8e1b1bb5fd8ef4650efb9568ce4ebab1209824ffe627ef0a5e25c47fbe044e0c5f808f604be85f358ec929800a5451b30751473bcc4a621f0e1fe711f0f98d32d62a56ca87f920fafa249a9ad4b73d6fdff9b01030adadc2c2d5cd1dd64d208e5063e97460d9b90f286abab52e095f58f88773c27db", @ANYRES32=0x0, @ANYBLOB], 0x48) capget(&(0x7f0000000200)={0x20071026}, &(0x7f0000000300)={0x1, 0x80000000, 0x47f, 0x85, 0x5, 0x8}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) syz_open_dev$sg(&(0x7f0000000340), 0x0, 0x8002) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 3.285937789s ago: executing program 4 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 3.24694058s ago: executing program 4 (id=595): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x17, 0x1, 0x7ff) syz_usb_connect$hid(0x1, 0xffffffffffffff8d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xbf, 0x79, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x10, {0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x1e5}}, {{{0x9, 0x5, 0x81, 0x3, 0x30163a89ef4a0b76, 0x5, 0x9, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x2, 0xfa, 0x19}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x451, 0x80, 0x1, 0x1, 0x10, 0xa}, 0x5, &(0x7f0000000500)={0x5, 0xf, 0x5}}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000060700000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r1], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) getpriority(0x1, 0x0) ftruncate(r5, 0x2000009) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) 1.377674438s ago: executing program 2 (id=628): creat(&(0x7f0000000380)='./file0\x00', 0xd8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYRESHEX]) 1.327194019s ago: executing program 1 (id=629): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000030000108500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x2, &(0x7f0000000ac0), 0x300}, 0x3) 1.326605389s ago: executing program 2 (id=630): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r2, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x8, 0x48d, &(0x7f0000001340)="$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") sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000003d52d00400001802c00040014cfffffffffffffff14140300000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 1.204290121s ago: executing program 1 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4276}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004f8ffffffffffffff0000f1220000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2b, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "bf7494fcd3a42289"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x9, 0x42, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d86823991bca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 1.165837302s ago: executing program 1 (id=634): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0xfffffffffffff001}, 0x18) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0) 1.127672112s ago: executing program 0 (id=635): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) 1.126573222s ago: executing program 3 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x1d6}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4d}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095", @ANYRES32=r0, @ANYRESOCT=r3], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f00000017c0)=""/4066, 0xfe2}], 0x1, 0xf0, 0x6) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) 1.034642894s ago: executing program 0 (id=637): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) r0 = syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x6be}], 0x10}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x6}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) 1.033871234s ago: executing program 0 (id=638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 1.005997584s ago: executing program 3 (id=639): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000000a00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0xc, 0x0, 0xc}}}}}}, 0x0) 977.466884ms ago: executing program 3 (id=640): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000001f0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x8000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r11 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) fallocate(r11, 0x3, 0x4, 0x2328) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3, {r2}}, './file0\x00'}) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r6}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) write$cgroup_int(r13, &(0x7f00000001c0), 0xfffffdef) 823.042547ms ago: executing program 0 (id=641): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0xa14401, &(0x7f0000000380)={[{@errors_remount}, {@nodiscard}]}, 0x8, 0x48d, &(0x7f0000001340)="$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") sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000006c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4000000) connect$inet6(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090000000000000000000200000014000180050002"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003d52d00400001802c00040014cfffffffffffffff14140300000000000000001400020002000000e000000100000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) 672.498989ms ago: executing program 0 (id=642): io_uring_setup(0x664c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x40000005}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000040000850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r6, 0x8004587d, &(0x7f0000000340)={0x2, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) getpid() pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0x10005) write$qrtrtun(r3, &(0x7f0000000340)="6a0cc193beb70a52", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r8 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003080)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000400)="7fb68555db52cf06b6ac674fbe694cc1c616ec4fb73c030d2339bf9c0ecc7507be2b7a4d223a6bf9d8ec0548204e897e09b7c832b72b029d6d485d9fd1acab7e199c9b7442a11999c605902b2e435a70857a86d6963dfea64cf1073396ecf88bd11367584efc9183fd631036d2d1082f06368a4fbd61812de55380577d11b4832a30882577da86954f2ddbaadc6e20821aee740ddb9fe5facfa0bd7f4c4d13d6fb15cde3c826b6cf3040d19fa59387d4e7f802041e5568791d3099e844aeaea6eb073755e906752cffb63e9f8cd32bfd4d92149d94dc5ce07fb93ab770757bbd", 0xe0}, {&(0x7f0000000600)="99566d7340c76fbf7400dce1aa50231217c70c2d14e0d814ddb7a01c2bd8b085925a295684b572f93d098584579af06dd21037c80e748226ed11c5afe3b5fa535a00588f2607c862afd204f5e72a4a5f4e6dd1171f86e5d1afbcdd942eb9d322f55935553c6afa7b270d10d44f3f328b69301fc37f25c7a13650a7577841d9b5437750be1c856329343ce17c8cb79c3014de3b5d3cd7a28c16682bbdd619a6f2551b2e29fc7fa34201d7595104b23daba75cd7e740656c908f5ff3aa37377f84c11376e6190c", 0xc6}, {&(0x7f00000008c0)="c0a42cd853a6ed1c3291d1756e5ac64255d28d8dc8d86585c6a44ab8ff3b39b204b60afa7b84bb3ffc452629eb524755b48946b0d64ba80b3accae8ec782ead9fbce0f13fb4fdb98bb99186a2bb481b0c6c894e64e0b0d6635e3b6df0513f8915a7f0ebae95f967a21c88b85eb5c39f527a53101d9c5e1ea09216d303d6d2324a82261c243c8a6d675980e0332502cd966d5e3abf4ca4b42fd51fbd0396e87a0", 0xa0}, {&(0x7f0000000a00)="79a049d0d806348b489bafa47df05405c48766bbff25792c8c175fa09c691e8f2d296d807b5de25545ff3800b2e93bb832e9524f49353529dceaad65f1a9c68de1d9aa811dcb9745dd4314ad83d86ba14eb1ed497570ad45f698", 0x5a}, {&(0x7f0000000a80)="6330b1be551aff121c320b138f7b8fb92ffdecbafe3c19c314cfd87e9199145d0294c4522822e747d1300b8092b7c4b93a342a03aa321982db7657c7fd23c3d40c609f4b5984ab20c67e2f850136260ea40b28c932a4bf726849aafc5327444d9d7cde500f2cbc9d5dd30f9efc3d400825fac121b47f8196f48b3b2afbc6c953a27f94ee6376c66502edea7724949a23e0c9c60a61fc44e8d8d672f1c42db6487f33ce07e2124e2b66dca84e4b3e406182e69cdf0cfa72265d", 0xb9}, {&(0x7f0000000b40)="86a53429d58b447397989e840e99fb527929254f801f18e28829c50fa165aab8f5d23cf6991385178157246769bb1afa8ca78afa1f639ab0d732e0d65a3692c004512581d2179d2cb8e20c0cf59675e62de8662931a4096701cd6bbd2ea2963547cc5d0b45e79a1ccfdc7876ffec716595f9c4d1341b3bb7a84351104350d44e816a1015", 0x84}], 0x6}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)="00c240e2e7565c166e0b", 0xa}, {&(0x7f0000000740)="0c6dfa9139d2da1428c2db53e7f7b216e5653590e7d7a4713fa8f9d1db655544d6d5d0", 0x23}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_ttl={{0x14}}], 0x38}}, {{&(0x7f0000000cc0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000001dc0)=[{&(0x7f0000000d00)="f64b2ecd3edc6e17f6040a6cefa1dfa5be4f1b6b45325a2dc2feac4917e17aae4b662aae50265da0ba0bb44b071f77214b8611c4e7beb8fec2d412d4b5d7925ba71fa18eded1597ea92037a229a29bd0fd98e679dd3bfaa80be60be67f2e6fa9ce15d6d8dc249273e2328622228d46cd85cf47c1d233d48148c99f83e7966d487e4647fe1a846f1f26ad", 0x8a}, {&(0x7f0000000dc0)="5c13fbea6e98c2fd146129611ca8882e17622eede8805e3c23c3f47c7aae08377aa629167a9ebc02363e0b7f17c444e6698fb87b0a51d3b2b053fe284a60c056360b5306fb65a0b87e66bd1da23661dda1ff15ba2e7f2da429af7933a01d17a7dca643835c70a3c325c1a6be09f22450710b772e07b55fa54c46628fffa6fd01de1be6d893c70d1e4e082ab553d8190aecde1faee34add8dfab2dbc3b68ae87312a84301ede6be9db49d2406bdf99fc32bb311452c4fd8ce48bbfce69baa85c5790448a426527095", 0xc8}, {&(0x7f0000000ec0)="a90ffcdff074e0dc327f7f8259e9366dcf68a1b26b06d4a4d3a3a11b4b73bd30f7f0cc82749cb66b1d06ee60a35b5c9a90ea2e4a3bdc68a93e185acd159bdb93869069c62454039ef50ad13273d5464100bc533a49336987b0c0001d8af405d001721124ee64630c52481fa8240303aac9adb95a792d36ecc4c0f1ebf0828dcb752836d126ec2fd0243b17a05760c2b8ce61f20baf5e0b102b771cf1024f2fb97af6e100fffd38bd", 0xa8}, {&(0x7f0000001a40)="51c7cf92bc38f7dccd387933e6cb15ff67758bb17bf377d64b6f408715b7b4f91c51f523d9310bb0e7625cecd36ab084c959edab77838396696bf3c2f8530565b2fb9752e099fa876873144a16bb7b09687a71655259399f35796804fa93d2f4914c04d8d9adb37bec80d01a9f2b4eebc4b5b316f96b7bb2b993e5b41f0afd52f241a913773cac3cd3a1ebbd02f12fcad61e5c591e6fa3bee421ce3810c9e0a638", 0xa1}, {&(0x7f0000000f80)="84b3bd329369bf250037db84ae6e6d7d52280ba2d268b8dd38", 0x19}, {&(0x7f0000001b00)="dc421d67e703879433b13432e8dc9a09f1dbf8854c736931a0f0e675b4330bbf0c6f5fa1b4792151ff2e3ae71a3ebcfd14b5b98a23d477ea2122128cf9f9acd65815c644ac3428fe187ba5264f37504ca38705db11d3fc3cc236c831aef11ce8b217c88ad9c553382d817a948e101d54b19bb8b3417b686d8d886272a602e9dd29f20867df18a19a3d4512374655c4a829d7bc3e11e98c1f", 0x98}, {&(0x7f0000001bc0)="8c791e70dbafb5c0d3f5510037a014954edc8e5be013df552e8e2d85cd86d85fefc883752b78bf688fd9aff66426cc3b29b50cf1bcf0a6dfcd1934354c00ff54fd032f4107991eda5940ba1928845d2616dc371c513cf88118c394b09c2308499b5880b65ddd98a4da4cbbc9be0dd83d5cb0dc3ea1e450004e5fd8cf0908cf", 0x7f}, {&(0x7f0000001c40)="eecbfaad4d38931636a1b36d7d5990b4cc8dd8d5a74bf32744e2e8755431d8dc2410ef70eafbfb8bdf27b133548c993db9f9c9614c1b96451e454ced7ddeb2799756f870a78bafa4bf8c57b6f06db5", 0x4f}, {&(0x7f0000001cc0)="08d834a594ff02fb255f19b04ab9c928beac125d7082a26e731dec94739d1e1edbe07822c1e1d6faa1993b7dcfe9d5f6166ff969797609c65957510d66578e1ed7513a663cc66d284ba6e19bab069187783108032f5f99de6d30e2c4325979073f84656bdf125d465fcf198e347dbb72a3b888f9bf6614bc9ebf144a6bb87e39aa820a842cb37a594fa2ec6121aaaf2bad9e40d05bc5770f9c1df322e9c6a66b7a1391ae9d46c86d8352f38c5c67ae2f30e38d64778a0c14a3aaf48d6b917eb9a21909a65702baf585d53bb569599573c57644c1d0a7e47776513579320fb7a8bf5edd", 0xe3}, {&(0x7f0000000fc0)="9682fa1aeb31c437c452d60c7fb40299ccb278fe22afc78f14a048d4682dd7230df12d", 0x23}], 0xa, &(0x7f0000001e80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x7, 0xc, "49f576f0a7bdcff609d5"}, @end]}}}], 0x50}}, {{&(0x7f0000001f00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000002180)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)="bb577476d0ef1ac53f011aa555cd217529bc23e63913e9bc45abc8076bf592546b34435731318dcd4bf8b3f884a4e150d48942639b7b74c60aa9f33394773fa1c389295ae85f42de797eb3b1fa63383b3eaf05903f8df46f5e884b4496747ce3eb6c3cd1e33a7b20884d3c2c934f8e1d4269596a1fd7c35b7eacc05814a2fff2909b", 0x82}, {&(0x7f0000002040)="c0f463e6111ce279e3fb5292a075e6afbdf85d846457819b7e9bd0d1b2c515865703b8b409ed5590d25848e2a0766637270ccd13db69d5bb4867c2feb65b0f4d950cfc430ec4c05eaaa12d1aee76d90496c4", 0x52}, {&(0x7f00000020c0)="f009c94f8472dcef996537276f6128606dabc0e422c8b647661356c20b3d02ed3b56c290fbf2db645d3291412925783bd8cafb79fdd5782b3b7c4f0595aec442fd3f056f7e6c2ef2e4e2924c705a3ee81a3b24588905f28a521e37aa544fae21f25592bf22b13aaa8058d394e5ee3c146f4c8be584a5f851a700ab23c57ea5e6a7ff58dbffe441cf377dc1489123cff866b8747839ae3d64747b5549a55b", 0x9e}], 0x4}}, {{&(0x7f00000021c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002300)=[{&(0x7f0000002200)="82c292695e1829ec6aaa0fd47d085d442116616a6b8566451cfc42cc2384f08e5323fb74f49e8fa18497771d40291706a0fe7d7770a7835fb4b090cfa649c58b845720ef0d80b0d6d2547d6ffd28573b63fefd034a9699600b86af613b50495894d2e216665afec8b781949759c4158fbd84bfe367c6ac16e6007a9a3c1fd5760ed7cfa0b455e53fc281ef05a507fa6f0148852c061298df1fbe795a2af587dbefbce596f8929f6f49f5a4b92155f8e9f19f3775aad153d117723b7fc90fde672345b8f60571d121efb874cb1af64968", 0xd0}], 0x1, &(0x7f0000002400)=[@ip_retopts={{0x88, 0x0, 0x7, {[@generic={0xe8734968024473be, 0x4, "78f0"}, @rr={0x7, 0x13, 0xd0, [@private=0xa010101, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0xd}]}, @rr={0x7, 0x17, 0x81, [@local, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @loopback, @private=0xa010101]}, @generic={0x88, 0x3, 'W'}, @timestamp_prespec={0x44, 0xc, 0x90, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}]}, @timestamp={0x44, 0x18, 0xbf, 0x0, 0xc, [0x80, 0x3, 0x3, 0xd5, 0x7]}, @timestamp_prespec={0x44, 0x14, 0xda, 0x3, 0x4, [{@loopback, 0xfffffff7}, {@private=0xa010100, 0x200}]}, @timestamp_addr={0x44, 0xc, 0xac, 0x1, 0x3, [{@rand_addr=0x64010100, 0x2}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7c}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}], 0xd8}}, {{&(0x7f0000002500)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002540)="628e385ccc35350a5d86aaef9b0152e35bfdc3019bd414e0a2cae1a547ca6b40cea2e35303809453429d2ee54327b483a2c9b0f1644f9e4b20006c7482d6a5b79df93ba0f8061e964e8fe39c9a77912e9ce94d7642a50c1f023ed183df8766e473aee835771f1a01889cc9d76e1e0340867a66128787d335b767ccc13ee1bcf79ad3a588561d2a96efb0faabd94f250cd28ffcbbe7da27aa7776f5b01358dc2510bf4da86f70a3a7194e86bca313485e10ce93e1d0e8ce06d882ded13574a9e3a4d91d01f9156fab022af439b134649ed42f45ed58bbae58", 0xd8}, {&(0x7f0000002640)="67c8198cee52f94059c663df9f59742f92dd779131dc94db24d5a69d41a6f2a57a3493a377fc4f7ffcaffeaed2b625777e094cae41fa5147ac28e62b7e73bec0594994defe4b9bfa31c913c4d9c9a74ba1324597e591f743480a74114057186cc5e515d6bc5148ac30ad09fd8262115454529b1682b6504518016f7eb6042abb9962984de9f84cdd20dfff82575bc1de9b9644562585f77beb0883d093607478381778871eb3126a3a5b8802786e4556076a48a1f2973c", 0xb7}, {&(0x7f0000002700)="459b37b7f9e21324deffa4ae39fd23bea998446499eb109090866e11036b493e806aec4df647b02055f83e2eab38da8bee9996d41c494fe6a9aec8d99d6093e2ca799b4e8d1436de0d31214612a722ecacf7c14f7e30c5ad54c941b54c0675ac252498523301dc813dbfa84229cc6b2ec7ef619bb844b25e6a22979483ae584b858aca", 0x83}, {&(0x7f00000027c0)="f88ec3e11b05f8a55d5385424bee545ad4d3a008b8802b08331be191494d76efcaa0c4b2e2cb1013c790523112469ad7559809400ec9", 0x36}, {&(0x7f0000002800)="d0a159feb428249a91c2747811eeac114e377adc3caf1a569bb47ca8e6bc4e79f5f4df24213d662565018425c8694b7f6b9dd712308f5abb60ccfc29e86404cf8afad42378dabad9de0f003febd3dce9b5a2dbeac69a957d8ab50c9c8efbaf40c9cbc99b82351dca98f774fa1df939e3695981f28817ceb5cf24967fb894bebf625f2450fea0dd8731a2a0489b7e25b7b00c61694c4838ee85031903b142ce8ffc14566e38452e431e8a79da0002f575e64fcc3ee6d9efa5f0ca9cd077d50a9d53fdcdc7e479897a26074ec771b185a76eba308df4e45ae82cf361b64a4ae5fe1801", 0xe2}, {&(0x7f0000002900)="a6bb23ed608e5ab1c184ce96fa81ebbe7d09cd4132f58e76a734e96e2d93d804ec150be93c813d5d490d27e17e740f242ca62de63f036fca589bd5f87ab6ee9afc0964eb79b2c744e1ed178cb9cea9cc6cdf986afce6151d0bb255f47cde2e2b9d553fd136894d729594b2d9", 0x6c}], 0x6, &(0x7f0000003240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe53}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5bb0}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@end, @timestamp={0x44, 0x1c, 0xe5, 0x0, 0x6, [0x6, 0xf, 0x6, 0x5, 0x800, 0xf11]}, @generic={0x83, 0xa, "ccd8a267fa29bd37"}, @noop, @generic={0x7, 0x9, "453dd12317c54e"}, @end, @timestamp={0x44, 0x28, 0xa3, 0x0, 0x4, [0x4, 0x7a, 0x0, 0x5, 0xff27, 0x54, 0x8, 0x58, 0x7]}, @timestamp={0x44, 0xc, 0xe5, 0x0, 0xc, [0x7, 0x13c]}, @ra={0x94, 0x4, 0x1}, @end]}}}], 0xe8}}, {{&(0x7f0000002a80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002ac0)="194865d7929654a848d0d29538858c2ea9fc4c4319622f5b5dcc84a8c73caf668d389559bb072356bfd4a4f98ade6b4b34f5503c1a342e8910fbe908ca7cb0b0968bec93a2e32dc86f23d5cf2764d2456772e7567e1a091b38f55d14a8c9f26cd2aa0fc32e8c9d6b6977b7a144a7b83631f3bb93d41ec0598a0b01db38b8431263b05d8f2f90499f73760bd315c00ca259ac6b4964305b2434f0c85b08676fb5ef5a3bc6a443f4d0dc04f33233f34c1408f91e031b1fbc367f5d1ddfb22530d342a8258e24c902f3ed491244535fea", 0xcf}, {&(0x7f0000002bc0)="3286315e5866bfcee96da4a53c433a15d311948f2fd8cfac918085c236e411831f704463c38636b59314e4633d1750de3d4b1d71c1bdb0b22b802bae96f259141d884f6c502d8657d112810b6176e44bd8370a", 0x53}, {&(0x7f0000002c40)="e612d92037c2ecef2f580230dcf125eeeeb6499f1684174eb48d7743c43202e459349168c15f3a6f12f5af3d9143c1b5f912c31e6ba68a89f673d451a2c753f7a03c0f61c6ea978169e6007efb73bae18af4f091a2469d2d1d81c0f97aad0e654a54a7d2520ec3e065617e2473a81ac3c57ac4d345c746b41013ddf83d498a445127527ea6524d6dcef13949324aff18be3d934ee3f4771baa037a0ac198298978b153ab55595a1a41703cfe", 0xac}, {&(0x7f0000002d00)="0edc2aca4fa29c6d1158e3c842aa5d05864dffd25838fd41113bb4ccc2ab919893c3485f59c566b04e71cb51c83db1425cf1339ca831ef16920bccbc6c76bbc6018fe73b78f2c04248cbe09153bd1b9a5ca27aea88a2b2f740cf19a3b84b8ce8f0c1beb1de09a2df7b2f7b7a288d3dc2d9fdddd24390ae6858b5ed7a59aac682e812af77dbfae42e54b877cc42d3e6eb0985cca7fba3f7d4338642b7edb4d223b0c425e5d69e755124bafe40bc851fca79b62fed7b700d91d1236ebdda2ea8371f6133", 0xc3}, {&(0x7f0000002e00)="39ae3cfa4798bf1f18deb467d5d0b6688f75ded7f59b2ba90f66964e2881f2b3947a8c8c64986bbeca9e006b8eddb05184e8fde010af3ec6bec42c2c7306813a77155adac0a7b2306c777a7005a0627597b67a924c127bb84790cf6ce8f9e8c1b90e124fce62c3593b315be13579aeb44aa22b8ed8dc38a79cfe66c2b116825a2b8ce88e2edef63256a32a38487a64b79c533e37a14087f0fe4eebbf8b50c4f98f90f1b7a7cec6b837f23998ca6c84329b3d30a38990d78769d5001bae2314716157df", 0xc3}, {&(0x7f0000002f00)="6db87f5e79", 0x5}, {&(0x7f0000002f40)="7e09c39d451c998a65817cbc2e1cadab0eb82fffce04ff875c465e9bb1820c308c9054f29b1ed18972d04e1c8f8664c9566a9ca9b9b592c1a10221fb490c23673e0400491003e5de192806185cb0da90b2405d8007801d92c9482acf5f11fb37e73c083c4ddf9a2779d11f48c27413a9a076cc49bb43a756634ed99bbd6a76fd4ad362ca94012d0d158121a5c0adbb04b820b32a045e86c42e25bcc19a9005118361730dba68a8297c04c977", 0xac}], 0x7}}], 0x7, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000010000090800010012000000080003"], 0x30}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x1, 0x7}, 0x50) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 418.767853ms ago: executing program 2 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x2, &(0x7f0000000ac0), 0x300}, 0x3) 346.071674ms ago: executing program 0 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000000a00000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='dlm_lock_end\x00', r1, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x189002, 0x181) write(r5, &(0x7f0000004200)='t', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4e23, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0xc, 0x0, 0xc}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x1c8, 0xd0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x37}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xff000000, 0xffffff00], 'syz_tun\x00', 'dummy0\x00', {}, {}, 0x70, 0x5c, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1b, 0x9, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) sendfile(r5, r4, 0x0, 0x3ffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) 299.984115ms ago: executing program 2 (id=645): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4276}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004f8ffffffffffffff0000f1220000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2b, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "bf7494fcd3a42289"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x9, 0x42, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d86823991bca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 292.460235ms ago: executing program 1 (id=646): getrusage(0xffffffffffffffff, &(0x7f0000000340)={{}, {0x0}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0xf) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x6be}], 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000040)=0x6, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x9}}, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r4, &(0x7f0000000500)="802c8efeb9dc92d5ae8be0df76841f84fb716a20da65f071aaa9d9942eb9cd3d5133166ecbb942c37574d9d032f55b0e849ea6816bab8a1c98acee8fde8699ea57e25195bb0d92e1a05725a788ab8c0ec268cdd9366641f42d82b336e7ae8020f511ea0b767802ae6d67c9682621792bb2dfb4a736cad8419392e6a3d5052abc72a92de152f3d17fe4416c6876dd9d0f99ee9ecf12e9bfd5ba355dd8669bd76039a30fe5866cdd4c0ffd475aa574f33ff7fe8818317dcbd1e33f3743dbeef84add356f1676333996ed0a426acafa02a9224d94aae0749feec725eb7640781d52825df083a3bfa6cef421c842a38f63a5069cee79a3182854a9a351af652f13b734f7969889a3507ca7d062a1c59624ac20843e63aaa9cbc1f6b6a60ed9b1b17ff0c4ddec115663117f6ce65854b7a307ed0d29494eb935b8e5e71403f6c13b5e12e74b7821e0d1d0b77ca04c50c3cdb130f5f2720ee765c5432935544c2de0623a8f718a834c3729c8fd93e47cd7aa92bbbde1b2b96890e69a88bed97cda963be2ea4b8e50900c83aa2110da8c5e3900e00ac53a142f94fde7fde3151ccf077b332028a2cd42d1ec394655f6f0c0bbd89b3da606a7df2846038b0c2be4ad6acd3100c943f5206464db4017b7da40151acd0b0270353b04f8a89133dbdc8c936309b2f175afd7ad8da681e8ae52616d427f5480b3316f42946322c0b279b8d2e1ff83f5f90cc3df65f661c14ca47b627b849cfa835625a80ff18c5020800abfadb86210fcd316268fc09922068db09d63074766c513230a7b3f556f1482d2284d25fd5301", 0x244, 0xc0, 0x0, 0x0) shutdown(r4, 0x1) 255.002786ms ago: executing program 2 (id=647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)=ANY=[@ANYBLOB="3de00000", @ANYRES16=r3, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="24000300"/36], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e385ae2fd7a70ae0fa152600cb00845174f08076f8d784314000200776700000000000000001400020077673100000000000000000000000000080001000000", @ANYRES32=0x0, @ANYBLOB], 0x68}}, 0x4000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r5 = timerfd_create(0x7, 0x0) timerfd_gettime(r5, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRESDEC=r4, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)=@newqdisc={0xb0, 0x24, 0x10, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10], 0x1, [0x5, 0x6, 0x2, 0x800, 0x1, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r14 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r14, 0x40304580, &(0x7f0000000b40)={0x57, 0x0, 0x8, {0x80c, 0x1}, {0x4a, 0x400}, @cond=[{0x3, 0x4, 0x7, 0xa, 0x81bb, 0x2}, {0x8, 0x2f, 0xa1a1, 0x1, 0x1, 0x7}]}) write$char_usb(r14, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r14, 0x80404518, 0x0) sendmsg$NL80211_CMD_VENDOR(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008008}, 0x20008000) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r11, @ANYRES32=r12, @ANYRESOCT=r10, @ANYRES8, @ANYRESOCT=r14, @ANYRESHEX=r12, @ANYRESDEC=r10, @ANYRESDEC, @ANYRES8=r11, @ANYRESHEX=r8], 0x40}, 0x1, 0x0, 0x0, 0x2000c090}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r9, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "88014ab74934b423552cf88edf"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, 'XT'}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3138663f04112d16eed09822c1"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6104b87733cdd91a89b3cd61d6"}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x4000001) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fbdbdf250900000008000300", @ANYRES32=r13, @ANYBLOB="0c009900030000007700000004000b0028006e800400020004000100040002000400010004000200040001000400020004000200040001000500080001000000"], 0x5c}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 171.797707ms ago: executing program 1 (id=648): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00'}) socket$netlink(0x10, 0x3, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) 170.956147ms ago: executing program 4 (id=649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x50) 108.357518ms ago: executing program 1 (id=650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000640)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semtimedop(r1, &(0x7f0000000040)=[{0x2, 0x8000, 0x1000}, {0x2, 0xf, 0x1800}], 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r3, 0x0, 0x0, 0x1001f0) fallocate(r3, 0x3, 0x9, 0x10000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r9}, 0x10) 107.413378ms ago: executing program 3 (id=651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00'}, 0x18) symlink(&(0x7f0000002600)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file1\x00') open$dir(&(0x7f0000000040)='./file1\x00', 0x80040, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 106.848508ms ago: executing program 2 (id=652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 63.033068ms ago: executing program 3 (id=653): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) cachestat(r0, &(0x7f0000000000)={0x20000000400, 0x3}, &(0x7f0000000040), 0x0) 47.538589ms ago: executing program 3 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00', 0x1, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4276}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004f8ffffffffffffff0000f1220000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd2b, 0x0, {0x1d, 0x1, 0x3}, [@CGW_MOD_SET={0x15, 0x4, {{{0x1, 0x0, 0x0, 0x1}, 0x3, 0x1, 0x0, 0x0, "bf7494fcd3a42289"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0xff, 0x9, 0x42, 0x0, 0x0, "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", 0x3, "5c8d586b2a88d86823991bca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 0s ago: executing program 4 (id=655): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f\x00\x00\x00'], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r1, 0x0, 0x79) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x2300, 0x20}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x1, r4}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x560e, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r8, 0x0, 0x0}, 0x20) ioctl$TIOCSWINSZ(r5, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) ioctl$TIOCSSOFTCAR(r5, 0x541a, 0x0) writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)="a5629bb879b06feaa92d886fbf844848d06b4a7630951fcdc626a6d1e734a346d9fd855720bf4fecef31766d396830d264db73c6fd9eb3d0ca15c57e5ffc0df64d0e924a315115a4ea6e4a02a3afc103e5a029c5a0d2ff095a5d133df6843b24bc1273b68fe8a124b4e2c0effba084fb9c391ed8469b83972c8dd7f00ae0e60204a84a8c612af262f20ad44f4457d555e55b6b8ca83519577ced395cbd73778baa5e663677a0a6d1aeba6e7a2ec291609e51ca2c28829385bd49e7004cc2f427c8aec0c8d405ad2485bcb4585643527a5059e4d7", 0xd4}, {&(0x7f0000000100)="9d32102a21dac213412d70bbfb2c9dbf0a24ad073d24350ef57b74bbd157e811128f104a4f8cc0e416386fbbcbdee9d045426cf7c1dae79967f8dd6a8fa8f273d73bf12674", 0x45}, {&(0x7f00000001c0)="58b225b70c288f4168ea580d4afbc5998b3a12a8a301133ebf7740f2bf47c7790c8801e8d6fd2f6ecba99479a636c11c3b77c22430eb5546558225561fb492cb30574335769569dcc625c3a15ba22d6eaadbfa", 0x53}, {&(0x7f00000003c0)="84eed8c70eb1b00a0d92789a38821bcc94fb6c84708d9d3c0a0986d0073ec6fb0b1785d4e4d0396301a4f2b87e26234d6e006e8b1bbbb8bceeac4e5ba93edcbb71f206a5837fb0cc815b87ed884d15284b1e723176bbead4b0abdf982b1843bab17fd55be35b617416fb20915231767ddeea137e742e7efac7528fdd6259d64e629be8f2f6a7311b72878b4b94474f792a6fec7b9880c153f028a7559c1f977862cb59164bd184388945dff6a33e804c3783d4cf5ed8e1ad235d0b088191ec02f682e368412e5323d1f14a38f5f7b9474b921e8b34a13c4ca12f56e17b", 0xdd}, {&(0x7f0000000580)="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", 0x1000}], 0x5) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="93", 0x1, 0x80, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) syz_emit_ethernet(0x616, &(0x7f0000000040)=ANY=[], 0x0) syz_usbip_server_init(0x5) kernel console output (not intermixed with test programs): comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.000133][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.012683][ T29] audit: type=1400 audit(1752824150.015:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.044700][ T29] audit: type=1400 audit(1752824150.085:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.889489][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 26.940009][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.948504][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 26.995648][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.003055][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.010463][ T3310] bridge_slave_0: entered allmulticast mode [ 27.016879][ T3310] bridge_slave_0: entered promiscuous mode [ 27.025731][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.032916][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.040279][ T3310] bridge_slave_1: entered allmulticast mode [ 27.046716][ T3310] bridge_slave_1: entered promiscuous mode [ 27.087480][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.097045][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.116781][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.140288][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.147389][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.154645][ T3307] bridge_slave_0: entered allmulticast mode [ 27.161141][ T3307] bridge_slave_0: entered promiscuous mode [ 27.176058][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.183178][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.190539][ T3307] bridge_slave_1: entered allmulticast mode [ 27.196868][ T3307] bridge_slave_1: entered promiscuous mode [ 27.207760][ T3310] team0: Port device team_slave_0 added [ 27.214301][ T3310] team0: Port device team_slave_1 added [ 27.237901][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.245076][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.252245][ T3308] bridge_slave_0: entered allmulticast mode [ 27.258691][ T3308] bridge_slave_0: entered promiscuous mode [ 27.268970][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.289914][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.296956][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.304302][ T3308] bridge_slave_1: entered allmulticast mode [ 27.310920][ T3308] bridge_slave_1: entered promiscuous mode [ 27.324545][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.331530][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.357494][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.371415][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.387205][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.394254][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.420310][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.436621][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.446707][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.474249][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.492029][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.499139][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.506389][ T3314] bridge_slave_0: entered allmulticast mode [ 27.512974][ T3314] bridge_slave_0: entered promiscuous mode [ 27.524191][ T3307] team0: Port device team_slave_0 added [ 27.530713][ T3307] team0: Port device team_slave_1 added [ 27.546524][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.553667][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.560890][ T3314] bridge_slave_1: entered allmulticast mode [ 27.567183][ T3314] bridge_slave_1: entered promiscuous mode [ 27.600600][ T3308] team0: Port device team_slave_0 added [ 27.606451][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.613491][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.639517][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.652222][ T3310] hsr_slave_0: entered promiscuous mode [ 27.658193][ T3310] hsr_slave_1: entered promiscuous mode [ 27.665019][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.672191][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.679649][ T3316] bridge_slave_0: entered allmulticast mode [ 27.685924][ T3316] bridge_slave_0: entered promiscuous mode [ 27.697458][ T3308] team0: Port device team_slave_1 added [ 27.703446][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.710430][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.736367][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.751651][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.758752][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.765965][ T3316] bridge_slave_1: entered allmulticast mode [ 27.772540][ T3316] bridge_slave_1: entered promiscuous mode [ 27.784818][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.807621][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.837991][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.851302][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.858262][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.884244][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.899739][ T3307] hsr_slave_0: entered promiscuous mode [ 27.905896][ T3307] hsr_slave_1: entered promiscuous mode [ 27.912123][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.919749][ T3307] Cannot create hsr debugfs directory [ 27.926371][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.941319][ T3314] team0: Port device team_slave_0 added [ 27.947214][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.954201][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.980604][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.010489][ T3314] team0: Port device team_slave_1 added [ 28.036869][ T3316] team0: Port device team_slave_0 added [ 28.048110][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.055097][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.081077][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.094946][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.101921][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.127852][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.139402][ T3316] team0: Port device team_slave_1 added [ 28.175553][ T3308] hsr_slave_0: entered promiscuous mode [ 28.181531][ T3308] hsr_slave_1: entered promiscuous mode [ 28.187342][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.194953][ T3308] Cannot create hsr debugfs directory [ 28.217306][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.224286][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.250203][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.276875][ T3314] hsr_slave_0: entered promiscuous mode [ 28.282899][ T3314] hsr_slave_1: entered promiscuous mode [ 28.288699][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.296239][ T3314] Cannot create hsr debugfs directory [ 28.302053][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.309067][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.335150][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.377900][ T3316] hsr_slave_0: entered promiscuous mode [ 28.383916][ T3316] hsr_slave_1: entered promiscuous mode [ 28.390405][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.398002][ T3316] Cannot create hsr debugfs directory [ 28.491933][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.511759][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.520996][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.537499][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.573111][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.581394][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.590569][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.604910][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.618091][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.639641][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.652662][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.672024][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.681140][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.692586][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.709459][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.717844][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.743086][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.763715][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.772673][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.782859][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.797717][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.812406][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.819954][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.835045][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.842181][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.870199][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.878754][ T270] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.885897][ T270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.917278][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.924416][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.944818][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.951968][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.975101][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.984623][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.997180][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.017605][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.032730][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.045189][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.052347][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.067716][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.078308][ T270] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.085502][ T270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.104477][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.111660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.121665][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.128795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.143724][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.162935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.170084][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.178974][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.186098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.197249][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.222537][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.336698][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.367688][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.388424][ T3310] veth0_vlan: entered promiscuous mode [ 29.406997][ T3310] veth1_vlan: entered promiscuous mode [ 29.416925][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.437573][ T3308] veth0_vlan: entered promiscuous mode [ 29.459469][ T3310] veth0_macvtap: entered promiscuous mode [ 29.472576][ T3308] veth1_vlan: entered promiscuous mode [ 29.489581][ T3310] veth1_macvtap: entered promiscuous mode [ 29.505017][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.529334][ T3308] veth0_macvtap: entered promiscuous mode [ 29.536595][ T3308] veth1_macvtap: entered promiscuous mode [ 29.545796][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.556969][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.568415][ T3310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.577216][ T3310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.586451][ T3310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.595352][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.611939][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.625549][ T3314] veth0_vlan: entered promiscuous mode [ 29.643937][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.652788][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.662085][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670895][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.685555][ T3316] veth0_vlan: entered promiscuous mode [ 29.692809][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.692822][ T29] audit: type=1400 audit(1752824154.805:81): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.jfngmO/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.702908][ T3307] veth0_vlan: entered promiscuous mode [ 29.729946][ T29] audit: type=1400 audit(1752824154.805:82): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.752329][ T29] audit: type=1400 audit(1752824154.805:83): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.jfngmO/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.753504][ T3314] veth1_vlan: entered promiscuous mode [ 29.777542][ T29] audit: type=1400 audit(1752824154.805:84): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.804864][ T29] audit: type=1400 audit(1752824154.805:85): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.jfngmO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.831571][ T29] audit: type=1400 audit(1752824154.805:86): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/root/syzkaller.jfngmO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.859004][ T29] audit: type=1400 audit(1752824154.805:87): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.880916][ T29] audit: type=1400 audit(1752824154.845:88): avc: denied { mounton } for pid=3310 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.903690][ T29] audit: type=1400 audit(1752824154.845:89): avc: denied { mount } for pid=3310 comm="syz-executor" name="/" dev="gadgetfs" ino=3662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.911910][ T3314] veth0_macvtap: entered promiscuous mode [ 29.927590][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.943227][ T3316] veth1_vlan: entered promiscuous mode [ 29.959606][ T3314] veth1_macvtap: entered promiscuous mode [ 29.973760][ T3316] veth0_macvtap: entered promiscuous mode [ 29.979956][ T29] audit: type=1400 audit(1752824155.075:90): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.006325][ T3307] veth1_vlan: entered promiscuous mode [ 30.019045][ T3316] veth1_macvtap: entered promiscuous mode [ 30.034868][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.050601][ T3476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.055255][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.070888][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.082656][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.091624][ T3307] veth0_macvtap: entered promiscuous mode [ 30.092330][ T3476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.099544][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.113838][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122604][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.131477][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.151978][ T3476] loop0: detected capacity change from 0 to 512 [ 30.154532][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.167065][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.169623][ T3476] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.175852][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.188848][ T3476] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.197562][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.219974][ T3476] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.233790][ T3476] EXT4-fs (loop0): 1 truncate cleaned up [ 30.242610][ T3476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.256667][ T3307] veth1_macvtap: entered promiscuous mode [ 30.279747][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.294517][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.303350][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.312122][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.320934][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329707][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.341421][ T3485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.350406][ T3485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.381929][ T3488] random: crng reseeded on system resumption [ 30.437806][ T3493] loop3: detected capacity change from 0 to 512 [ 30.447106][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4: casefold flag without casefold feature [ 30.460181][ T3493] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 30.475031][ T3485] loop1: detected capacity change from 0 to 8192 [ 30.479108][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.482446][ T3485] ======================================================= [ 30.482446][ T3485] WARNING: The mand mount option has been deprecated and [ 30.482446][ T3485] and is ignored by this kernel. Remove the mand [ 30.482446][ T3485] option from the mount to silence this warning. [ 30.482446][ T3485] ======================================================= [ 30.573473][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 30.685443][ T3511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.694760][ T3511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.753262][ T3511] loop4: detected capacity change from 0 to 8192 [ 30.804480][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.857172][ T3518] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 31.010147][ T3524] loop0: detected capacity change from 0 to 1024 [ 31.030683][ T3524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.058884][ T3524] pim6reg: entered allmulticast mode [ 31.066450][ T3524] pim6reg: left allmulticast mode [ 31.316435][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.415959][ T3534] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11'. [ 31.611221][ T3537] infiniband syz!: set active [ 31.615966][ T3537] infiniband syz!: added team_slave_0 [ 31.631393][ T3537] RDS/IB: syz!: added [ 31.642722][ T3537] smc: adding ib device syz! with port count 1 [ 31.649876][ T3537] smc: ib device syz! port 1 has pnetid [ 31.758137][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.927578][ T3537] syz.2.13 (3537) used greatest stack depth: 10616 bytes left [ 31.950599][ T3542] wireguard0: entered promiscuous mode [ 31.956120][ T3542] wireguard0: entered allmulticast mode [ 31.977343][ T3546] random: crng reseeded on system resumption [ 32.203105][ T3553] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 32.395189][ T3555] wireguard0: entered promiscuous mode [ 32.400790][ T3555] wireguard0: entered allmulticast mode [ 32.455127][ T3549] SELinux: failed to load policy [ 32.594224][ T3569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.607143][ T3569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.673754][ T3569] loop2: detected capacity change from 0 to 8192 [ 32.760870][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 32.769676][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 32.782158][ T3572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 32.791019][ T3572] tipc: Invalid UDP bearer configuration [ 32.791032][ T3572] tipc: Enabling of bearer rejected, failed to enable media [ 32.828008][ T3577] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 32.836002][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.843241][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.854115][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.861265][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.868562][ T3577] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.875687][ T3577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.887317][ T3577] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 32.889180][ T3578] Zero length message leads to an empty skb [ 32.929824][ T3577] syz.0.27 (3577) used greatest stack depth: 9824 bytes left [ 33.130219][ T3594] loop3: detected capacity change from 0 to 1024 [ 33.162812][ T3594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.191480][ T3594] pim6reg: entered allmulticast mode [ 33.197562][ T3594] pim6reg: left allmulticast mode [ 33.214007][ T3600] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 33.314233][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 33.323012][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 33.337261][ T3605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.37'. [ 33.346152][ T3605] tipc: Invalid UDP bearer configuration [ 33.346163][ T3605] tipc: Enabling of bearer rejected, failed to enable media [ 33.536049][ T3613] FAULT_INJECTION: forcing a failure. [ 33.536049][ T3613] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.549261][ T3613] CPU: 1 UID: 0 PID: 3613 Comm: syz.1.41 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 33.549356][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 33.549374][ T3613] Call Trace: [ 33.549382][ T3613] [ 33.549391][ T3613] __dump_stack+0x1d/0x30 [ 33.549416][ T3613] dump_stack_lvl+0xe8/0x140 [ 33.549494][ T3613] dump_stack+0x15/0x1b [ 33.549512][ T3613] should_fail_ex+0x265/0x280 [ 33.549556][ T3613] should_fail+0xb/0x20 [ 33.549586][ T3613] should_fail_usercopy+0x1a/0x20 [ 33.549624][ T3613] _copy_from_user+0x1c/0xb0 [ 33.549695][ T3613] memdup_sockptr_noprof+0x70/0xd0 [ 33.549763][ T3613] raw_setsockopt+0x34e/0xbf0 [ 33.549802][ T3613] ? __pfx_raw_setsockopt+0x10/0x10 [ 33.549939][ T3613] __sys_setsockopt+0x184/0x200 [ 33.549977][ T3613] __x64_sys_setsockopt+0x64/0x80 [ 33.550015][ T3613] x64_sys_call+0x2bd5/0x2fb0 [ 33.550050][ T3613] do_syscall_64+0xd2/0x200 [ 33.550068][ T3613] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 33.550132][ T3613] ? clear_bhb_loop+0x40/0x90 [ 33.550164][ T3613] ? clear_bhb_loop+0x40/0x90 [ 33.550190][ T3613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.550234][ T3613] RIP: 0033:0x7f34cfcfe9a9 [ 33.550253][ T3613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.550332][ T3613] RSP: 002b:00007f34ce367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 33.550354][ T3613] RAX: ffffffffffffffda RBX: 00007f34cff25fa0 RCX: 00007f34cfcfe9a9 [ 33.550404][ T3613] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000006 [ 33.550416][ T3613] RBP: 00007f34ce367090 R08: 0000000000000f00 R09: 0000000000000000 [ 33.550470][ T3613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.550484][ T3613] R13: 0000000000000000 R14: 00007f34cff25fa0 R15: 00007ffca77692b8 [ 33.550502][ T3613] [ 33.596209][ T3618] loop1: detected capacity change from 0 to 1024 [ 33.651127][ T3614] SELinux: failed to load policy [ 33.725269][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.780483][ T3618] pim6reg: entered allmulticast mode [ 33.786406][ T3618] pim6reg: left allmulticast mode [ 33.859177][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.870223][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.871499][ T3622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 33.917380][ T3628] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 33.978617][ C0] hrtimer: interrupt took 26736 ns [ 34.035310][ T3644] random: crng reseeded on system resumption [ 34.068935][ T3646] kernel profiling enabled (shift: 7) [ 34.123903][ T3646] vhci_hcd: default hub control req: 6031 v09fa i0008 l0 [ 34.144809][ T3650] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 34.204744][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.211988][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.222478][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.229603][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.236947][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.244061][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.266214][ T3650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.294538][ T3654] netlink: 32 bytes leftover after parsing attributes in process `syz.2.56'. [ 34.304642][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.56'. [ 34.316014][ T3654] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.346572][ T3656] loop4: detected capacity change from 0 to 1024 [ 34.365201][ T3664] netlink: 'syz.1.60': attribute type 26 has an invalid length. [ 34.375144][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.393354][ T3656] pim6reg: entered allmulticast mode [ 34.401525][ T3656] pim6reg: left allmulticast mode [ 34.416511][ T3667] loop1: detected capacity change from 0 to 512 [ 34.441879][ T3667] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 34.475635][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.519843][ T3667] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 34.528218][ T3667] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.61: corrupted in-inode xattr: e_value size too large [ 34.570982][ T3667] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.61: couldn't read orphan inode 15 (err -117) [ 34.628151][ T3680] tipc: Invalid UDP bearer configuration [ 34.628169][ T3680] tipc: Enabling of bearer rejected, failed to enable media [ 34.660385][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.702134][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 34.702202][ T29] audit: type=1400 audit(1752824159.815:471): avc: denied { write } for pid=3666 comm="syz.1.61" path="/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.761997][ T3675] hsr0: entered promiscuous mode [ 34.779903][ T29] audit: type=1400 audit(1752824159.875:472): avc: denied { ioctl } for pid=3668 comm="syz.2.62" path="socket:[4091]" dev="sockfs" ino=4091 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.805501][ T29] audit: type=1400 audit(1752824159.875:473): avc: denied { setopt } for pid=3668 comm="syz.2.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.838681][ T3675] hsr_slave_0: left promiscuous mode [ 34.849854][ T3675] hsr_slave_1: left promiscuous mode [ 34.874346][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.904228][ T3686] serio: Serial port ptm1 [ 34.917381][ T29] audit: type=1400 audit(1752824160.025:474): avc: denied { validate_trans } for pid=3689 comm="syz.1.68" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 34.950179][ T3675] hsr0 (unregistering): left promiscuous mode [ 34.967193][ T3691] capability: warning: `syz.3.67' uses 32-bit capabilities (legacy support in use) [ 35.020271][ T3678] hsr0: entered promiscuous mode [ 35.046942][ T3678] hsr_slave_0: left promiscuous mode [ 35.109076][ T3690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 35.115797][ T3690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 35.123674][ T3690] vhci_hcd vhci_hcd.0: Device attached [ 35.140043][ T3678] hsr_slave_1: left promiscuous mode [ 35.147805][ T3694] vhci_hcd: connection closed [ 35.148002][ T31] vhci_hcd: stop threads [ 35.157124][ T31] vhci_hcd: release socket [ 35.161631][ T31] vhci_hcd: disconnect device [ 35.167811][ T3678] hsr0 (unregistering): left promiscuous mode [ 35.184503][ T29] audit: type=1400 audit(1752824160.295:475): avc: denied { ioctl } for pid=3696 comm="syz.3.69" path="socket:[5135]" dev="sockfs" ino=5135 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.223100][ T3700] FAULT_INJECTION: forcing a failure. [ 35.223100][ T3700] name failslab, interval 1, probability 0, space 0, times 1 [ 35.235962][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.2.70 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 35.235981][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 35.235989][ T3700] Call Trace: [ 35.235993][ T3700] [ 35.236050][ T3700] __dump_stack+0x1d/0x30 [ 35.236159][ T3700] dump_stack_lvl+0xe8/0x140 [ 35.236183][ T3700] dump_stack+0x15/0x1b [ 35.236203][ T3700] should_fail_ex+0x265/0x280 [ 35.236406][ T3700] ? serio_queue_event+0xcd/0x210 [ 35.236455][ T3700] should_failslab+0x8c/0xb0 [ 35.236470][ T3700] __kmalloc_cache_noprof+0x4c/0x320 [ 35.236517][ T3700] serio_queue_event+0xcd/0x210 [ 35.236605][ T3700] __serio_register_port+0x1b8/0x1d0 [ 35.236618][ T3700] serport_ldisc_read+0x1d6/0x300 [ 35.236653][ T3700] ? terminate_walk+0x27f/0x2a0 [ 35.236758][ T3700] tty_read+0x154/0x470 [ 35.236783][ T3700] ? __import_iovec+0x428/0x540 [ 35.236800][ T3700] do_iter_readv_writev+0x421/0x4c0 [ 35.236835][ T3700] vfs_readv+0x1ea/0x690 [ 35.236854][ T3700] do_readv+0xe7/0x210 [ 35.236885][ T3700] __x64_sys_readv+0x45/0x50 [ 35.236896][ T3700] x64_sys_call+0x29af/0x2fb0 [ 35.236934][ T3700] do_syscall_64+0xd2/0x200 [ 35.236945][ T3700] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 35.236961][ T3700] ? clear_bhb_loop+0x40/0x90 [ 35.237021][ T3700] ? clear_bhb_loop+0x40/0x90 [ 35.237110][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.237130][ T3700] RIP: 0033:0x7f282434e9a9 [ 35.237167][ T3700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.237186][ T3700] RSP: 002b:00007f28229af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 35.237198][ T3700] RAX: ffffffffffffffda RBX: 00007f2824575fa0 RCX: 00007f282434e9a9 [ 35.237206][ T3700] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000004 [ 35.237253][ T3700] RBP: 00007f28229af090 R08: 0000000000000000 R09: 0000000000000000 [ 35.237267][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.237279][ T3700] R13: 0000000000000000 R14: 00007f2824575fa0 R15: 00007ffc7a36c208 [ 35.237436][ T3700] [ 35.237443][ T3700] serio: Not enough memory to queue event 3 [ 35.459344][ T3700] serio: Serial port ptm0 [ 35.499057][ T3706] loop4: detected capacity change from 0 to 1024 [ 35.510179][ T3706] EXT4-fs: Ignoring removed bh option [ 35.541255][ T3706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.565133][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566002][ T3710] pim6reg: entered allmulticast mode [ 35.583207][ T3710] pim6reg: left allmulticast mode [ 35.593159][ T3714] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 35.639793][ T3722] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 35.664596][ T29] audit: type=1400 audit(1752824160.775:476): avc: denied { create } for pid=3723 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.697092][ T3727] openvswitch: netlink: Message has 6 unknown bytes. [ 35.704036][ T29] audit: type=1400 audit(1752824160.805:477): avc: denied { write } for pid=3723 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 35.729998][ T3724] __nla_validate_parse: 6 callbacks suppressed [ 35.730017][ T3724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 35.795116][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 35.803957][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 35.816259][ T3731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.81'. [ 35.825127][ T3731] tipc: Invalid UDP bearer configuration [ 35.825140][ T3731] tipc: Enabling of bearer rejected, failed to enable media [ 35.839736][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 35.848464][ T3735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 35.934455][ T3743] netlink: 32 bytes leftover after parsing attributes in process `syz.0.85'. [ 35.944429][ T3743] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 35.954716][ T29] audit: type=1326 audit(1752824161.065:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 35.977949][ T29] audit: type=1326 audit(1752824161.065:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 36.001181][ T29] audit: type=1326 audit(1752824161.065:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.0.85" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 36.002273][ T3745] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 36.060206][ T3749] FAULT_INJECTION: forcing a failure. [ 36.060206][ T3749] name failslab, interval 1, probability 0, space 0, times 0 [ 36.072942][ T3749] CPU: 0 UID: 0 PID: 3749 Comm: syz.0.90 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 36.072974][ T3749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.072987][ T3749] Call Trace: [ 36.072994][ T3749] [ 36.073002][ T3749] __dump_stack+0x1d/0x30 [ 36.073026][ T3749] dump_stack_lvl+0xe8/0x140 [ 36.073047][ T3749] dump_stack+0x15/0x1b [ 36.073065][ T3749] should_fail_ex+0x265/0x280 [ 36.073161][ T3749] ? register_netdevice+0x1e8/0xf00 [ 36.073260][ T3749] should_failslab+0x8c/0xb0 [ 36.073283][ T3749] __kmalloc_cache_noprof+0x4c/0x320 [ 36.073313][ T3749] register_netdevice+0x1e8/0xf00 [ 36.073378][ T3749] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 36.073408][ T3749] ? alloc_netdev_mqs+0x8b7/0xab0 [ 36.073503][ T3749] ? sized_strscpy+0x121/0x1a0 [ 36.073530][ T3749] vti6_tnl_create2+0x85/0x250 [ 36.073588][ T3749] vti6_locate+0x3a6/0x440 [ 36.073616][ T3749] vti6_siocdevprivate+0x579/0x8e0 [ 36.073649][ T3749] dev_ifsioc+0x8f5/0xaa0 [ 36.073749][ T3749] dev_ioctl+0x78d/0x960 [ 36.073771][ T3749] sock_ioctl+0x593/0x610 [ 36.073799][ T3749] ? __pfx_sock_ioctl+0x10/0x10 [ 36.073824][ T3749] __se_sys_ioctl+0xce/0x140 [ 36.073873][ T3749] __x64_sys_ioctl+0x43/0x50 [ 36.073966][ T3749] x64_sys_call+0x19a8/0x2fb0 [ 36.073991][ T3749] do_syscall_64+0xd2/0x200 [ 36.074008][ T3749] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.074039][ T3749] ? clear_bhb_loop+0x40/0x90 [ 36.074096][ T3749] ? clear_bhb_loop+0x40/0x90 [ 36.074110][ T3749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.074169][ T3749] RIP: 0033:0x7f578cc9e9a9 [ 36.074179][ T3749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.074250][ T3749] RSP: 002b:00007f578b2ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 36.074262][ T3749] RAX: ffffffffffffffda RBX: 00007f578cec5fa0 RCX: 00007f578cc9e9a9 [ 36.074270][ T3749] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 36.074278][ T3749] RBP: 00007f578b2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 36.074285][ T3749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 36.074318][ T3749] R13: 0000000000000000 R14: 00007f578cec5fa0 R15: 00007ffe5291ca18 [ 36.074329][ T3749] [ 36.470941][ T3754] loop4: detected capacity change from 0 to 512 [ 36.478176][ T3754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.496212][ T3754] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.92: invalid block [ 36.687753][ T3757] loop0: detected capacity change from 0 to 512 [ 36.694670][ T3757] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.701211][ T3757] EXT4-fs: Ignoring removed bh option [ 36.710363][ T3757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.724076][ T3757] EXT4-fs (loop0): 1 truncate cleaned up [ 36.730321][ T3757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.757298][ T3757] 9pnet_fd: Insufficient options for proto=fd [ 36.870046][ T3754] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.92: invalid indirect mapped block 4294967295 (level 1) [ 36.931392][ T3754] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.92: invalid indirect mapped block 4294967295 (level 1) [ 36.964821][ T3754] EXT4-fs (loop4): 2 truncates cleaned up [ 36.966430][ T3762] loop3: detected capacity change from 0 to 512 [ 36.971224][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.980189][ T3762] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 36.992894][ T3754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.009684][ T3762] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.017410][ T3762] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 37.032268][ T3762] EXT4-fs (loop3): Remounting filesystem read-only [ 37.038932][ T3762] EXT4-fs (loop3): 1 truncate cleaned up [ 37.045127][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.049455][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 37.069895][ T3774] netlink: 32 bytes leftover after parsing attributes in process `syz.2.96'. [ 37.073195][ T3762] tipc: Invalid UDP bearer configuration [ 37.078816][ T3762] tipc: Enabling of bearer rejected, failed to enable media [ 37.105335][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.135374][ T3780] loop1: detected capacity change from 0 to 1024 [ 37.151225][ T3780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.178775][ T3780] pim6reg: entered allmulticast mode [ 37.191242][ T3780] pim6reg: left allmulticast mode [ 37.235948][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.347523][ T3800] pim6reg: entered allmulticast mode [ 37.356294][ T3800] pim6reg: left allmulticast mode [ 37.397672][ T3804] loop4: detected capacity change from 0 to 512 [ 37.404675][ T3804] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 37.414842][ T3804] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.422134][ T3804] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 37.440513][ T3804] EXT4-fs (loop4): Remounting filesystem read-only [ 37.447348][ T3804] EXT4-fs (loop4): 1 truncate cleaned up [ 37.454642][ T3804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.479489][ T3804] tipc: Invalid UDP bearer configuration [ 37.479506][ T3804] tipc: Enabling of bearer rejected, failed to enable media [ 37.502750][ T3810] loop3: detected capacity change from 0 to 512 [ 37.509742][ T3810] EXT4-fs: Ignoring removed i_version option [ 37.515866][ T3810] ext3: Unknown parameter 'fsmagic' [ 37.524185][ T3810] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 37.537943][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.588395][ T3821] random: crng reseeded on system resumption [ 37.639271][ T3825] pim6reg: entered allmulticast mode [ 37.645178][ T3825] pim6reg: left allmulticast mode [ 37.872113][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.906911][ T3853] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 37.918443][ T3857] random: crng reseeded on system resumption [ 37.924420][ T3854] vhci_hcd: invalid port number 236 [ 37.924432][ T3854] vhci_hcd: invalid port number 236 [ 37.973772][ T3862] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 38.043572][ T3874] loop4: detected capacity change from 0 to 512 [ 38.055760][ T3874] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.136: casefold flag without casefold feature [ 38.069166][ T3874] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.136: couldn't read orphan inode 15 (err -117) [ 38.082111][ T3874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.191051][ T3890] serio: Serial port ptm0 [ 38.289912][ T3899] loop3: detected capacity change from 0 to 512 [ 38.296778][ T3899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.308211][ T3899] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.142: invalid block [ 38.321864][ T3899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.142: invalid indirect mapped block 4294967295 (level 1) [ 38.338880][ T3899] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.142: invalid indirect mapped block 4294967295 (level 1) [ 38.354442][ T3899] EXT4-fs (loop3): 2 truncates cleaned up [ 38.362323][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.386237][ T3899] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.403922][ T3903] random: crng reseeded on system resumption [ 38.472774][ T1035] Process accounting resumed [ 38.490054][ T3918] FAULT_INJECTION: forcing a failure. [ 38.490054][ T3918] name failslab, interval 1, probability 0, space 0, times 0 [ 38.502839][ T3918] CPU: 0 UID: 0 PID: 3918 Comm: syz.2.148 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 38.502893][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 38.502905][ T3918] Call Trace: [ 38.502910][ T3918] [ 38.502914][ T3918] __dump_stack+0x1d/0x30 [ 38.502929][ T3918] dump_stack_lvl+0xe8/0x140 [ 38.502949][ T3918] dump_stack+0x15/0x1b [ 38.502959][ T3918] should_fail_ex+0x265/0x280 [ 38.502977][ T3918] should_failslab+0x8c/0xb0 [ 38.502991][ T3918] __kmalloc_noprof+0xa5/0x3e0 [ 38.503007][ T3918] ? io_alloc_ocqe+0x51/0x250 [ 38.503048][ T3918] io_alloc_ocqe+0x51/0x250 [ 38.503185][ T3918] io_cqe_overflow_locked+0x26/0x40 [ 38.503199][ T3918] __io_submit_flush_completions+0x258/0xa00 [ 38.503216][ T3918] ? io_submit_fail_init+0x21a/0x2f0 [ 38.503231][ T3918] io_submit_sqes+0xe32/0xfd0 [ 38.503331][ T3918] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 38.503349][ T3918] ? 0xffffffff81000000 [ 38.503357][ T3918] ? __rcu_read_unlock+0x4f/0x70 [ 38.503416][ T3918] ? get_pid_task+0x96/0xd0 [ 38.503428][ T3918] ? proc_fail_nth_write+0x12d/0x160 [ 38.503448][ T3918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 38.503496][ T3918] ? vfs_write+0x75e/0x8e0 [ 38.503516][ T3918] ? __rcu_read_unlock+0x4f/0x70 [ 38.503529][ T3918] ? __fget_files+0x184/0x1c0 [ 38.503541][ T3918] ? fput+0x8f/0xc0 [ 38.503629][ T3918] __x64_sys_io_uring_enter+0x78/0x90 [ 38.503647][ T3918] x64_sys_call+0x28c8/0x2fb0 [ 38.503684][ T3918] do_syscall_64+0xd2/0x200 [ 38.503696][ T3918] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.503717][ T3918] ? clear_bhb_loop+0x40/0x90 [ 38.503783][ T3918] ? clear_bhb_loop+0x40/0x90 [ 38.503796][ T3918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.503875][ T3918] RIP: 0033:0x7f282434e9a9 [ 38.503916][ T3918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.503928][ T3918] RSP: 002b:00007f28229af038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 38.503994][ T3918] RAX: ffffffffffffffda RBX: 00007f2824575fa0 RCX: 00007f282434e9a9 [ 38.504002][ T3918] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000003 [ 38.504010][ T3918] RBP: 00007f28229af090 R08: 0000000000000000 R09: 0000000000000000 [ 38.504017][ T3918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.504084][ T3918] R13: 0000000000000000 R14: 00007f2824575fa0 R15: 00007ffc7a36c208 [ 38.504095][ T3918] [ 38.757353][ T3919] macvlan2: entered allmulticast mode [ 38.762800][ T3919] veth1_vlan: entered allmulticast mode [ 38.887413][ T3924] SELinux: failed to load policy [ 38.904080][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.931207][ T3930] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 38.944369][ T3921] hsr0: entered promiscuous mode [ 38.958770][ T3921] hsr_slave_0: left promiscuous mode [ 38.970404][ T3921] hsr_slave_1: left promiscuous mode [ 38.982817][ T3921] hsr0 (unregistering): left promiscuous mode [ 38.993953][ T3934] loop4: detected capacity change from 0 to 512 [ 39.001096][ T3934] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.011808][ T3936] vhci_hcd: invalid port number 236 [ 39.012946][ T3934] EXT4-fs (loop4): 1 orphan inode deleted [ 39.017081][ T3936] vhci_hcd: invalid port number 236 [ 39.028281][ T3934] EXT4-fs (loop4): 1 truncate cleaned up [ 39.034809][ T3934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.073222][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.080054][ T3942] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 39.111381][ T3944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.131078][ T3944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.143571][ T3947] random: crng reseeded on system resumption [ 39.177512][ T3944] loop4: detected capacity change from 0 to 8192 [ 39.211621][ T3953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 39.218238][ T3953] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 39.225992][ T3953] vhci_hcd vhci_hcd.0: Device attached [ 39.232164][ T3954] vhci_hcd: connection closed [ 39.232423][ T41] vhci_hcd: stop threads [ 39.241442][ T41] vhci_hcd: release socket [ 39.245878][ T41] vhci_hcd: disconnect device [ 39.271297][ T3958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.511253][ T3980] loop1: detected capacity change from 0 to 1024 [ 39.550272][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.567453][ T3980] pim6reg: entered allmulticast mode [ 39.574391][ T3980] pim6reg: left allmulticast mode [ 39.657872][ T3987] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 40.161517][ T4012] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 40.191389][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.201391][ T4014] 9pnet_fd: Insufficient options for proto=fd [ 40.263467][ T4022] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 40.270093][ T4022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 40.277876][ T4022] vhci_hcd vhci_hcd.0: Device attached [ 40.285035][ T4023] vhci_hcd: connection closed [ 40.285800][ T270] vhci_hcd: stop threads [ 40.294829][ T270] vhci_hcd: release socket [ 40.299279][ T270] vhci_hcd: disconnect device [ 40.313150][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 40.313165][ T29] audit: type=1326 audit(1752824165.425:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.352559][ T29] audit: type=1326 audit(1752824165.425:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.375253][ T29] audit: type=1326 audit(1752824165.425:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.397883][ T29] audit: type=1326 audit(1752824165.425:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.420593][ T29] audit: type=1326 audit(1752824165.425:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.443361][ T29] audit: type=1326 audit(1752824165.425:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.466013][ T29] audit: type=1326 audit(1752824165.425:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.468575][ T4030] vhci_hcd: invalid port number 236 [ 40.488730][ T29] audit: type=1326 audit(1752824165.425:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.494006][ T4030] vhci_hcd: invalid port number 236 [ 40.516488][ T29] audit: type=1326 audit(1752824165.425:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.544356][ T29] audit: type=1326 audit(1752824165.425:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4015 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 40.691389][ T4046] loop3: detected capacity change from 0 to 512 [ 40.698274][ T4046] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.708900][ T4046] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.186: invalid block [ 40.721080][ T4046] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.186: invalid indirect mapped block 4294967295 (level 1) [ 40.735301][ T4046] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.186: invalid indirect mapped block 4294967295 (level 1) [ 40.749666][ T4046] EXT4-fs (loop3): 2 truncates cleaned up [ 40.756022][ T4046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.772387][ T4046] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.924595][ T4057] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 41.080492][ T4068] FAULT_INJECTION: forcing a failure. [ 41.080492][ T4068] name failslab, interval 1, probability 0, space 0, times 0 [ 41.093182][ T4068] CPU: 1 UID: 0 PID: 4068 Comm: syz.1.194 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 41.093290][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.093302][ T4068] Call Trace: [ 41.093377][ T4068] [ 41.093387][ T4068] __dump_stack+0x1d/0x30 [ 41.093411][ T4068] dump_stack_lvl+0xe8/0x140 [ 41.093433][ T4068] dump_stack+0x15/0x1b [ 41.093450][ T4068] should_fail_ex+0x265/0x280 [ 41.093585][ T4068] should_failslab+0x8c/0xb0 [ 41.093608][ T4068] kmem_cache_alloc_noprof+0x50/0x310 [ 41.093635][ T4068] ? alloc_empty_file+0x76/0x200 [ 41.093665][ T4068] alloc_empty_file+0x76/0x200 [ 41.093735][ T4068] path_openat+0x68/0x2170 [ 41.093767][ T4068] ? _parse_integer_limit+0x170/0x190 [ 41.093802][ T4068] ? _parse_integer+0x27/0x40 [ 41.093829][ T4068] ? kstrtoull+0x111/0x140 [ 41.093933][ T4068] ? kstrtouint+0x76/0xc0 [ 41.093965][ T4068] do_filp_open+0x109/0x230 [ 41.094003][ T4068] do_sys_openat2+0xa6/0x110 [ 41.094034][ T4068] __x64_sys_open+0xe6/0x110 [ 41.094073][ T4068] x64_sys_call+0x14d4/0x2fb0 [ 41.094097][ T4068] do_syscall_64+0xd2/0x200 [ 41.094125][ T4068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.094153][ T4068] ? clear_bhb_loop+0x40/0x90 [ 41.094177][ T4068] ? clear_bhb_loop+0x40/0x90 [ 41.094277][ T4068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.094303][ T4068] RIP: 0033:0x7f34cfcfe9a9 [ 41.094318][ T4068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.094336][ T4068] RSP: 002b:00007f34ce367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 41.094354][ T4068] RAX: ffffffffffffffda RBX: 00007f34cff25fa0 RCX: 00007f34cfcfe9a9 [ 41.094386][ T4068] RDX: 0000000000000000 RSI: 0000000000060840 RDI: 00002000009e1000 [ 41.094400][ T4068] RBP: 00007f34ce367090 R08: 0000000000000000 R09: 0000000000000000 [ 41.094412][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.094424][ T4068] R13: 0000000000000000 R14: 00007f34cff25fa0 R15: 00007ffca77692b8 [ 41.094443][ T4068] [ 41.323054][ T4070] __nla_validate_parse: 23 callbacks suppressed [ 41.323070][ T4070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.195'. [ 41.340714][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'. [ 41.369867][ T4072] vhci_hcd: invalid port number 236 [ 41.375141][ T4072] vhci_hcd: invalid port number 236 [ 41.435588][ T4034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.492237][ T4082] vhci_hcd: invalid port number 236 [ 41.497493][ T4082] vhci_hcd: invalid port number 236 [ 41.505246][ T4081] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 41.547143][ T4088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.203'. [ 41.596849][ T4096] random: crng reseeded on system resumption [ 41.611120][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.205'. [ 41.625782][ T4097] netlink: 32 bytes leftover after parsing attributes in process `syz.3.205'. [ 41.652832][ T4097] loop3: detected capacity change from 0 to 256 [ 41.662303][ T4099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.207'. [ 41.673571][ T4099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 41.792150][ T4112] loop1: detected capacity change from 0 to 1024 [ 41.810501][ T4112] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.826420][ T4112] pim6reg: entered allmulticast mode [ 41.832425][ T4112] pim6reg: left allmulticast mode [ 42.188733][ T4124] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.407792][ T4139] random: crng reseeded on system resumption [ 42.433113][ T4137] hsr0: entered promiscuous mode [ 42.438389][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 42.447584][ T4137] hsr_slave_0: left promiscuous mode [ 42.453680][ T4137] hsr_slave_1: left promiscuous mode [ 42.462706][ T4137] hsr0 (unregistering): left promiscuous mode [ 42.471170][ T4141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.219'. [ 42.481535][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 42.531671][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.605197][ T4149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 42.611823][ T4149] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 42.619567][ T4149] vhci_hcd vhci_hcd.0: Device attached [ 42.625785][ T4108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 42.636148][ T4150] vhci_hcd: connection closed [ 42.636261][ T12] vhci_hcd: stop threads [ 42.645269][ T12] vhci_hcd: release socket [ 42.649803][ T12] vhci_hcd: disconnect device [ 42.705034][ T4157] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.802078][ T4172] loop4: detected capacity change from 0 to 256 [ 42.868217][ T4176] loop3: detected capacity change from 0 to 1024 [ 42.881831][ T4176] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.898708][ T4176] pim6reg: entered allmulticast mode [ 42.906041][ T4176] pim6reg: left allmulticast mode [ 43.454593][ T4191] hsr0: entered promiscuous mode [ 43.461272][ T4191] hsr_slave_0: left promiscuous mode [ 43.467318][ T4191] hsr_slave_1: left promiscuous mode [ 43.492558][ T4191] hsr0 (unregistering): left promiscuous mode [ 43.554123][ T4195] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 43.557497][ T4197] loop1: detected capacity change from 0 to 512 [ 43.562238][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.570367][ T4197] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.237: casefold flag without casefold feature [ 43.575421][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.590419][ T4197] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.237: couldn't read orphan inode 15 (err -117) [ 43.617359][ T4197] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.618145][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.650224][ T4200] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 43.725260][ T4217] loop4: detected capacity change from 0 to 512 [ 43.736575][ T4217] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 43.750367][ T4217] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.757083][ T4217] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 43.772081][ T4217] EXT4-fs (loop4): Remounting filesystem read-only [ 43.779774][ T4217] EXT4-fs (loop4): 1 truncate cleaned up [ 43.785967][ T4217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.941540][ T4239] random: crng reseeded on system resumption [ 44.389517][ T4197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 44.415715][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.430671][ T4247] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.447079][ T4249] loop1: detected capacity change from 0 to 512 [ 44.455689][ T4249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.466179][ T4249] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.252: invalid block [ 44.479919][ T4249] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.252: invalid indirect mapped block 4294967295 (level 1) [ 44.497400][ T4249] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.252: invalid indirect mapped block 4294967295 (level 1) [ 44.512529][ T4249] EXT4-fs (loop1): 2 truncates cleaned up [ 44.520262][ T4249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.533836][ T4249] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.548809][ T4258] loop3: detected capacity change from 0 to 512 [ 44.555947][ T4258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.568948][ T4258] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.257: invalid block [ 44.581916][ T4258] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.257: invalid indirect mapped block 4294967295 (level 1) [ 44.596813][ T4258] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.257: invalid indirect mapped block 4294967295 (level 1) [ 44.612083][ T4258] EXT4-fs (loop3): 2 truncates cleaned up [ 44.613088][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.618172][ T4258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.650209][ T4258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.671410][ T4261] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 44.713338][ T4272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.734659][ T4276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 44.836830][ T4292] loop1: detected capacity change from 0 to 1024 [ 44.850553][ T4292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.865517][ T4292] pim6reg: entered allmulticast mode [ 44.871641][ T4292] pim6reg: left allmulticast mode [ 45.320003][ T29] kauditd_printk_skb: 814 callbacks suppressed [ 45.320020][ T29] audit: type=1326 audit(1752824170.435:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb1cc45967 code=0x7ffc0000 [ 45.349528][ T29] audit: type=1326 audit(1752824170.435:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb1cbeab89 code=0x7ffc0000 [ 45.372883][ T29] audit: type=1326 audit(1752824170.435:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7feb1cc4e9a9 code=0x7ffc0000 [ 45.396227][ T29] audit: type=1326 audit(1752824170.445:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb1cc45967 code=0x7ffc0000 [ 45.419553][ T29] audit: type=1326 audit(1752824170.445:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb1cbeab89 code=0x7ffc0000 [ 45.442775][ T29] audit: type=1326 audit(1752824170.445:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7feb1cc4e9a9 code=0x7ffc0000 [ 45.466054][ T29] audit: type=1326 audit(1752824170.455:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb1cc45967 code=0x7ffc0000 [ 45.489247][ T29] audit: type=1326 audit(1752824170.455:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feb1cbeab89 code=0x7ffc0000 [ 45.512507][ T29] audit: type=1326 audit(1752824170.455:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7feb1cc4e9a9 code=0x7ffc0000 [ 45.535876][ T29] audit: type=1326 audit(1752824170.465:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4293 comm="syz.4.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feb1cc45967 code=0x7ffc0000 [ 45.561926][ T4270] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 45.584339][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.689647][ T4311] tipc: Invalid UDP bearer configuration [ 45.689661][ T4311] tipc: Enabling of bearer rejected, failed to enable media [ 45.695193][ T4319] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 45.757524][ T4325] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 45.774405][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.781655][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.793958][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.801078][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.808395][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.815591][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.829690][ T4325] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.912341][ T4348] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 45.943891][ T4356] loop4: detected capacity change from 0 to 512 [ 45.967770][ T4356] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 45.986783][ T4356] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.046333][ T4369] loop1: detected capacity change from 0 to 512 [ 46.064953][ T4356] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 46.109534][ T4356] EXT4-fs (loop4): Remounting filesystem read-only [ 46.115740][ T4369] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 46.116175][ T4356] EXT4-fs (loop4): 1 truncate cleaned up [ 46.131395][ T4356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.135533][ T4369] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.155985][ T4356] tipc: Invalid UDP bearer configuration [ 46.156005][ T4356] tipc: Enabling of bearer rejected, failed to enable media [ 46.170178][ T3378] Process accounting resumed [ 46.173022][ T4369] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.189506][ T3414] Process accounting resumed [ 46.220458][ T4369] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 46.227475][ T4369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.294: bg 0: block 40: padding at end of block bitmap is not set [ 46.242259][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.258654][ T4369] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 46.267813][ T4369] EXT4-fs (loop1): 1 truncate cleaned up [ 46.281022][ T4369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.518239][ T4404] __nla_validate_parse: 24 callbacks suppressed [ 46.518256][ T4404] netlink: 48 bytes leftover after parsing attributes in process `syz.4.310'. [ 46.599846][ T4407] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.620398][ T4362] Set syz1 is full, maxelem 65536 reached [ 46.653260][ T4407] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.664172][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.684310][ T4412] loop1: detected capacity change from 0 to 512 [ 46.695890][ T4412] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 46.704824][ T23] Process accounting resumed [ 46.705185][ T4412] EXT4-fs (loop1): orphan cleanup on readonly fs [ 46.716473][ T4412] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 46.732574][ T4412] EXT4-fs (loop1): Remounting filesystem read-only [ 46.739342][ T4412] EXT4-fs (loop1): 1 truncate cleaned up [ 46.740337][ T4407] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.745637][ T4412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 46.774819][ T4412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.313'. [ 46.783805][ T4412] tipc: Invalid UDP bearer configuration [ 46.783818][ T4412] tipc: Enabling of bearer rejected, failed to enable media [ 46.808202][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.831995][ T4407] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.854950][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.860119][ T4422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 46.863598][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.885425][ T4422] netlink: 32 bytes leftover after parsing attributes in process `syz.4.314'. [ 46.898458][ T4422] loop4: detected capacity change from 0 to 256 [ 46.920042][ T4407] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.928516][ T4420] loop1: detected capacity change from 0 to 8192 [ 46.932094][ T4407] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.946841][ T4407] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.958694][ T4407] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.005186][ T4426] loop3: detected capacity change from 0 to 512 [ 47.012521][ T4426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.022907][ T4426] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.318: invalid block [ 47.035827][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 47.036310][ T4426] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.318: invalid indirect mapped block 4294967295 (level 1) [ 47.050279][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.317'. [ 47.060006][ T4426] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.318: invalid indirect mapped block 4294967295 (level 1) [ 47.082645][ T4426] EXT4-fs (loop3): 2 truncates cleaned up [ 47.089038][ T4426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.103980][ T4426] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.124279][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 47.217813][ T4436] loop3: detected capacity change from 0 to 512 [ 47.225371][ T4436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.235429][ T4436] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.322: invalid block [ 47.247710][ T4436] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.322: invalid indirect mapped block 4294967295 (level 1) [ 47.262422][ T4436] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.322: invalid indirect mapped block 4294967295 (level 1) [ 47.276715][ T4436] EXT4-fs (loop3): 2 truncates cleaned up [ 47.283251][ T4436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.298359][ T4436] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.364600][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.374272][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.412272][ T4452] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 47.421018][ T4452] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.428243][ T4452] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.439531][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.446616][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.454002][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.461117][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.472032][ T4452] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 47.513798][ T4455] loop1: detected capacity change from 0 to 512 [ 47.521659][ T4455] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.531591][ T4455] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.330: invalid block [ 47.544695][ T4455] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.330: invalid indirect mapped block 4294967295 (level 1) [ 47.559255][ T4455] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.330: invalid indirect mapped block 4294967295 (level 1) [ 47.573505][ T4455] EXT4-fs (loop1): 2 truncates cleaned up [ 47.580078][ T4455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.593704][ T4455] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.608314][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.1.330'. [ 47.686620][ T4468] loop4: detected capacity change from 0 to 512 [ 47.693736][ T4468] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 47.703362][ T4468] EXT4-fs (loop4): orphan cleanup on readonly fs [ 47.710851][ T4468] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 47.725428][ T4468] EXT4-fs (loop4): Remounting filesystem read-only [ 47.732328][ T4468] EXT4-fs (loop4): 1 truncate cleaned up [ 47.738750][ T4468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 47.753251][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 47.762110][ T4468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 47.772729][ T4468] tipc: Invalid UDP bearer configuration [ 47.772794][ T4468] tipc: Enabling of bearer rejected, failed to enable media [ 47.795600][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.817544][ T4471] random: crng reseeded on system resumption [ 47.868528][ T4477] loop4: detected capacity change from 0 to 512 [ 47.877248][ T4477] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.339: casefold flag without casefold feature [ 47.877697][ T4479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.891413][ T4477] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.339: couldn't read orphan inode 15 (err -117) [ 47.898884][ T4479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.912043][ T4477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.376462][ T4504] loop3: detected capacity change from 0 to 512 [ 48.383334][ T4504] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 48.392229][ T4504] EXT4-fs (loop3): orphan cleanup on readonly fs [ 48.399074][ T4504] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 48.413751][ T4504] EXT4-fs (loop3): Remounting filesystem read-only [ 48.420370][ T4504] EXT4-fs (loop3): 1 truncate cleaned up [ 48.426344][ T4504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.489826][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.498362][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.543037][ T4513] random: crng reseeded on system resumption [ 48.642269][ T3378] Process accounting resumed [ 48.699733][ T4477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.728333][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.740646][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.771388][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.790062][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.855663][ T4522] loop3: detected capacity change from 0 to 8192 [ 49.007204][ T4545] loop1: detected capacity change from 0 to 512 [ 49.014054][ T4545] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 49.023163][ T4545] EXT4-fs (loop1): orphan cleanup on readonly fs [ 49.031616][ T4545] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 49.046329][ T4545] EXT4-fs (loop1): Remounting filesystem read-only [ 49.052992][ T4545] EXT4-fs (loop1): 1 truncate cleaned up [ 49.059077][ T4545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.115081][ T4548] tipc: Invalid UDP bearer configuration [ 49.115092][ T4548] tipc: Enabling of bearer rejected, failed to enable media [ 49.133208][ T4545] tipc: Invalid UDP bearer configuration [ 49.133224][ T4545] tipc: Enabling of bearer rejected, failed to enable media [ 49.165138][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.266310][ T4555] Process accounting resumed [ 49.294215][ T4560] pim6reg: entered allmulticast mode [ 49.300168][ T4560] pim6reg: left allmulticast mode [ 49.320372][ T4564] loop1: detected capacity change from 0 to 512 [ 49.328122][ T4564] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.368: casefold flag without casefold feature [ 49.341148][ T4564] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.368: couldn't read orphan inode 15 (err -117) [ 49.353476][ T4564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.152195][ T4564] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.174085][ T4599] tipc: Invalid UDP bearer configuration [ 50.174102][ T4599] tipc: Enabling of bearer rejected, failed to enable media [ 50.213611][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.306147][ T4609] loop4: detected capacity change from 0 to 512 [ 50.329205][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 50.329222][ T29] audit: type=1326 audit(1752824175.445:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.364534][ T4609] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.373451][ T29] audit: type=1326 audit(1752824175.445:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.396974][ T29] audit: type=1326 audit(1752824175.475:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.420268][ T29] audit: type=1326 audit(1752824175.475:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.443589][ T29] audit: type=1326 audit(1752824175.475:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.466935][ T29] audit: type=1326 audit(1752824175.475:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.492963][ T3378] Process accounting resumed [ 50.498014][ T4609] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.381: invalid block [ 50.510564][ T29] audit: type=1326 audit(1752824175.625:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2824345967 code=0x7ffc0000 [ 50.533855][ T29] audit: type=1326 audit(1752824175.625:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f28242eab89 code=0x7ffc0000 [ 50.557282][ T29] audit: type=1326 audit(1752824175.625:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f282434e9a9 code=0x7ffc0000 [ 50.557608][ T4609] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.381: invalid indirect mapped block 4294967295 (level 1) [ 50.595602][ T29] audit: type=1326 audit(1752824175.705:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4612 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2824345967 code=0x7ffc0000 [ 50.595905][ T4609] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.381: invalid indirect mapped block 4294967295 (level 1) [ 50.635831][ T4609] EXT4-fs (loop4): 2 truncates cleaned up [ 50.642580][ T4609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.657623][ T4609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.710076][ T4629] loop1: detected capacity change from 0 to 512 [ 50.717050][ T4629] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 50.726945][ T4629] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.734654][ T4629] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 50.740214][ T4632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.758196][ T4632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.766932][ T4629] EXT4-fs (loop1): Remounting filesystem read-only [ 50.774049][ T4629] EXT4-fs (loop1): 1 truncate cleaned up [ 50.780310][ T4629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.797375][ T4629] tipc: Invalid UDP bearer configuration [ 50.797390][ T4629] tipc: Enabling of bearer rejected, failed to enable media [ 50.821719][ T4624] Process accounting resumed [ 50.822813][ T4632] loop4: detected capacity change from 0 to 8192 [ 50.833298][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.973220][ T4651] loop3: detected capacity change from 0 to 512 [ 50.980910][ T4651] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 50.992738][ T4651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 51.007606][ T4651] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 51.025774][ T4651] EXT4-fs (loop3): Remounting filesystem read-only [ 51.034053][ T4651] EXT4-fs (loop3): 1 truncate cleaned up [ 51.040450][ T4651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.082797][ T4661] loop1: detected capacity change from 0 to 512 [ 51.090909][ T4661] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 51.103707][ T4661] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.123014][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.159723][ T4661] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 51.174679][ T4661] EXT4-fs (loop1): Remounting filesystem read-only [ 51.185909][ T4661] EXT4-fs (loop1): 1 truncate cleaned up [ 51.198089][ T4661] tipc: Invalid UDP bearer configuration [ 51.198106][ T4661] tipc: Enabling of bearer rejected, failed to enable media [ 51.284979][ T3394] Process accounting resumed [ 51.312950][ T4674] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 51.320166][ T4674] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 51.327929][ T4674] vhci_hcd vhci_hcd.0: Device attached [ 51.379383][ T4677] vhci_hcd: connection closed [ 51.380498][ T31] vhci_hcd: stop threads [ 51.389680][ T31] vhci_hcd: release socket [ 51.394093][ T31] vhci_hcd: disconnect device [ 51.475897][ T4693] loop1: detected capacity change from 0 to 256 [ 51.597709][ T4697] loop3: detected capacity change from 0 to 1024 [ 51.616970][ T4697] pim6reg: entered allmulticast mode [ 51.622923][ T4697] pim6reg: left allmulticast mode [ 52.078145][ T4708] loop0: detected capacity change from 0 to 512 [ 52.109014][ T4708] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.416: casefold flag without casefold feature [ 52.155247][ T4708] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.416: couldn't read orphan inode 15 (err -117) [ 52.446743][ T3414] Process accounting resumed [ 52.565288][ T3414] Process accounting resumed [ 52.611282][ T4738] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 52.657723][ T4742] __nla_validate_parse: 25 callbacks suppressed [ 52.657795][ T4742] netlink: 52 bytes leftover after parsing attributes in process `'. [ 52.720853][ T4746] loop3: detected capacity change from 0 to 512 [ 52.727952][ T4746] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 52.744499][ T4746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 52.751231][ T4746] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 52.800633][ T4746] EXT4-fs (loop3): Remounting filesystem read-only [ 52.807678][ T4746] EXT4-fs (loop3): 1 truncate cleaned up [ 52.863339][ T4754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.429'. [ 52.873713][ T4753] loop1: detected capacity change from 0 to 128 [ 52.893250][ T4708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.909547][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.3.427'. [ 52.918898][ T4746] tipc: Invalid UDP bearer configuration [ 52.918910][ T4746] tipc: Enabling of bearer rejected, failed to enable media [ 52.958116][ T4761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.971829][ T4761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.070507][ T4759] loop1: detected capacity change from 0 to 8192 [ 53.100484][ T4774] loop0: detected capacity change from 0 to 1024 [ 53.112200][ T4774] EXT4-fs: Ignoring removed oldalloc option [ 53.193771][ T4787] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 53.217511][ T4789] random: crng reseeded on system resumption [ 53.387419][ T4810] 9pnet: p9_errstr2errno: server reported unknown error  [ 53.816263][ T4805] Set syz1 is full, maxelem 65536 reached [ 53.840391][ T4825] Cannot find del_set index 0 as target [ 53.946286][ T4832] random: crng reseeded on system resumption [ 53.998493][ T1035] Process accounting resumed [ 54.016302][ T4839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.027710][ T4839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.089214][ T4839] loop1: detected capacity change from 0 to 8192 [ 54.455987][ T4856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.465315][ T4856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.549670][ T4856] loop2: detected capacity change from 0 to 8192 [ 54.719561][ T4865] FAULT_INJECTION: forcing a failure. [ 54.719561][ T4865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.732762][ T4865] CPU: 1 UID: 0 PID: 4865 Comm: syz.0.474 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 54.732809][ T4865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.732823][ T4865] Call Trace: [ 54.732831][ T4865] [ 54.732839][ T4865] __dump_stack+0x1d/0x30 [ 54.732877][ T4865] dump_stack_lvl+0xe8/0x140 [ 54.732961][ T4865] dump_stack+0x15/0x1b [ 54.732978][ T4865] should_fail_ex+0x265/0x280 [ 54.733009][ T4865] should_fail+0xb/0x20 [ 54.733035][ T4865] should_fail_usercopy+0x1a/0x20 [ 54.733131][ T4865] _copy_from_iter+0xcf/0xe40 [ 54.733164][ T4865] ? __build_skb_around+0x1a0/0x200 [ 54.733199][ T4865] ? __alloc_skb+0x223/0x320 [ 54.733260][ T4865] netlink_sendmsg+0x471/0x6b0 [ 54.733285][ T4865] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.733306][ T4865] __sock_sendmsg+0x145/0x180 [ 54.733334][ T4865] ____sys_sendmsg+0x31e/0x4e0 [ 54.733414][ T4865] ___sys_sendmsg+0x17b/0x1d0 [ 54.733460][ T4865] __x64_sys_sendmsg+0xd4/0x160 [ 54.733504][ T4865] x64_sys_call+0x2999/0x2fb0 [ 54.733530][ T4865] do_syscall_64+0xd2/0x200 [ 54.733607][ T4865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 54.733640][ T4865] ? clear_bhb_loop+0x40/0x90 [ 54.733714][ T4865] ? clear_bhb_loop+0x40/0x90 [ 54.733772][ T4865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.733796][ T4865] RIP: 0033:0x7f578cc9e9a9 [ 54.733811][ T4865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.733829][ T4865] RSP: 002b:00007f578b2ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.733912][ T4865] RAX: ffffffffffffffda RBX: 00007f578cec5fa0 RCX: 00007f578cc9e9a9 [ 54.733924][ T4865] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 54.733937][ T4865] RBP: 00007f578b2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 54.733950][ T4865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.733965][ T4865] R13: 0000000000000000 R14: 00007f578cec5fa0 R15: 00007ffe5291ca18 [ 54.733987][ T4865] [ 55.022350][ T4867] tmpfs: Bad value for 'mpol' [ 55.106341][ T4879] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 55.173953][ T4890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.182606][ T4890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.223608][ T4895] loop0: detected capacity change from 0 to 1024 [ 55.254741][ T4895] pim6reg: entered allmulticast mode [ 55.264283][ T4895] pim6reg: left allmulticast mode [ 55.277727][ T4890] loop1: detected capacity change from 0 to 8192 [ 55.285982][ T4897] FAULT_INJECTION: forcing a failure. [ 55.285982][ T4897] name failslab, interval 1, probability 0, space 0, times 0 [ 55.298746][ T4897] CPU: 0 UID: 0 PID: 4897 Comm: syz.3.488 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 55.298827][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.298906][ T4897] Call Trace: [ 55.298912][ T4897] [ 55.298918][ T4897] __dump_stack+0x1d/0x30 [ 55.298940][ T4897] dump_stack_lvl+0xe8/0x140 [ 55.298964][ T4897] dump_stack+0x15/0x1b [ 55.298981][ T4897] should_fail_ex+0x265/0x280 [ 55.299027][ T4897] ? sctp_add_bind_addr+0x71/0x1e0 [ 55.299050][ T4897] should_failslab+0x8c/0xb0 [ 55.299072][ T4897] __kmalloc_cache_noprof+0x4c/0x320 [ 55.299101][ T4897] sctp_add_bind_addr+0x71/0x1e0 [ 55.299124][ T4897] sctp_copy_local_addr_list+0x199/0x220 [ 55.299163][ T4897] sctp_copy_one_addr+0x7f/0x280 [ 55.299185][ T4897] sctp_bind_addr_copy+0x79/0x290 [ 55.299208][ T4897] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 55.299271][ T4897] sctp_connect_new_asoc+0x1c3/0x3a0 [ 55.299304][ T4897] sctp_sendmsg+0xf10/0x18d0 [ 55.299342][ T4897] ? selinux_socket_sendmsg+0xa1/0x1b0 [ 55.299448][ T4897] ? __pfx_sctp_sendmsg+0x10/0x10 [ 55.299474][ T4897] inet_sendmsg+0xc2/0xd0 [ 55.299513][ T4897] __sock_sendmsg+0x102/0x180 [ 55.299559][ T4897] ____sys_sendmsg+0x31e/0x4e0 [ 55.299593][ T4897] ___sys_sendmsg+0x17b/0x1d0 [ 55.299635][ T4897] __x64_sys_sendmsg+0xd4/0x160 [ 55.299706][ T4897] x64_sys_call+0x2999/0x2fb0 [ 55.299776][ T4897] do_syscall_64+0xd2/0x200 [ 55.299794][ T4897] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.299884][ T4897] ? clear_bhb_loop+0x40/0x90 [ 55.299905][ T4897] ? clear_bhb_loop+0x40/0x90 [ 55.300033][ T4897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.300054][ T4897] RIP: 0033:0x7fde09b7e9a9 [ 55.300069][ T4897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.300087][ T4897] RSP: 002b:00007fde081e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.300105][ T4897] RAX: ffffffffffffffda RBX: 00007fde09da5fa0 RCX: 00007fde09b7e9a9 [ 55.300118][ T4897] RDX: 0000000000008850 RSI: 00002000000000c0 RDI: 0000000000000005 [ 55.300202][ T4897] RBP: 00007fde081e7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.300215][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.300227][ T4897] R13: 0000000000000000 R14: 00007fde09da5fa0 R15: 00007ffdc104e118 [ 55.300244][ T4897] [ 55.875267][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 55.875283][ T29] audit: type=1400 audit(1752824180.985:2439): avc: denied { open } for pid=4922 comm="syz.4.494" path="/85/file0" dev="9p" ino=35184372088834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.910992][ T29] audit: type=1400 audit(1752824181.025:2440): avc: denied { relabelfrom } for pid=4922 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.931030][ T29] audit: type=1400 audit(1752824181.025:2441): avc: denied { relabelto } for pid=4922 comm="syz.4.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 55.979713][ T4928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.991462][ T4925] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 56.163573][ T4941] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 56.225180][ T4943] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 56.281363][ T29] audit: type=1326 audit(1752824181.385:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.304806][ T29] audit: type=1326 audit(1752824181.385:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.436506][ T29] audit: type=1326 audit(1752824181.435:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.459935][ T29] audit: type=1326 audit(1752824181.435:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.483393][ T29] audit: type=1326 audit(1752824181.435:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.506706][ T29] audit: type=1326 audit(1752824181.435:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.530179][ T29] audit: type=1326 audit(1752824181.435:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4944 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34cfcfe9a9 code=0x7ffc0000 [ 56.558839][ T1035] Process accounting resumed [ 56.574976][ T4959] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 56.599925][ T4960] loop3: detected capacity change from 0 to 1024 [ 56.614699][ T4960] pim6reg: entered allmulticast mode [ 56.630097][ T4960] pim6reg: left allmulticast mode [ 56.695438][ T4974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.512'. [ 56.715902][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 56.748444][ T4978] netlink: 48 bytes leftover after parsing attributes in process `syz.4.514'. [ 56.797510][ T4982] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 56.826279][ T4985] loop4: detected capacity change from 0 to 1024 [ 56.844628][ T4985] pim6reg: entered allmulticast mode [ 56.851008][ T4985] pim6reg: left allmulticast mode [ 57.197154][ T5004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.210452][ T5004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.238664][ T5006] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 57.293162][ T5004] loop1: detected capacity change from 0 to 8192 [ 57.337169][ T5011] loop3: detected capacity change from 0 to 512 [ 57.345061][ T5009] loop0: detected capacity change from 0 to 512 [ 57.359614][ T5011] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.375953][ T5011] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.525: invalid block [ 57.391048][ T5009] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.524: casefold flag without casefold feature [ 57.404481][ T5009] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.524: couldn't read orphan inode 15 (err -117) [ 57.420127][ T5011] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.525: invalid indirect mapped block 4294967295 (level 1) [ 57.439546][ T5011] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.525: invalid indirect mapped block 4294967295 (level 1) [ 57.455132][ T5011] EXT4-fs (loop3): 2 truncates cleaned up [ 57.546353][ T5020] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 57.552879][ T5020] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 57.560590][ T5020] vhci_hcd vhci_hcd.0: Device attached [ 57.566427][ T5021] vhci_hcd: connection closed [ 57.566494][ T1092] vhci_hcd: stop threads [ 57.575509][ T1092] vhci_hcd: release socket [ 57.580024][ T1092] vhci_hcd: disconnect device [ 58.135869][ T5009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.151559][ T5034] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 58.222745][ T5037] netlink: 48 bytes leftover after parsing attributes in process `syz.3.529'. [ 58.316251][ T5049] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 58.473526][ T5055] loop2: detected capacity change from 0 to 1024 [ 58.517094][ T5055] pim6reg: entered allmulticast mode [ 58.523045][ T5055] pim6reg: left allmulticast mode [ 58.821414][ T5063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.868823][ T5063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.989532][ T5063] loop3: detected capacity change from 0 to 8192 [ 59.085742][ T5066] bond0: entered promiscuous mode [ 59.090871][ T5066] bond_slave_0: entered promiscuous mode [ 59.096582][ T5066] bond_slave_1: entered promiscuous mode [ 59.102443][ T5066] bridge0: entered promiscuous mode [ 59.107736][ T5066] bond0: entered allmulticast mode [ 59.112900][ T5066] bond_slave_0: entered allmulticast mode [ 59.118666][ T5066] bond_slave_1: entered allmulticast mode [ 59.124395][ T5066] bridge0: entered allmulticast mode [ 59.161393][ T5069] loop0: detected capacity change from 0 to 512 [ 59.182177][ T5071] loop4: detected capacity change from 0 to 512 [ 59.192208][ T5071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.209547][ T5069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.212552][ T5071] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.539: invalid block [ 59.230373][ T5071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.539: invalid indirect mapped block 4294967295 (level 1) [ 59.245342][ T5071] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.539: invalid indirect mapped block 4294967295 (level 1) [ 59.260594][ T5071] EXT4-fs (loop4): 2 truncates cleaned up [ 59.262109][ T5069] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.538: invalid block [ 59.279773][ T5069] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.538: invalid indirect mapped block 4294967295 (level 1) [ 59.299518][ T5069] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.538: invalid indirect mapped block 4294967295 (level 1) [ 59.317111][ T5075] loop2: detected capacity change from 0 to 512 [ 59.324411][ T5075] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.334416][ T5069] EXT4-fs (loop0): 2 truncates cleaned up [ 59.346568][ T5075] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.540: invalid block [ 59.360310][ T5071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.539'. [ 59.372649][ T5075] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.540: invalid indirect mapped block 4294967295 (level 1) [ 59.387726][ T5075] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.540: invalid indirect mapped block 4294967295 (level 1) [ 59.403100][ T5075] EXT4-fs (loop2): 2 truncates cleaned up [ 59.441683][ T5075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.540'. [ 59.460751][ T5069] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 59.471566][ T5078] loop4: detected capacity change from 0 to 512 [ 59.482231][ T5078] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.541: casefold flag without casefold feature [ 59.496741][ T5078] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.541: couldn't read orphan inode 15 (err -117) [ 59.641525][ T36] Process accounting resumed [ 60.051714][ T5116] loop0: detected capacity change from 0 to 512 [ 60.058818][ T5116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.069016][ T5116] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.551: invalid block [ 60.081230][ T5116] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.551: invalid indirect mapped block 4294967295 (level 1) [ 60.096336][ T5116] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.551: invalid indirect mapped block 4294967295 (level 1) [ 60.149720][ T5116] EXT4-fs (loop0): 2 truncates cleaned up [ 60.223478][ T5119] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 60.290647][ T5078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.314990][ T5126] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 60.395179][ T5137] random: crng reseeded on system resumption [ 60.456453][ T5143] loop0: detected capacity change from 0 to 1024 [ 60.468208][ T5145] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 60.497075][ T5143] pim6reg: entered allmulticast mode [ 60.517493][ T5149] loop4: detected capacity change from 0 to 1024 [ 60.531456][ T5143] pim6reg: left allmulticast mode [ 60.563809][ T5149] pim6reg: entered allmulticast mode [ 60.627100][ T5149] pim6reg: left allmulticast mode [ 60.724645][ T5159] loop4: detected capacity change from 0 to 512 [ 60.733287][ T5159] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 60.762342][ T5159] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.566: invalid block [ 60.774561][ T5159] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.566: invalid indirect mapped block 4294967295 (level 1) [ 60.790068][ T5159] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.566: invalid indirect mapped block 4294967295 (level 1) [ 60.790180][ T5163] loop2: detected capacity change from 0 to 512 [ 60.822412][ T5159] EXT4-fs (loop4): 2 truncates cleaned up [ 60.831041][ T5163] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 60.836029][ T5161] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 60.848861][ T5163] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.855884][ T5163] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 60.875972][ T5163] EXT4-fs (loop2): Remounting filesystem read-only [ 60.879077][ T5159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.566'. [ 60.882894][ T5163] EXT4-fs (loop2): 1 truncate cleaned up [ 60.912990][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 60.921911][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 60.943472][ T5163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.568'. [ 60.952430][ T5163] tipc: Invalid UDP bearer configuration [ 60.952442][ T5163] tipc: Enabling of bearer rejected, failed to enable media [ 61.089943][ T5179] loop4: detected capacity change from 0 to 1024 [ 61.105132][ T5182] loop1: detected capacity change from 0 to 1024 [ 61.117354][ T5179] pim6reg: entered allmulticast mode [ 61.146565][ T5182] pim6reg: entered allmulticast mode [ 61.155062][ T5182] pim6reg: left allmulticast mode [ 61.166056][ T5179] pim6reg: left allmulticast mode [ 61.243663][ T29] kauditd_printk_skb: 713 callbacks suppressed [ 61.243679][ T29] audit: type=1400 audit(1752824186.355:3162): avc: denied { setopt } for pid=5190 comm="syz.2.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.266671][ T5191] lo speed is unknown, defaulting to 1000 [ 61.275554][ T5191] lo speed is unknown, defaulting to 1000 [ 61.281683][ T5191] lo speed is unknown, defaulting to 1000 [ 61.289261][ T5191] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 61.296797][ T5191] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 61.322903][ T5191] lo speed is unknown, defaulting to 1000 [ 61.332127][ T5191] lo speed is unknown, defaulting to 1000 [ 61.338354][ T5191] lo speed is unknown, defaulting to 1000 [ 61.345227][ T5191] lo speed is unknown, defaulting to 1000 [ 61.351436][ T5191] lo speed is unknown, defaulting to 1000 [ 61.444754][ T29] audit: type=1326 audit(1752824186.555:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.483063][ T29] audit: type=1400 audit(1752824186.575:3164): avc: denied { ioctl } for pid=5199 comm="syz.2.579" path="socket:[10494]" dev="sockfs" ino=10494 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.508292][ T29] audit: type=1326 audit(1752824186.595:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.531844][ T29] audit: type=1326 audit(1752824186.595:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.555270][ T29] audit: type=1326 audit(1752824186.595:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.578842][ T29] audit: type=1326 audit(1752824186.595:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.602212][ T29] audit: type=1326 audit(1752824186.595:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.625669][ T29] audit: type=1326 audit(1752824186.595:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.649021][ T29] audit: type=1326 audit(1752824186.595:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5197 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f578cc9e9a9 code=0x7ffc0000 [ 61.787275][ T5214] 9pnet_fd: Insufficient options for proto=fd [ 61.862132][ T5219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.584'. [ 61.875492][ T5219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.584'. [ 61.888244][ T5222] random: crng reseeded on system resumption [ 61.903382][ T5219] loop2: detected capacity change from 0 to 256 [ 61.947043][ T5229] loop1: detected capacity change from 0 to 512 [ 61.955196][ T5229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.966926][ T5229] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.590: invalid block [ 61.980453][ T5229] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.590: invalid indirect mapped block 4294967295 (level 1) [ 61.995082][ T5231] loop4: detected capacity change from 0 to 2048 [ 62.003033][ T5229] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.590: invalid indirect mapped block 4294967295 (level 1) [ 62.017774][ T5229] EXT4-fs (loop1): 2 truncates cleaned up [ 62.042441][ T5225] capability: warning: `syz.4.588' uses deprecated v2 capabilities in a way that may be insecure [ 62.165414][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.177496][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.233896][ T5243] loop4: detected capacity change from 0 to 8192 [ 62.273763][ T5256] program syz.1.598 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.288684][ T5256] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 62.319951][ T5258] loop3: detected capacity change from 0 to 512 [ 62.340116][ T5258] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 62.350713][ T5260] random: crng reseeded on system resumption [ 62.364958][ T5258] EXT4-fs (loop3): orphan cleanup on readonly fs [ 62.371777][ T5258] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 62.386458][ T5258] EXT4-fs (loop3): Remounting filesystem read-only [ 62.393325][ T5258] EXT4-fs (loop3): 1 truncate cleaned up [ 62.405606][ T5258] tipc: Invalid UDP bearer configuration [ 62.405663][ T5258] tipc: Enabling of bearer rejected, failed to enable media [ 62.431514][ T5267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.440403][ T5267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.497957][ T5267] loop0: detected capacity change from 0 to 8192 [ 62.828181][ T5290] loop3: detected capacity change from 0 to 1024 [ 62.846170][ T5290] pim6reg: entered allmulticast mode [ 62.853874][ T5290] pim6reg: left allmulticast mode [ 63.376597][ T5300] loop1: detected capacity change from 0 to 512 [ 63.383429][ T5300] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 63.392551][ T5300] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.400462][ T5300] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 63.415474][ T5300] EXT4-fs (loop1): Remounting filesystem read-only [ 63.422272][ T5300] EXT4-fs (loop1): 1 truncate cleaned up [ 63.431316][ T5300] __nla_validate_parse: 9 callbacks suppressed [ 63.431361][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 63.446340][ T5300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.615'. [ 63.456854][ T5300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.615'. [ 63.465868][ T5300] tipc: Invalid UDP bearer configuration [ 63.465882][ T5300] tipc: Enabling of bearer rejected, failed to enable media [ 63.502596][ T5303] random: crng reseeded on system resumption [ 63.603437][ T5307] 9pnet_fd: Insufficient options for proto=fd [ 63.680967][ T5311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.620'. [ 63.705463][ T5311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.620'. [ 63.965458][ T5335] loop0: detected capacity change from 0 to 512 [ 63.984905][ T5335] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.011531][ T5335] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.624: invalid block [ 64.028876][ T5335] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.624: invalid indirect mapped block 4294967295 (level 1) [ 64.056940][ T5348] loop2: detected capacity change from 0 to 512 [ 64.057714][ T5335] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.624: invalid indirect mapped block 4294967295 (level 1) [ 64.085084][ T5335] EXT4-fs (loop0): 2 truncates cleaned up [ 64.093284][ T5348] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 64.108807][ T5348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.118929][ T5348] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.133763][ T5348] EXT4-fs (loop2): Remounting filesystem read-only [ 64.141550][ T5348] EXT4-fs (loop2): 1 truncate cleaned up [ 64.204402][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 64.213272][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 64.233796][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.630'. [ 64.242839][ T5360] tipc: Invalid UDP bearer configuration [ 64.242850][ T5360] tipc: Enabling of bearer rejected, failed to enable media [ 64.261686][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 64.270627][ T5366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 64.325284][ T5364] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 64.524236][ T5380] loop0: detected capacity change from 0 to 512 [ 64.532193][ T5380] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 64.541755][ T5380] EXT4-fs (loop0): orphan cleanup on readonly fs [ 64.549287][ T5380] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 64.569818][ T5380] EXT4-fs (loop0): Remounting filesystem read-only [ 64.576712][ T5380] EXT4-fs (loop0): 1 truncate cleaned up [ 64.595948][ T5380] tipc: Invalid UDP bearer configuration [ 64.596004][ T5380] tipc: Enabling of bearer rejected, failed to enable media [ 64.736497][ T5383] loop0: detected capacity change from 0 to 512 [ 64.771831][ T5383] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.821461][ T5383] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.642: invalid block [ 64.847978][ T5383] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.642: invalid indirect mapped block 4294967295 (level 1) [ 64.862210][ T5383] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.642: invalid indirect mapped block 4294967295 (level 1) [ 64.912096][ T5383] EXT4-fs (loop0): 2 truncates cleaned up [ 65.261022][ T5406] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 65.333094][ T5419] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 65.339762][ T5419] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 65.347492][ T5419] vhci_hcd vhci_hcd.0: Device attached [ 65.362614][ T5420] vhci_hcd: connection closed [ 65.362800][ T270] vhci_hcd: stop threads [ 65.368734][ T5422] loop1: detected capacity change from 0 to 1024 [ 65.371777][ T270] vhci_hcd: release socket [ 65.382515][ T270] vhci_hcd: disconnect device [ 65.408757][ T5389] ================================================================== [ 65.416864][ T5389] BUG: KCSAN: data-race in touch_atime / touch_atime [ 65.423556][ T5389] [ 65.425876][ T5389] write to 0xffff88811991ef70 of 4 bytes by task 5394 on cpu 1: [ 65.433509][ T5389] touch_atime+0x1e8/0x340 [ 65.437934][ T5389] shmem_file_read_iter+0x477/0x540 [ 65.443138][ T5389] copy_splice_read+0x3c4/0x5f0 [ 65.448007][ T5389] splice_direct_to_actor+0x290/0x680 [ 65.453396][ T5389] do_splice_direct+0xda/0x150 [ 65.458181][ T5389] do_sendfile+0x380/0x650 [ 65.462614][ T5389] __x64_sys_sendfile64+0x105/0x150 [ 65.467816][ T5389] x64_sys_call+0xb39/0x2fb0 [ 65.472418][ T5389] do_syscall_64+0xd2/0x200 [ 65.476934][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.482834][ T5389] [ 65.485161][ T5389] read to 0xffff88811991ef70 of 4 bytes by task 5389 on cpu 0: [ 65.492703][ T5389] touch_atime+0x194/0x340 [ 65.497131][ T5389] shmem_file_read_iter+0x477/0x540 [ 65.502339][ T5389] copy_splice_read+0x3c4/0x5f0 [ 65.507208][ T5389] splice_direct_to_actor+0x290/0x680 [ 65.512601][ T5389] do_splice_direct+0xda/0x150 [ 65.517383][ T5389] do_sendfile+0x380/0x650 [ 65.521813][ T5389] __x64_sys_sendfile64+0x105/0x150 [ 65.527028][ T5389] x64_sys_call+0xb39/0x2fb0 [ 65.531633][ T5389] do_syscall_64+0xd2/0x200 [ 65.536132][ T5389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.542026][ T5389] [ 65.544348][ T5389] value changed: 0x1ec0d0d5 -> 0x1f596755 [ 65.550081][ T5389] [ 65.552402][ T5389] Reported by Kernel Concurrency Sanitizer on: [ 65.558554][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.0.644 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(voluntary) [ 65.570896][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.580970][ T5389] ================================================================== [ 65.611545][ T5422] EXT4-fs mount: 60 callbacks suppressed [ 65.611563][ T5422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.632523][ T5422] pim6reg: entered allmulticast mode [ 65.638381][ T5422] pim6reg: left allmulticast mode [ 65.977632][ T5417] Set syz1 is full, maxelem 65536 reached [ 66.100066][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.