last executing test programs: 10m10.31074923s ago: executing program 1 (id=3479): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x7ffc1ffe}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000003c0)='afs_dir_check_failed\x00', 0xffffffffffffffff, 0x0, 0x8d}, 0x18) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x7, 0xf7, 0x0, 0x9, 0x45300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4003e13, 0x3, @perf_config_ext={0x5e98, 0x8}, 0x222, 0x8, 0x3, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) 10m9.961814925s ago: executing program 1 (id=3485): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000180)="35a70f51bc", &(0x7f0000000040)=""/12, &(0x7f0000000f80), &(0x7f00000005c0), 0x4, r1}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRESHEX, @ANYRES64=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) semop(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 10m9.098229048s ago: executing program 1 (id=3507): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) 10m9.01329392s ago: executing program 1 (id=3510): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x800) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xf, r3, 0x6, 0xfffffffffffffffe) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r5}, 0x18) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f00000006c0)=ANY=[@ANYBLOB="000000004c900200030000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"]) 10m6.496105279s ago: executing program 1 (id=3551): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYBLOB="d453d7bd91dfabfad59760ac8050603c179f1bc1963d18bcb23357a551df06215217482689f5a1e8e70e2c5ee419e7a7393d0916a01111abbf52d1b72343ab0db4"], 0x3c}}, 0x0) 10m6.059740805s ago: executing program 1 (id=3555): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 10m6.059588216s ago: executing program 32 (id=3555): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x42400) 6m39.674063154s ago: executing program 0 (id=7436): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 6m39.657850104s ago: executing program 0 (id=7438): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (fail_nth: 1) 6m39.356423668s ago: executing program 0 (id=7440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) r6 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r6, &(0x7f00000003c0), 0x8) ppoll(&(0x7f0000000340)=[{r6, 0x220}], 0x1, &(0x7f00000003c0)={0x0, 0x3938700}, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x12, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000500000000000000050000009500000000000000186b0000050000000000000006b2c40000030000005d11200004000000c56200000800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800002a090000000000000007000000a200000000000007020000f8ffffffb703000008000000b704000001001af69c040000820000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x742, 0xa8, &(0x7f0000000580)=""/168, 0x41100, 0x26, '\x00', r5, @cgroup_skb=0x1, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x1, 0x5, 0x9}, 0x10, r7, 0xffffffffffffffff, 0x1, &(0x7f0000000740)=[r2, r2, r0, 0xffffffffffffffff, r0, r0], &(0x7f0000000780)=[{0x3, 0x2, 0x2, 0x9}], 0x10, 0x9}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r11, 0x0, 0x1}, 0x18) r12 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r13 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r13, 0x0) write$selinux_load(r12, &(0x7f0000000000)=ANY=[], 0xffbd) 6m39.116383302s ago: executing program 0 (id=7453): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) lremovexattr(0x0, 0x0) 6m39.074111463s ago: executing program 0 (id=7456): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0}, &(0x7f0000001080)=0xc) statx(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x0, 0x8, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = gettid() stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000f40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r7, r2, r1, r6, r1]}}, @rights={{0x34, 0x1, 0x1, [r3, r8, r6, r2, r7, r5, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}], 0xb8, 0x24000005}, 0x40000c4) r16 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x42) execveat(r16, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='*/$(\x00']}, &(0x7f0000000800)={[&(0x7f00000003c0)='kfree\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000008c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', &(0x7f0000000540)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='neigh_create\x00', 0xffffffffffffffff, 0x0, 0xbd9}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x3, 0x2, {0x0, 0xfe}, {0x2, 0xf0, 0x3}, 0x0, 0x2}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='neigh_create\x00', 0xffffffffffffffff, 0x0, 0xbd9}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x3, 0x2, {0x0, 0xfe}, {0x2, 0xf0, 0x3}, 0x0, 0x2}], 0x60) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 6m20.279854983s ago: executing program 33 (id=7507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='neigh_create\x00', 0xffffffffffffffff, 0x0, 0xbd9}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x3, 0x2, {0x0, 0xfe}, {0x2, 0xf0, 0x3}, 0x0, 0x2}], 0x60) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='neigh_create\x00', 0xffffffffffffffff, 0x0, 0xbd9}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000100)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}, {0x3, 0x2, {0x0, 0xfe}, {0x2, 0xf0, 0x3}, 0x0, 0x2}], 0x60) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) (async) 4.615373149s ago: executing program 5 (id=12047): openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7, 0x10020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x3}, 0x11301c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000180), &(0x7f0000000580)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r3], 0x20}}, 0x0) 4.59429875s ago: executing program 5 (id=12048): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd28, 0xfffffffe, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}]}}]}, 0xb0}}, 0x0) 4.57585311s ago: executing program 5 (id=12049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae0210000060a0b040000000000000000020000000900010073797a30000000"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 4.537195721s ago: executing program 5 (id=12050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) syz_read_part_table(0x5dc, &(0x7f0000000000)="$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") 4.451461842s ago: executing program 5 (id=12055): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0}, &(0x7f0000001080)=0xc) statx(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x0, 0x8, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = gettid() stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$pptp(0x18, 0x1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000f40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r16, r7, r2, r1, r6, r1]}}, @rights={{0x34, 0x1, 0x1, [r3, r8, r6, r2, r7, r5, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}], 0xb8, 0x24000005}, 0x40000c4) r17 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x42) execveat(r17, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='*/$(\x00']}, &(0x7f0000000800)={[&(0x7f00000003c0)='kfree\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000008c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', &(0x7f0000000540)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0}, &(0x7f0000001080)=0xc) statx(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x0, 0x8, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = gettid() stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket$pptp(0x18, 0x1, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000f40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x28, 0x1, 0x1, [r16, r7, r2, r1, r6, r1]}}, @rights={{0x34, 0x1, 0x1, [r3, r8, r6, r2, r7, r5, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}], 0xb8, 0x24000005}, 0x40000c4) r17 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x42) execveat(r17, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='*/$(\x00']}, &(0x7f0000000800)={[&(0x7f00000003c0)='kfree\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000008c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', &(0x7f0000000540)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000063c0)=@newqdisc={0xcd8, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc2c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x6, 0x8, 0x80, 0xd56, 0x5, 0x9f, 0x5, 0xd, 0x3, 0x2, 0x7, 0x0, 0x8000, 0x10000, 0x4, 0x80000000, 0x40, 0x1000, 0x8, 0x306, 0x8, 0x7fff, 0x92a0, 0x7, 0x4, 0xe8, 0x2, 0x75f, 0x3, 0x3, 0x1, 0xfffffffd, 0x6, 0x4, 0x1ff, 0xbd4f, 0x3c, 0x2, 0x7f, 0x1, 0xb4fd, 0x3, 0x8001, 0x3, 0xfffffffc, 0x7, 0xfffffff7, 0x1, 0x10000, 0x8, 0x1, 0x2, 0x2, 0x80, 0x7fffffff, 0xf8ed840, 0x800, 0x7fff, 0x4, 0x1, 0x9, 0x3, 0xb8, 0xff, 0x5, 0x8, 0x7150, 0xd1, 0x3, 0x80000001, 0x0, 0x6, 0x10, 0x1ff, 0x6, 0x8, 0x3, 0xffffffff, 0x2, 0xc000000, 0xffffffff, 0x200, 0x10, 0x5, 0x3, 0x101, 0x6, 0x8000, 0x42d, 0x2, 0x81dc, 0x1, 0x8000, 0x7, 0xc9, 0x6, 0x1, 0x9, 0x8, 0x6, 0x2, 0x10b, 0xc, 0x2, 0xffff8000, 0xb2f, 0x9, 0x0, 0x10000, 0x1ff, 0xb2, 0xffffd761, 0x1fd, 0x6, 0xf, 0x6, 0x6, 0x1, 0x0, 0x9, 0x9, 0xfffffffe, 0x7, 0x636, 0xfffffff7, 0xfffffffc, 0x6, 0x7fffffff, 0x1, 0x7, 0x42ff4daa, 0x2, 0x9, 0x7, 0xfffffffe, 0x2, 0x80000000, 0x2b82, 0xb, 0x10001, 0x5, 0x1ff, 0x7, 0x8, 0x5, 0x0, 0xfffffffa, 0x5, 0x4f7, 0x7fff, 0x6063, 0x0, 0x7, 0x7, 0x7f8, 0x6, 0xffffff80, 0x3, 0x5a6, 0x6, 0x4, 0x1, 0xff, 0xf, 0xf13, 0x79b, 0x8, 0x7, 0x8, 0xf549, 0xffffffff, 0x1a62, 0x3, 0x2, 0xe3bb, 0xfffffffd, 0x1, 0x101, 0x2, 0x4, 0x0, 0x9, 0x11, 0x9, 0x9, 0x2, 0x7, 0x5, 0xffff9570, 0xd13c, 0x17, 0xffff, 0x7fffffff, 0x8, 0x7, 0xffffffff, 0xf, 0xffffffff, 0x62e6, 0x7fff, 0x7fff, 0x6, 0xffffb422, 0x1, 0x1, 0x5, 0x99c, 0x40, 0x1, 0x7ff, 0x4, 0x6, 0x7, 0x6, 0x100, 0x401, 0x10000, 0x4, 0xf070, 0x3, 0x1, 0x7, 0x1, 0x9, 0x20000000, 0x6, 0x5, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfffffff8, 0xffff, 0xb613, 0x1, 0x8, 0x10001, 0x2, 0x4, 0x5, 0x10001, 0x7ff, 0x1, 0x1, 0x4, 0x0, 0x8, 0x7fffffff, 0x3, 0x7, 0xfe0, 0x1000, 0x40]}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fbb}, @TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0x5, 0x9, 0xe, 0x0, 0x8, 0x4, 0x7ff, 0x7, 0xc1, 0x0, 0x3, 0x5, 0x4, 0x4, 0x6, 0x9, 0xffff, 0x3, 0x2, 0x3, 0x1ff, 0xfffffff8, 0x8, 0xa, 0xd9, 0x1, 0xfffffff7, 0x5, 0x4, 0x400, 0x1, 0x4, 0xe29, 0xe1cc, 0x3, 0xff, 0x8, 0x3, 0x800, 0xa01, 0xd4, 0x7fffffff, 0xa, 0x3, 0x7726, 0x2, 0x0, 0x8, 0x0, 0x4, 0x7, 0x798e, 0x80, 0xaa6, 0x0, 0x6, 0x9, 0xfffffffe, 0xc99, 0x4, 0x7ff, 0x10, 0x3ff, 0x0, 0xbdb, 0x8, 0x3, 0x3ff, 0x5, 0x5, 0x3, 0x97, 0xc3, 0x5, 0x9, 0x7, 0x800, 0x401, 0xfffffff8, 0x2, 0xa, 0x8, 0x2, 0x7fffffff, 0x9, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x7fffffff, 0xf7, 0x0, 0x222, 0xc, 0x0, 0x6165, 0x7, 0xfffffffa, 0x0, 0x8, 0x7b98, 0x2, 0xfffffff8, 0x91, 0x3, 0xfffffffd, 0xffffffff, 0x2, 0x1, 0x4, 0x8, 0x4, 0x16, 0x0, 0x4, 0x9, 0x3ff, 0x135, 0x5, 0xfffffff7, 0x6, 0x3, 0x564, 0xb, 0xffffff66, 0x4, 0x1000, 0x4e708, 0x1, 0x1f1a, 0x6, 0x5, 0x7, 0x7, 0x0, 0x9, 0x8, 0x0, 0x7f, 0xe80, 0x7, 0x0, 0x0, 0x4, 0x401, 0x8, 0x0, 0xd, 0x6, 0x400, 0x8, 0xe511, 0x0, 0xf14, 0xfffffffd, 0x6, 0x1ff, 0x7ff, 0x2, 0x9, 0x8, 0x1, 0x8001, 0x0, 0x7, 0x6, 0x4, 0x9, 0xffffffaf, 0x4, 0x9, 0xc, 0x7, 0x1, 0x401, 0x2, 0x9, 0xfffffffa, 0x3, 0x1, 0xffffffff, 0x62, 0x1ff, 0xbf, 0x0, 0xffffffff, 0x0, 0x100, 0x2, 0x1, 0xf, 0xffff8001, 0x0, 0xc5, 0x4cb, 0x7, 0x8, 0x7, 0x0, 0xc, 0x2, 0x3, 0x3, 0x2, 0x3, 0x80000001, 0x3, 0x8, 0x0, 0x8, 0x8000, 0x123, 0xa, 0x7f, 0x267, 0x9, 0x0, 0x2, 0xfffffff7, 0x5, 0x61, 0x6, 0x9, 0x2, 0x8001, 0x5, 0x3, 0x7, 0x1b2, 0x280, 0x7, 0x80, 0x9, 0x4a, 0x9, 0x4, 0xfece, 0x5, 0x7, 0x2f, 0xd, 0x6, 0xc26, 0x4, 0x1, 0x59b26dac, 0x8, 0x0, 0x8, 0x3, 0x80000001, 0x40, 0x9]}, @TCA_TBF_RATE64={0xc, 0x4, 0x12723fd9fcec94c5}, @TCA_TBF_PTAB={0x404, 0x3, [0x7fff, 0x9, 0x1, 0x9, 0xfffffffb, 0x0, 0x5e, 0x0, 0x4, 0x3, 0x0, 0x1, 0x6a29, 0x0, 0x6, 0xfffffffd, 0xf, 0x400, 0x1f8f, 0x10, 0x74, 0xd, 0x9, 0x240, 0x173, 0x7, 0x8, 0x80000000, 0x7, 0x9, 0xfffffff8, 0x2d, 0xffff2969, 0x200, 0x5, 0xb28, 0x9, 0x4, 0xffff, 0x66, 0x9, 0x7, 0x8000, 0x1000, 0x8, 0x2, 0xfffffffd, 0x7, 0x8, 0x4, 0x3, 0x7ff, 0x994, 0x4, 0x4, 0x2, 0x8001, 0x12c, 0x1, 0x9, 0x41, 0x6, 0x6, 0xc2, 0x3ff, 0x101, 0xffff, 0x8, 0xc8, 0x10, 0x182, 0xff, 0x5, 0x4, 0x0, 0x1, 0x2, 0xf, 0x7ff, 0xe, 0x8, 0x8, 0x3, 0x8000, 0x7, 0xfffffff9, 0x6, 0x6, 0x1, 0x1, 0x4, 0x8, 0x7, 0x1000, 0x0, 0x7, 0x5, 0xffffba1b, 0x5, 0x101, 0x4, 0x40, 0x1, 0xe, 0x7, 0xfffffffc, 0x9, 0x2, 0x4, 0xc, 0xfffffbff, 0x6, 0x10, 0xc, 0x8, 0x0, 0x9, 0x6, 0x8, 0x400, 0x1000, 0x0, 0xd0be, 0x6, 0x4, 0xf, 0x8, 0x9, 0x10, 0x7f, 0x4, 0x1, 0x8, 0x32bb, 0x2, 0x1, 0x7, 0x7ff, 0x2, 0x5, 0x5, 0x4, 0x5, 0x6, 0xb, 0x10001, 0x401, 0x10, 0x0, 0x1, 0x2, 0xc23, 0x2, 0x0, 0x3, 0xfffffff5, 0x5, 0x9, 0x2, 0x10001, 0x2, 0x1, 0x9, 0xad, 0x8, 0x5, 0x1ff, 0x0, 0x0, 0x7, 0x4, 0xba1, 0x2, 0x346, 0x1ff, 0x3, 0xb1f5, 0xc87, 0x4, 0x9, 0x3, 0x2aec, 0x0, 0x1000, 0x80000000, 0x4, 0x7, 0x1, 0x10000, 0x5, 0x5, 0x7, 0x4, 0x4, 0x4, 0x10000, 0x6, 0x35, 0xd, 0x6, 0x8a4, 0x0, 0x3f, 0x6, 0x6, 0x992, 0x9, 0x0, 0x0, 0xa4, 0xb6, 0x8, 0x2, 0x80, 0x2, 0x23a, 0x9, 0x6, 0x0, 0x5, 0x2000, 0x8, 0x4, 0x7, 0x1, 0x15800000, 0x5496, 0xcc, 0x0, 0xeb, 0x1, 0x9, 0x2, 0x4, 0x1, 0x6, 0xb5, 0x1, 0xb1, 0xffffffff, 0x80, 0x4, 0x1, 0x3, 0x5, 0x2c, 0x0, 0x5, 0x800, 0x8a5a, 0x9, 0xffffffc0, 0x5, 0x4, 0x3d, 0x5]}, @TCA_TBF_BURST={0x8, 0x6, 0x400}]}}, @TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xe, 0x9, 0x6e, 0x2, 0x74c0, 0x6, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x7, 0x3, 0xfff9, 0x8000, 0x0, 0x4, 0x4, 0x8}}, {0x14, 0x2, [0x8, 0x7, 0x8, 0x0, 0x8, 0x0, 0x2, 0x8000]}}, {{0x1c, 0x1, {0x5, 0x6, 0xfffb, 0x2, 0x0, 0x2, 0x10, 0x3}}, {0xa, 0x2, [0x7, 0x2ee2, 0x7fff]}}]}]}, 0xcd8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/4083, 0x0, 0xff3}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2708"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="002918d910d46be7099c66b02010b1f0b7c3dc1dabe625969fb0adc922385af53d57a1d35dd71c90d9dd649b53142dd3d4108b4c7db82e8475d5bb6fa2fa626cd92c7326ce1ba2f33b0aef2b2164e01d910058b51684696959ea7f5a607a6572d2640cf9312a07000000260e3651a0cbfd2c080990fb4c76e9e613a759863734a70d0600ec77e8ba76aacbb21e4b903aa4873a9951f269a9c0f87805a1a0cbdf6b8644a1de05a8d9dd9687d67c8af7f68cb59e60d1fbefb49b93d6b72cce4162edc4468a13987d94d428df36915621aeff6dc1358a7331fa69e05c417c2e1e6b8dc29c496c76d02dfc2d7b48616fb3f01b221f4f8f484a00090964922de8909a1f9f7ef655a12a68a56cb341a8fba4cd81cedec9cb518d13d2a2564427b63b037494748a24daa21fe1256df68d000b2778bf0437cc642cd83c5a1b34eeffdf93ecbd85bb340eeef68dd60101769c74f94d217264c171feea0305bfc87c36247d90b129a9973f00000001d99b195d2f75653a0193672783c6dbca5d1445110621d8095064f0a034f492cf5aa4767a772d6f4967722546bfd83d3202f76c20a9d7f40f9e7818d77129df7fd072804e0227ecaa03dddd303a318d6f7763ce011543587e6a306780ca2f37db7e8a5b64a5059ac91ff2110e40ea13d70e1504653ba9eebcf61b427797fb3fd79d2bb9aaa13c9729fe323c4ac222991981381e004684fb200b17d2f6ede181067662ad8a31f45b613869ca8fc5b1dbe62407a1f6dcb86a4c430210e9bcfca9b83283b87316c4d17f388e0bab0500000092a82e12f8e5348f11e7739033e9081bfc598746cf032fa55d0300470000000019ac65f89ca7d96da3ca2db52f8ec80462fddf42dbbca24b720000000000000000000000000000005214e7febdbc0033d6402c34aa96940474", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$eJzs3M9rHGUYB/Bn2/wyNdmotdqC9EUvehmbHDx5CZKCdEFpm0IrCFMz0WU3uyGzBLaI7c2rf4d49CaI/0AuXjwL3nLx2IM40p1gTUiRFNrdhs/nsg8775d9ZncZ2OF9dv/D77Y6m2W2mQ/iTKMRU9sR6WGKFGfibNQexHu3fvv9rRu371xbbbXWrqd0dfXm8gcppcXLP3/29Q9v/zI4d+vHxZ9mY2/p8/0/V/7Yu7B3cf/vm1+1y9QuU68/SHm62+8P8rvdIm20y06W0qfdIi+L1O6Vxc6h45vd/vb2MOW9jYX57Z2iLFPeG6ZOMUyDfhrsDFP+Zd7upSzL0sJ88PRmYv37h1VVRVTVdMxEVVXVSzEf5+LlWIjFaMbSdMSr8Vqcj9fjQrwRb8bF0apxdw4AAAAAAAAAAAAAAAAAAACny//M/8cr5v8BAAAAAAAAAAAAAAAAAADgmTP/DwAAAAAAAAAAAAAAAAAAAONn/h8AAAAAAAAAAAAAAAAAAADG78btO9dWW6216ynNRWx9u7u+u14/1sdXN6Md3SjiSjTjrxhN/9fq+urHrbUraWQp3t+6f5C/v7t+9nB+efR3Asfml+t8Opyfjfn/5leiGeePz68cm5+Ld9+p841H+Sya8esX0Y9ubMSj7OP8N8spffRJ60j+0mgdAAAAnAZZ+texv9+zLDUa9dIjx+snn3x/oGoeuT/QOJyfiktTYzxxRsrhvU7e7RY7L1Zx8JWMe5388iT08+Ri5qDTSelnAoqDd+TBpPTzghbTEfEMX+LIhWIuImaf44WJ5+Lxhz7uTgAAAAAAAAAAADiJE2wMnKr32558O+G4zxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAfduBYAAAAAECYv3UaHRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcFQAA//8my+RP") statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=""/127) 2.113205128s ago: executing program 4 (id=12083): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r6, 0x4, 0x0, &(0x7f00000019c0), 0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) io_destroy(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.96364344s ago: executing program 4 (id=12084): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0xb) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 1.95210169s ago: executing program 2 (id=12085): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(0xffffffffffffffff, r0, 0x0) recvmmsg(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/34, 0x22}], 0x1}, 0x96d}], 0x1, 0x40, 0x0) 1.808992132s ago: executing program 6 (id=12086): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1.572169746s ago: executing program 2 (id=12087): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioperm(0x100000000, 0x7, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) inotify_init() symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.478453877s ago: executing program 6 (id=12088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae0210000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000b4210480280001800800010066"], 0x2208}, 0x1, 0x0, 0x0, 0x20000884}, 0x8800) 1.146913792s ago: executing program 3 (id=12089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001040)={0x0, 0x0}, &(0x7f0000001080)=0xc) statx(0xffffffffffffff9c, &(0x7f00000010c0)='./file1\x00', 0x0, 0x8, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() stat(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000016c0)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000000f40)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000fc0), 0x0, &(0x7f0000001800)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r1]}}, @rights={{0x34, 0x1, 0x1, [r3, r6, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, r0, 0xffffffffffffffff, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r4]}}], 0xb8, 0x24000005}, 0x40000c4) r14 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file0\x00', 0x1, 0x42) execveat(r14, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000300)='*/$(\x00']}, &(0x7f0000000800)={[&(0x7f00000003c0)='kfree\x00', &(0x7f0000000400)='GPL\x00', &(0x7f00000008c0)='security.selinux\x00', &(0x7f0000000500)='system_u:object_r:hwdata_t:s0\x00', &(0x7f0000000540)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 1.014971514s ago: executing program 4 (id=12092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0, r2}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x0, 0x1000000000000, 0x0, 0x1, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x80000081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) dup(0xffffffffffffffff) r6 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e7342726c99832bdd776f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',afid=0x0000000000000004,cachetag=-$,access=user,version=9p2000,smackfsdef=-,rootcontext=unconfined_u,fscontext=root,\x00']) 996.800904ms ago: executing program 4 (id=12093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r3}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095", @ANYRESHEX=r1, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r9, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x3) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r10, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r10, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) 985.405365ms ago: executing program 3 (id=12094): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) accept4(r1, 0x0, &(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x0, 0x0, 0x1, 0xb2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000800}, 0x4000010) pwritev(r0, 0x0, 0x0, 0x5, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendfile(r3, r3, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910300000000000730a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1a, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4088, 0xff8}], 0x4, 0x4, 0x0) fsetxattr(r4, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0, 0x0) 979.081075ms ago: executing program 6 (id=12095): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 911.404136ms ago: executing program 6 (id=12096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a0102000000000000000002001a000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f28edd"], 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="c4e92c5a2142ddbab1e1fe6d84728cc09d18c0486e17f060c3c5107f7467d3ec65c92b54442b6005db971f8035b1a41fd582679b8e76db6582baef9bb5adcaf2335cd518bce375fd5c09f656d1", 0x4d, 0xc0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r9, 0x6, 0x1, &(0x7f0000000140)=0xea, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x38, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0x40, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80800}, 0x0) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000580)={@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x1}}, {&(0x7f0000000480)=""/241, 0xf1}, &(0x7f0000000300), 0x1}, 0xa0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) 676.50795ms ago: executing program 2 (id=12097): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaa3aaaaaaaaaaaaa0800450000b00000000000119078ac1414aa0000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc0100a8698dd28aeecb49872db30f9efa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424dbcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b9649afdffc1f39cb307b3472e8541b042d2643fcbb2c5a57df67d544af6e8dafe096fd3824d376460950f16f136e62f66"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x11, 0x0, &(0x7f0000000400)="3a3673c6b666b49a147fa431d971193725", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001000000000000", @ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r8}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 675.41673ms ago: executing program 3 (id=12098): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 628.993701ms ago: executing program 6 (id=12099): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 605.197941ms ago: executing program 3 (id=12100): socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 581.214631ms ago: executing program 3 (id=12101): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x7800, 0x7b1, 0x1, 0xb4, {{0xf, 0x4, 0x1, 0x6, 0x3c, 0x66, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0x8, 0x7f, 0x0, 0x9, [0x4b]}, @timestamp_addr={0x44, 0x1c, 0x7a, 0x1, 0x6, [{@loopback, 0x8000}, {@rand_addr=0x64010100, 0x3037}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @ra={0x94, 0x4}]}}}}}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0) connect$inet(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000007e3b00007a7e00000800000021000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="040000000500"/28], 0x50) clock_adjtime(0x0, &(0x7f0000000100)={0x105f0827e8, 0xfb, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde1, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x401, 0x3}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x5, 0xc, 0x6, 0x7}, {0x80, 0x8e, 0x8, 0x3}, {0x81, 0x71, 0xb, 0x4}, {0x8, 0x7f, 0x5, 0x80000001}, {0x3ff, 0x81, 0x4, 0x5}]}) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) syz_clone(0x5000080, &(0x7f0000000240)="a47e4e9526de9a9c1d74fdbe7a6829198f2380ff91ff7504475e08b16624cb266f101f8ced53cc74de0e777c6142bb62838486a5cdc3cafe1bfde614db302127942305badff455f9bff079cea9356ba6b806625b45046b57f6ad54892c056495fb42e33f504fa7f811607a505468e2979e567402ddaf319b8598c8b1783b974fe2d3da583fb0c7c32eb62b1ce69f07e4d7ff44ca8155b01b293235487d411be24fd22f6b35af2b6c5eae70d0e5c4faeb59793372c20cd2f157e1105586", 0xbd, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="69ec2bf1eaa308ed8aa93e240294228db488939cba703df9724b88") socket$inet6(0xa, 0x2, 0x3a) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r4, 0x400454da, &(0x7f0000000000)) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4739}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@dioread_nolock}, {@nomblk_io_submit}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000480)='2', 0x1, 0x8080c64) r5 = socket$inet(0x2, 0x2, 0x1) creat(&(0x7f0000000200)='./file2\x00', 0x24) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2e24, @empty}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 217.599477ms ago: executing program 3 (id=12102): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000a00)=ANY=[@ANYBLOB="78ef898e1da02918021801000020646c2500008a3b000800000000f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000070000009500000000000000a1639d2afa947027759f5c57424ea85b5499a23d1125da8744c0763fd5b3cefd92b9454f52638f056effbf47514302dac6623383cbe26b7123a4bd149e647b465f683f184f4bace47bfd3a3220b202530471f6470e9042d676c978b7c896fc7c0e56b610c10e75ca9f7f0b350c0d11e8ce5dfdb8e64223211c32b1e196e768145931ce54aa07931f8ed4c563"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) 141.443628ms ago: executing program 2 (id=12103): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 0s ago: executing program 4 (id=12104): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): RCX: 00007fce8105e929 [ 784.215205][T26014] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000006 [ 784.215215][T26014] RBP: 00007fce7f6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 784.215225][T26014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.215235][T26014] R13: 0000000000000000 R14: 00007fce81285fa0 R15: 00007fff83885ed8 [ 784.215249][T26014] [ 784.482325][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.491774][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.521337][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.530668][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.533232][T26026] lo speed is unknown, defaulting to 1000 [ 784.561675][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.564369][T26026] lo speed is unknown, defaulting to 1000 [ 784.570984][T26029] netlink: 8568 bytes leftover after parsing attributes in process `syz.3.11358'. [ 784.645583][T26066] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.11362'. [ 784.698767][ T10] lo speed is unknown, defaulting to 1000 [ 784.719547][T26068] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11363'. [ 784.748361][T26078] loop3: detected capacity change from 0 to 1024 [ 784.756424][T26078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.042600][T26089] loop9: detected capacity change from 0 to 7 [ 785.042974][T26089] Buffer I/O error on dev loop9, logical block 0, async page read [ 785.057967][T26089] Buffer I/O error on dev loop9, logical block 0, async page read [ 785.057991][T26089] loop9: unable to read partition table [ 785.058014][T26089] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 785.058014][T26089] ) failed (rc=-5) [ 785.374360][T26107] loop5: detected capacity change from 0 to 2048 [ 785.404691][T26107] loop5: p4 < > [ 785.448551][T26126] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.555668][T26126] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.587403][ T9580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.613409][T26124] loop5: detected capacity change from 0 to 8192 [ 785.620764][T26126] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.715561][T26126] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.728231][T26153] siw: device registration error -23 [ 785.742309][T26152] lo speed is unknown, defaulting to 1000 [ 785.751599][T26152] lo speed is unknown, defaulting to 1000 [ 785.801732][T26126] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.805315][T26126] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.823463][T26126] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.827112][T26126] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.837541][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 785.837556][ T29] audit: type=1326 audit(1751816535.765:102125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.869937][ T29] audit: type=1326 audit(1751816535.765:102126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870007][ T29] audit: type=1326 audit(1751816535.765:102127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870028][ T29] audit: type=1326 audit(1751816535.765:102128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870053][ T29] audit: type=1326 audit(1751816535.765:102129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870083][ T29] audit: type=1326 audit(1751816535.765:102130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870149][ T29] audit: type=1326 audit(1751816535.765:102131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="syz.5.11380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870171][ T29] audit: type=1326 audit(1751816535.765:102132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870194][ T29] audit: type=1326 audit(1751816535.765:102133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 785.870230][ T29] audit: type=1326 audit(1751816535.765:102134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26149 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 786.154269][T26192] loop5: detected capacity change from 0 to 8192 [ 786.362159][T26206] loop5: detected capacity change from 0 to 2048 [ 786.373222][T26206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.385815][T26206] lo speed is unknown, defaulting to 1000 [ 786.386216][T26206] lo speed is unknown, defaulting to 1000 [ 786.480706][T26237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26237 comm=syz.5.11390 [ 786.603897][T26252] lo speed is unknown, defaulting to 1000 [ 786.604176][T26252] lo speed is unknown, defaulting to 1000 [ 786.756062][T26282] lo speed is unknown, defaulting to 1000 [ 786.763705][T26282] lo speed is unknown, defaulting to 1000 [ 787.207889][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.467185][T26326] lo speed is unknown, defaulting to 1000 [ 787.467447][T26326] lo speed is unknown, defaulting to 1000 [ 787.471832][T26319] loop5: detected capacity change from 0 to 8192 [ 787.788182][T26367] loop3: detected capacity change from 0 to 1024 [ 787.811130][T26367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.841393][T26378] lo speed is unknown, defaulting to 1000 [ 787.841666][T26378] lo speed is unknown, defaulting to 1000 [ 787.937789][T26407] loop5: detected capacity change from 0 to 2048 [ 787.965173][T26407] loop5: p4 < > [ 788.086699][T26423] loop5: detected capacity change from 0 to 1024 [ 788.095893][T26423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.108415][T26423] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.11420: Allocating blocks 449-513 which overlap fs metadata [ 788.129320][T26423] EXT4-fs (loop5): pa ffff88810077ed90: logic 48, phys. 177, len 21 [ 788.137360][T26423] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 788.160352][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.256350][T26435] loop5: detected capacity change from 0 to 256 [ 788.271615][T26435] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 788.339410][T26442] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 788.345998][T26442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.353640][T26442] vhci_hcd vhci_hcd.0: Device attached [ 788.366802][T26443] vhci_hcd: connection closed [ 788.366901][ T12] vhci_hcd: stop threads [ 788.375963][ T12] vhci_hcd: release socket [ 788.380450][ T12] vhci_hcd: disconnect device [ 788.635929][ T9580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.681615][T26447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11426'. [ 788.702145][T26451] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 789.021164][T26473] loop3: detected capacity change from 0 to 2048 [ 789.085535][T26473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.148046][T26473] lo speed is unknown, defaulting to 1000 [ 789.154033][T26473] lo speed is unknown, defaulting to 1000 [ 789.471704][T26516] FAULT_INJECTION: forcing a failure. [ 789.471704][T26516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.471730][T26516] CPU: 0 UID: 0 PID: 26516 Comm: syz.2.11438 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 789.471757][T26516] Tainted: [W]=WARN [ 789.471765][T26516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 789.471808][T26516] Call Trace: [ 789.471814][T26516] [ 789.471822][T26516] __dump_stack+0x1d/0x30 [ 789.471844][T26516] dump_stack_lvl+0xe8/0x140 [ 789.471864][T26516] dump_stack+0x15/0x1b [ 789.471882][T26516] should_fail_ex+0x265/0x280 [ 789.471924][T26516] should_fail+0xb/0x20 [ 789.471950][T26516] should_fail_usercopy+0x1a/0x20 [ 789.471982][T26516] _copy_from_user+0x1c/0xb0 [ 789.472013][T26516] ___sys_sendmsg+0xc1/0x1d0 [ 789.472054][T26516] __x64_sys_sendmsg+0xd4/0x160 [ 789.472085][T26516] x64_sys_call+0x2999/0x2fb0 [ 789.472108][T26516] do_syscall_64+0xd2/0x200 [ 789.472197][T26516] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 789.472277][T26516] ? clear_bhb_loop+0x40/0x90 [ 789.472300][T26516] ? clear_bhb_loop+0x40/0x90 [ 789.472322][T26516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.472339][T26516] RIP: 0033:0x7f8c7f62e929 [ 789.472352][T26516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 789.472434][T26516] RSP: 002b:00007f8c7dc97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 789.472453][T26516] RAX: ffffffffffffffda RBX: 00007f8c7f855fa0 RCX: 00007f8c7f62e929 [ 789.472466][T26516] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000004 [ 789.472480][T26516] RBP: 00007f8c7dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 789.472492][T26516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.472553][T26516] R13: 0000000000000000 R14: 00007f8c7f855fa0 R15: 00007ffc2fdf1778 [ 789.472570][T26516] [ 789.607537][T26522] loop9: detected capacity change from 0 to 7 [ 789.607644][T26522] Buffer I/O error on dev loop9, logical block 0, async page read [ 789.607735][T26522] Buffer I/O error on dev loop9, logical block 0, async page read [ 789.607751][T26522] loop9: unable to read partition table [ 789.607768][T26522] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 789.607768][T26522] ) failed (rc=-5) [ 790.038435][ T9580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.091698][T26542] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.177692][T26548] loop3: detected capacity change from 0 to 8192 [ 790.197771][T26542] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.287563][T26542] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.323514][T26569] netlink: 'syz.5.11452': attribute type 10 has an invalid length. [ 790.347930][T26542] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.365671][T26569] geneve1: entered promiscuous mode [ 790.392018][T26569] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 790.432724][T26542] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.456183][T26542] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.487133][T26542] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.515587][T26542] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.551842][T26576] loop9: detected capacity change from 0 to 7 [ 790.558169][T26576] Buffer I/O error on dev loop9, logical block 0, async page read [ 790.566156][T26576] Buffer I/O error on dev loop9, logical block 0, async page read [ 790.574064][T26576] loop9: unable to read partition table [ 790.579769][T26576] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 790.579769][T26576] ) failed (rc=-5) [ 790.767652][T26596] lo speed is unknown, defaulting to 1000 [ 790.773789][T26596] lo speed is unknown, defaulting to 1000 [ 790.836495][T26625] loop5: detected capacity change from 0 to 256 [ 790.895738][T26625] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 791.131599][T26641] loop9: detected capacity change from 0 to 7 [ 791.131704][T26641] Buffer I/O error on dev loop9, logical block 0, async page read [ 791.131888][T26641] Buffer I/O error on dev loop9, logical block 0, async page read [ 791.131903][T26641] loop9: unable to read partition table [ 791.131939][T26641] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 791.131939][T26641] ) failed (rc=-5) [ 791.239186][T26654] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11469'. [ 791.239211][T26654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11469'. [ 791.696617][T26668] lo speed is unknown, defaulting to 1000 [ 791.713680][T26668] lo speed is unknown, defaulting to 1000 [ 791.778873][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.794756][T26691] SELinux: failed to load policy [ 791.866714][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.928029][T26668] chnl_net:caif_netlink_parms(): no params data found [ 791.945794][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.019481][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.020185][T26668] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.020212][T26668] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.020302][T26668] bridge_slave_0: entered allmulticast mode [ 792.021064][T26668] bridge_slave_0: entered promiscuous mode [ 792.023175][T26668] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.064152][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 792.064168][ T29] audit: type=1326 audit(1751816541.984:102480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.065834][T26668] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.071790][ T29] audit: type=1326 audit(1751816541.984:102481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.095709][T26668] bridge_slave_1: entered allmulticast mode [ 792.102511][ T29] audit: type=1326 audit(1751816541.984:102482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.126995][T26668] bridge_slave_1: entered promiscuous mode [ 792.132117][ T29] audit: type=1326 audit(1751816541.984:102483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.185822][ T29] audit: type=1326 audit(1751816541.984:102484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.185843][ T29] audit: type=1326 audit(1751816541.984:102485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.185865][ T29] audit: type=1326 audit(1751816541.984:102486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.186006][ T29] audit: type=1326 audit(1751816541.994:102487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.186046][ T29] audit: type=1326 audit(1751816541.994:102488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.186076][ T29] audit: type=1326 audit(1751816541.994:102489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26790 comm="syz.6.11477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 792.237717][T26668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.366989][T26668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.449731][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 792.457267][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 792.464720][ T10] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 792.473749][ T10] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 792.488206][ T12] bond0 (unregistering): Released all slaves [ 792.508058][T26668] team0: Port device team_slave_0 added [ 792.515004][T26668] team0: Port device team_slave_1 added [ 792.534743][T26939] loop9: detected capacity change from 0 to 7 [ 792.541008][T26939] Buffer I/O error on dev loop9, logical block 0, async page read [ 792.548954][T26939] Buffer I/O error on dev loop9, logical block 0, async page read [ 792.556784][T26939] loop9: unable to read partition table [ 792.562475][T26939] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 792.562475][T26939] ) failed (rc=-5) [ 792.591959][T26668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.598990][T26668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.624968][T26668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.682832][T26950] loop5: detected capacity change from 0 to 2048 [ 792.691894][ T12] tipc: Disabling bearer [ 792.697005][ T12] tipc: Left network mode [ 792.732741][T26950] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 792.762612][T26668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.769614][T26668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.795694][T26668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.827936][ T12] hsr_slave_0: left promiscuous mode [ 792.835646][ T12] hsr_slave_1: left promiscuous mode [ 792.843697][ T12] veth1_macvtap: left promiscuous mode [ 792.849429][ T12] veth0_macvtap: left promiscuous mode [ 792.855173][ T12] veth1_vlan: left promiscuous mode [ 792.860424][ T12] veth0_vlan: left promiscuous mode [ 792.941073][T26668] hsr_slave_0: entered promiscuous mode [ 792.941645][T26668] hsr_slave_1: entered promiscuous mode [ 792.952970][T26668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 792.952985][T26668] Cannot create hsr debugfs directory [ 792.975714][T27010] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27010 comm=syz.5.11482 [ 793.012058][T26950] lo speed is unknown, defaulting to 1000 [ 793.012409][T26950] lo speed is unknown, defaulting to 1000 [ 793.260601][T27103] lo speed is unknown, defaulting to 1000 [ 793.260912][T27103] lo speed is unknown, defaulting to 1000 [ 793.325477][T26668] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 793.329862][T26668] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 793.363365][T26668] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 793.395728][T26668] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 793.496474][T27152] lo speed is unknown, defaulting to 1000 [ 793.498434][T27152] lo speed is unknown, defaulting to 1000 [ 793.546024][T26668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.565275][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.580346][T26668] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.593769][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.600900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.635011][T26668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 793.645475][T26668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 793.661533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.668655][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.690136][T27179] loop5: detected capacity change from 0 to 2048 [ 793.758629][T27179] loop5: p4 < > [ 793.812811][T26668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.980598][T26668] veth0_vlan: entered promiscuous mode [ 793.995445][T26668] veth1_vlan: entered promiscuous mode [ 794.040935][T27224] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 794.047526][T27224] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.055044][T27224] vhci_hcd vhci_hcd.0: Device attached [ 794.079221][T26668] veth0_macvtap: entered promiscuous mode [ 794.085995][T27225] vhci_hcd: connection closed [ 794.086285][ T51] vhci_hcd: stop threads [ 794.095349][ T51] vhci_hcd: release socket [ 794.099784][ T51] vhci_hcd: disconnect device [ 794.105896][T26668] veth1_macvtap: entered promiscuous mode [ 794.113648][T27222] loop5: detected capacity change from 0 to 8192 [ 794.133347][T26668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.154462][T26668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.178101][T26668] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.186911][T26668] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.195662][T26668] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.204441][T26668] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.289921][T27232] loop3: detected capacity change from 0 to 164 [ 794.299923][T27232] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 794.360176][T27237] loop3: detected capacity change from 0 to 256 [ 794.376687][T27237] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 794.430748][T27242] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 794.505064][T27244] lo speed is unknown, defaulting to 1000 [ 794.511219][T27244] lo speed is unknown, defaulting to 1000 [ 794.641745][ T3535] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 794.649249][ T3535] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 794.656699][ T3535] hid-generic 0003:0004:0000.0009: unknown main item tag 0x0 [ 794.681529][ T3535] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 794.726687][T27286] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11510'. [ 794.726706][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11510'. [ 794.912427][T27302] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.913931][ T2963] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.929670][ T2963] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.937186][ T2963] hid-generic 0003:0004:0000.000A: unknown main item tag 0x0 [ 794.945383][ T2963] hid-generic 0003:0004:0000.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 794.975696][T27302] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.015602][T27324] loop5: detected capacity change from 0 to 2048 [ 795.026762][T27302] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.047741][T27306] loop3: detected capacity change from 0 to 512 [ 795.074284][T27324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.089050][T27343] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11524'. [ 795.098232][T27343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11524'. [ 795.114567][T27306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 795.135629][T27302] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.192093][T27355] lo speed is unknown, defaulting to 1000 [ 795.200879][T27306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 795.215887][T27355] lo speed is unknown, defaulting to 1000 [ 795.226825][T27302] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.239284][T27302] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.267758][T27302] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.303435][T27306] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 795.326101][T27302] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.477885][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.676773][T27406] FAULT_INJECTION: forcing a failure. [ 795.676773][T27406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.676803][T27406] CPU: 0 UID: 0 PID: 27406 Comm: syz.2.11532 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 795.676836][T27406] Tainted: [W]=WARN [ 795.676843][T27406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.676876][T27406] Call Trace: [ 795.676883][T27406] [ 795.676890][T27406] __dump_stack+0x1d/0x30 [ 795.676912][T27406] dump_stack_lvl+0xe8/0x140 [ 795.676966][T27406] dump_stack+0x15/0x1b [ 795.676982][T27406] should_fail_ex+0x265/0x280 [ 795.677006][T27406] should_fail+0xb/0x20 [ 795.677109][T27406] should_fail_usercopy+0x1a/0x20 [ 795.677166][T27406] _copy_to_user+0x20/0xa0 [ 795.677184][T27406] mctp_ioctl+0x62a/0x710 [ 795.677208][T27406] ? ioctl_has_perm+0x257/0x2a0 [ 795.677233][T27406] sock_do_ioctl+0x73/0x220 [ 795.677285][T27406] sock_ioctl+0x41b/0x610 [ 795.677308][T27406] ? __pfx_sock_ioctl+0x10/0x10 [ 795.677337][T27406] __se_sys_ioctl+0xce/0x140 [ 795.677366][T27406] __x64_sys_ioctl+0x43/0x50 [ 795.677393][T27406] x64_sys_call+0x19a8/0x2fb0 [ 795.677420][T27406] do_syscall_64+0xd2/0x200 [ 795.677438][T27406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 795.677464][T27406] ? clear_bhb_loop+0x40/0x90 [ 795.677485][T27406] ? clear_bhb_loop+0x40/0x90 [ 795.677527][T27406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.677548][T27406] RIP: 0033:0x7f8c7f62e929 [ 795.677563][T27406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.677579][T27406] RSP: 002b:00007f8c7dc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.677664][T27406] RAX: ffffffffffffffda RBX: 00007f8c7f855fa0 RCX: 00007f8c7f62e929 [ 795.677683][T27406] RDX: 0000200000000080 RSI: 00000000000089e2 RDI: 0000000000000005 [ 795.677696][T27406] RBP: 00007f8c7dc97090 R08: 0000000000000000 R09: 0000000000000000 [ 795.677708][T27406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.677720][T27406] R13: 0000000000000000 R14: 00007f8c7f855fa0 R15: 00007ffc2fdf1778 [ 795.677740][T27406] [ 796.143959][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.229322][T27437] netlink: 'syz.5.11544': attribute type 13 has an invalid length. [ 796.283138][T27439] loop5: detected capacity change from 0 to 128 [ 796.325905][T27439] /dev/loop5: Can't open blockdev [ 796.495010][T27437] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.503440][T27437] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.512025][T27437] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.520479][T27437] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.546625][T27437] bond0: left promiscuous mode [ 796.573742][ T3411] lo speed is unknown, defaulting to 1000 [ 796.574620][T27462] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 796.579675][ T3411] sz0: Port: 1 Link DOWN [ 796.585979][T27462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 796.586051][T27462] vhci_hcd vhci_hcd.0: Device attached [ 796.644747][T27463] vhci_hcd: connection closed [ 796.646375][ T51] vhci_hcd: stop threads [ 796.655398][ T51] vhci_hcd: release socket [ 796.659812][ T51] vhci_hcd: disconnect device [ 796.692192][T27466] loop5: detected capacity change from 0 to 164 [ 796.704888][T27466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 796.725787][T27466] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 796.744654][T27466] Symlink component flag not implemented [ 796.750096][ T8230] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 796.750311][T27466] Symlink component flag not implemented [ 796.757755][ T8230] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 796.770908][ T8230] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 796.782542][ T8230] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 796.784748][T27466] Symlink component flag not implemented (7) [ 796.797626][T27466] Symlink component flag not implemented (116) [ 796.805324][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11550'. [ 796.899527][T27466] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11550'. [ 796.908701][T27466] netlink: 216 bytes leftover after parsing attributes in process `syz.5.11550'. [ 797.081061][T27514] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11560'. [ 797.090301][T27514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11560'. [ 797.153818][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 797.153830][ T29] audit: type=1326 audit(1751816547.085:102932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 797.183484][ T29] audit: type=1326 audit(1751816547.085:102933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 797.222110][T27520] loop9: detected capacity change from 0 to 7 [ 797.265517][T27520] Buffer I/O error on dev loop9, logical block 0, async page read [ 797.281620][T27515] loop5: detected capacity change from 0 to 8192 [ 797.360521][T27520] Buffer I/O error on dev loop9, logical block 0, async page read [ 797.368501][T27520] loop9: unable to read partition table [ 797.443314][ T29] audit: type=1326 audit(1751816547.255:102934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 797.466580][ T29] audit: type=1326 audit(1751816547.265:102935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 797.489846][ T29] audit: type=1326 audit(1751816547.265:102936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27510 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 797.513067][ T29] audit: type=1400 audit(1751816547.275:102937): avc: granted { setsecparam } for pid=27521 comm="syz.3.11561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 797.532693][ T29] audit: type=1326 audit(1751816547.275:102938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27521 comm="syz.3.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 797.556427][ T29] audit: type=1326 audit(1751816547.275:102939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27521 comm="syz.3.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 797.580258][ T29] audit: type=1326 audit(1751816547.275:102940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27521 comm="syz.3.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 797.604072][ T29] audit: type=1326 audit(1751816547.275:102941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27521 comm="syz.3.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 797.644874][T27520] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 797.644874][T27520] ) failed (rc=-5) [ 797.852990][T27541] loop9: detected capacity change from 0 to 7 [ 797.859334][T27541] Buffer I/O error on dev loop9, logical block 0, async page read [ 797.867208][T27541] Buffer I/O error on dev loop9, logical block 0, async page read [ 797.875062][T27541] loop9: unable to read partition table [ 797.880701][T27541] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 797.880701][T27541] ) failed (rc=-5) [ 798.052396][T27549] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 798.058942][T27549] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 798.066536][T27549] vhci_hcd vhci_hcd.0: Device attached [ 798.096711][T27549] loop5: detected capacity change from 0 to 164 [ 798.118282][T27549] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 798.126569][T27550] vhci_hcd: connection closed [ 798.126723][ T51] vhci_hcd: stop threads [ 798.135902][ T51] vhci_hcd: release socket [ 798.140307][ T51] vhci_hcd: disconnect device [ 798.582153][T27580] loop3: detected capacity change from 0 to 512 [ 798.589260][T27580] EXT4-fs: Ignoring removed bh option [ 798.595916][T27580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 798.609861][T27580] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 798.631926][T27580] netlink: 'syz.3.11578': attribute type 2 has an invalid length. [ 798.675576][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.682476][T27586] loop5: detected capacity change from 0 to 8192 [ 798.757920][T27597] siw: device registration error -23 [ 798.852360][T27599] FAULT_INJECTION: forcing a failure. [ 798.852360][T27599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.865723][T27599] CPU: 0 UID: 0 PID: 27599 Comm: syz.6.11583 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 798.865759][T27599] Tainted: [W]=WARN [ 798.865821][T27599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.865832][T27599] Call Trace: [ 798.865840][T27599] [ 798.865848][T27599] __dump_stack+0x1d/0x30 [ 798.865876][T27599] dump_stack_lvl+0xe8/0x140 [ 798.865973][T27599] dump_stack+0x15/0x1b [ 798.866023][T27599] should_fail_ex+0x265/0x280 [ 798.866112][T27599] should_fail+0xb/0x20 [ 798.866138][T27599] should_fail_usercopy+0x1a/0x20 [ 798.866163][T27599] _copy_from_user+0x1c/0xb0 [ 798.866262][T27599] ipv6_flowlabel_opt+0xa3/0x1230 [ 798.866343][T27599] ? __rcu_read_unlock+0x4f/0x70 [ 798.866366][T27599] ? mntput_no_expire+0x6f/0x3c0 [ 798.866393][T27599] ? mntput+0x4b/0x80 [ 798.866484][T27599] ? _raw_spin_unlock_bh+0x36/0x40 [ 798.866510][T27599] ? lock_sock_nested+0x112/0x140 [ 798.866594][T27599] ? should_fail_ex+0xdb/0x280 [ 798.866627][T27599] do_ipv6_setsockopt+0xc92/0x22e0 [ 798.866653][T27599] ? kstrtoull+0x111/0x140 [ 798.866758][T27599] ? avc_has_perm_noaudit+0x1b1/0x200 [ 798.866783][T27599] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 798.866809][T27599] ipv6_setsockopt+0x59/0x130 [ 798.866838][T27599] udpv6_setsockopt+0x99/0xb0 [ 798.866859][T27599] sock_common_setsockopt+0x66/0x80 [ 798.866909][T27599] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 798.866931][T27599] __sys_setsockopt+0x181/0x200 [ 798.866964][T27599] __x64_sys_setsockopt+0x64/0x80 [ 798.867073][T27599] x64_sys_call+0x2bd5/0x2fb0 [ 798.867099][T27599] do_syscall_64+0xd2/0x200 [ 798.867117][T27599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 798.867203][T27599] ? clear_bhb_loop+0x40/0x90 [ 798.867222][T27599] ? clear_bhb_loop+0x40/0x90 [ 798.867278][T27599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.867298][T27599] RIP: 0033:0x7f004d68e929 [ 798.867312][T27599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.867326][T27599] RSP: 002b:00007f004bcf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 798.867343][T27599] RAX: ffffffffffffffda RBX: 00007f004d8b5fa0 RCX: 00007f004d68e929 [ 798.867355][T27599] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 798.867367][T27599] RBP: 00007f004bcf7090 R08: 0000000000000020 R09: 0000000000000000 [ 798.867449][T27599] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 798.867460][T27599] R13: 0000000000000000 R14: 00007f004d8b5fa0 R15: 00007ffebb520208 [ 798.867477][T27599] [ 799.495758][T27617] loop9: detected capacity change from 0 to 7 [ 799.502000][T27617] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.509911][T27617] Buffer I/O error on dev loop9, logical block 0, async page read [ 799.517794][T27617] loop9: unable to read partition table [ 799.523521][T27617] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 799.523521][T27617] ) failed (rc=-5) [ 799.547226][T27625] siw: device registration error -23 [ 799.584060][T27631] FAULT_INJECTION: forcing a failure. [ 799.584060][T27631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.597211][T27631] CPU: 0 UID: 0 PID: 27631 Comm: syz.5.11593 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 799.597260][T27631] Tainted: [W]=WARN [ 799.597266][T27631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 799.597276][T27631] Call Trace: [ 799.597283][T27631] [ 799.597325][T27631] __dump_stack+0x1d/0x30 [ 799.597345][T27631] dump_stack_lvl+0xe8/0x140 [ 799.597362][T27631] dump_stack+0x15/0x1b [ 799.597378][T27631] should_fail_ex+0x265/0x280 [ 799.597470][T27631] should_fail+0xb/0x20 [ 799.597501][T27631] should_fail_usercopy+0x1a/0x20 [ 799.597527][T27631] _copy_to_user+0x20/0xa0 [ 799.597609][T27631] simple_read_from_buffer+0xb5/0x130 [ 799.597638][T27631] proc_fail_nth_read+0x100/0x140 [ 799.597682][T27631] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 799.597740][T27631] vfs_read+0x1a0/0x6f0 [ 799.597770][T27631] ? __sys_setsockopt+0x18e/0x200 [ 799.597797][T27631] ? __rcu_read_unlock+0x4f/0x70 [ 799.597839][T27631] ? __fget_files+0x184/0x1c0 [ 799.597858][T27631] ksys_read+0xda/0x1a0 [ 799.597884][T27631] __x64_sys_read+0x40/0x50 [ 799.597913][T27631] x64_sys_call+0x2d77/0x2fb0 [ 799.597952][T27631] do_syscall_64+0xd2/0x200 [ 799.598018][T27631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 799.598076][T27631] ? clear_bhb_loop+0x40/0x90 [ 799.598096][T27631] ? clear_bhb_loop+0x40/0x90 [ 799.598114][T27631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.598136][T27631] RIP: 0033:0x7fd7a75ad33c [ 799.598180][T27631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 799.598194][T27631] RSP: 002b:00007fd7a5c17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 799.598211][T27631] RAX: ffffffffffffffda RBX: 00007fd7a77d5fa0 RCX: 00007fd7a75ad33c [ 799.598225][T27631] RDX: 000000000000000f RSI: 00007fd7a5c170a0 RDI: 0000000000000004 [ 799.598238][T27631] RBP: 00007fd7a5c17090 R08: 0000000000000000 R09: 0000000000000000 [ 799.598311][T27631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.598322][T27631] R13: 0000000000000000 R14: 00007fd7a77d5fa0 R15: 00007ffd3bc9f7c8 [ 799.598366][T27631] [ 799.820289][T27632] siw: device registration error -23 [ 800.003043][T27641] loop5: detected capacity change from 0 to 1024 [ 800.009704][T27641] EXT4-fs: Ignoring removed i_version option [ 800.017325][T27641] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 800.054234][T27641] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.11595: Invalid block bitmap block 0 in block_group 0 [ 800.074366][T27641] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.11595: Failed to acquire dquot type 0 [ 800.086702][T27641] EXT4-fs error (device loop5): ext4_free_blocks:6587: comm syz.5.11595: Freeing blocks not in datazone - block = 0, count = 4096 [ 800.101049][T27641] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.11595: Invalid inode bitmap blk 0 in block_group 0 [ 800.114437][T27641] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 800.123355][T27641] EXT4-fs (loop5): 1 orphan inode deleted [ 800.130173][T27641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 800.149935][ T1977] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 800.274719][T27653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 800.281414][T27653] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 800.288999][T27653] vhci_hcd vhci_hcd.0: Device attached [ 800.440941][T27654] vhci_hcd: connection closed [ 800.441206][ T51] vhci_hcd: stop threads [ 800.450271][ T51] vhci_hcd: release socket [ 800.454744][ T51] vhci_hcd: disconnect device [ 800.471310][T27661] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.553627][T27669] siw: device registration error -23 [ 800.565917][T27661] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.628737][T27661] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.642664][T27668] lo speed is unknown, defaulting to 1000 [ 800.649252][T27668] lo speed is unknown, defaulting to 1000 [ 800.691455][T27661] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.786435][T27661] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.793132][T27661] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.798647][T27661] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.804645][T27661] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.043028][T27709] lo speed is unknown, defaulting to 1000 [ 801.046613][T27709] lo speed is unknown, defaulting to 1000 [ 801.113155][T27641] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.496971][T27747] loop3: detected capacity change from 0 to 256 [ 801.519289][T27747] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 801.602594][T27758] loop3: detected capacity change from 0 to 164 [ 801.609839][T27749] loop9: detected capacity change from 0 to 7 [ 801.616263][T27749] Buffer I/O error on dev loop9, logical block 0, async page read [ 801.624170][T27749] Buffer I/O error on dev loop9, logical block 0, async page read [ 801.632157][T27749] loop9: unable to read partition table [ 801.637877][T27749] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 801.637877][T27749] ) failed (rc=-5) [ 801.851272][T27758] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 802.008581][T27773] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 802.015188][T27773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 802.022771][T27773] vhci_hcd vhci_hcd.0: Device attached [ 802.041210][T27777] loop5: detected capacity change from 0 to 2048 [ 802.051325][T27774] vhci_hcd: connection closed [ 802.051542][ T59] vhci_hcd: stop threads [ 802.060553][ T59] vhci_hcd: release socket [ 802.065089][ T59] vhci_hcd: disconnect device [ 802.075719][T27777] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.098524][T27777] lo speed is unknown, defaulting to 1000 [ 802.104629][T27777] lo speed is unknown, defaulting to 1000 [ 802.233151][T27804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27804 comm=syz.5.11620 [ 802.421200][T27810] lo speed is unknown, defaulting to 1000 [ 802.421788][T27810] lo speed is unknown, defaulting to 1000 [ 802.569611][ T29] kauditd_printk_skb: 477 callbacks suppressed [ 802.569625][ T29] audit: type=1326 audit(1751816552.505:103416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569665][ T29] audit: type=1326 audit(1751816552.505:103417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569689][ T29] audit: type=1326 audit(1751816552.505:103418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569763][ T29] audit: type=1326 audit(1751816552.505:103419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569800][ T29] audit: type=1326 audit(1751816552.505:103420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569845][ T29] audit: type=1326 audit(1751816552.505:103421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569869][ T29] audit: type=1326 audit(1751816552.505:103422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.569946][ T29] audit: type=1326 audit(1751816552.505:103423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.576340][ T29] audit: type=1326 audit(1751816552.505:103424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.576369][ T29] audit: type=1326 audit(1751816552.505:103425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27833 comm="syz.2.11623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c7f62e929 code=0x7ffc0000 [ 802.903437][T27841] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11625'. [ 802.912692][T27841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11625'. [ 802.937028][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.140102][T27858] bridge_slave_0: left allmulticast mode [ 803.140120][T27858] bridge_slave_0: left promiscuous mode [ 803.140402][T27858] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.156960][T27858] bridge_slave_1: left allmulticast mode [ 803.156979][T27858] bridge_slave_1: left promiscuous mode [ 803.157121][T27858] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.164426][T27858] bond0: (slave bond_slave_0): Releasing backup interface [ 803.167156][T27858] bond0: (slave bond_slave_1): Releasing backup interface [ 803.172002][T27858] team0: Port device team_slave_0 removed [ 803.186021][T27858] team0: Port device team_slave_1 removed [ 803.223461][T27862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11629'. [ 803.243072][T27858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 803.250632][T27858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.260677][T27858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 803.268264][T27858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.294651][T27849] loop5: detected capacity change from 0 to 8192 [ 803.344159][ T10] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 803.352121][ T10] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 803.359637][ T10] hid-generic 0003:0004:0000.000C: unknown main item tag 0x0 [ 803.375692][ T10] hid-generic 0003:0004:0000.000C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 803.476670][T27879] loop5: detected capacity change from 0 to 1024 [ 803.525670][T27879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.554381][T27897] lo speed is unknown, defaulting to 1000 [ 803.560504][T27897] lo speed is unknown, defaulting to 1000 [ 803.685140][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.714722][T27924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27924 comm=syz.6.11637 [ 803.969163][T27944] loop3: detected capacity change from 0 to 2048 [ 803.985685][T27944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.106703][T27956] lo speed is unknown, defaulting to 1000 [ 804.117872][T27956] lo speed is unknown, defaulting to 1000 [ 804.422001][T27981] netlink: 72 bytes leftover after parsing attributes in process `syz.5.11643'. [ 804.430824][T27981] loop5: detected capacity change from 0 to 2048 [ 804.498604][T27981] loop5: detected capacity change from 0 to 8192 [ 804.499555][T27981] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.562320][T27995] FAULT_INJECTION: forcing a failure. [ 804.562320][T27995] name failslab, interval 1, probability 0, space 0, times 0 [ 804.562403][T27995] CPU: 0 UID: 0 PID: 27995 Comm: syz.5.11646 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 804.562494][T27995] Tainted: [W]=WARN [ 804.562500][T27995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 804.562510][T27995] Call Trace: [ 804.562516][T27995] [ 804.562522][T27995] __dump_stack+0x1d/0x30 [ 804.562543][T27995] dump_stack_lvl+0xe8/0x140 [ 804.562560][T27995] dump_stack+0x15/0x1b [ 804.562574][T27995] should_fail_ex+0x265/0x280 [ 804.562664][T27995] ? __se_sys_memfd_create+0x1cc/0x590 [ 804.562693][T27995] should_failslab+0x8c/0xb0 [ 804.562724][T27995] __kmalloc_cache_noprof+0x4c/0x320 [ 804.562752][T27995] ? fput+0x8f/0xc0 [ 804.562779][T27995] __se_sys_memfd_create+0x1cc/0x590 [ 804.562884][T27995] __x64_sys_memfd_create+0x31/0x40 [ 804.562915][T27995] x64_sys_call+0x122f/0x2fb0 [ 804.562936][T27995] do_syscall_64+0xd2/0x200 [ 804.562952][T27995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 804.563025][T27995] ? clear_bhb_loop+0x40/0x90 [ 804.563100][T27995] ? clear_bhb_loop+0x40/0x90 [ 804.563118][T27995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.563183][T27995] RIP: 0033:0x7fd7a75ae929 [ 804.563195][T27995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.563210][T27995] RSP: 002b:00007fd7a5c16d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 804.563226][T27995] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fd7a75ae929 [ 804.563274][T27995] RDX: 00007fd7a5c16dec RSI: 0000000000000000 RDI: 00007fd7a76314cc [ 804.563285][T27995] RBP: 0000200000000000 R08: 00007fd7a5c16b07 R09: 0000000000000000 [ 804.563296][T27995] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 804.563306][T27995] R13: 00007fd7a5c16dec R14: 00007fd7a5c16df0 R15: 00007ffd3bc9f7c8 [ 804.563322][T27995] [ 804.672073][T28001] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 804.672098][T28001] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 804.672131][T28001] vhci_hcd vhci_hcd.0: Device attached [ 804.688720][T28001] loop5: detected capacity change from 0 to 164 [ 804.924309][ T8230] usb 11-1: new low-speed USB device number 7 using vhci_hcd [ 805.011558][T28002] vhci_hcd: connection reset by peer [ 805.020620][ T59] vhci_hcd: stop threads [ 805.024913][ T59] vhci_hcd: release socket [ 805.029410][ T59] vhci_hcd: disconnect device [ 805.060585][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.187999][T28036] FAULT_INJECTION: forcing a failure. [ 805.187999][T28036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.201103][T28036] CPU: 1 UID: 0 PID: 28036 Comm: syz.6.11662 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 805.201146][T28036] Tainted: [W]=WARN [ 805.201153][T28036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 805.201165][T28036] Call Trace: [ 805.201172][T28036] [ 805.201181][T28036] __dump_stack+0x1d/0x30 [ 805.201263][T28036] dump_stack_lvl+0xe8/0x140 [ 805.201275][T28036] dump_stack+0x15/0x1b [ 805.201284][T28036] should_fail_ex+0x265/0x280 [ 805.201373][T28036] should_fail+0xb/0x20 [ 805.201388][T28036] should_fail_usercopy+0x1a/0x20 [ 805.201482][T28036] _copy_from_user+0x1c/0xb0 [ 805.201513][T28036] ___sys_sendmsg+0xc1/0x1d0 [ 805.201598][T28036] __x64_sys_sendmsg+0xd4/0x160 [ 805.201611][T28036] x64_sys_call+0x2999/0x2fb0 [ 805.201689][T28036] do_syscall_64+0xd2/0x200 [ 805.201700][T28036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 805.201784][T28036] ? clear_bhb_loop+0x40/0x90 [ 805.201797][T28036] ? clear_bhb_loop+0x40/0x90 [ 805.201809][T28036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.201821][T28036] RIP: 0033:0x7f004d68e929 [ 805.201858][T28036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.201868][T28036] RSP: 002b:00007f004bcf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.201880][T28036] RAX: ffffffffffffffda RBX: 00007f004d8b5fa0 RCX: 00007f004d68e929 [ 805.201893][T28036] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 805.201900][T28036] RBP: 00007f004bcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 805.201907][T28036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.201914][T28036] R13: 0000000000000000 R14: 00007f004d8b5fa0 R15: 00007ffebb520208 [ 805.201925][T28036] [ 805.618992][T28050] loop9: detected capacity change from 0 to 7 [ 805.625378][T28050] Buffer I/O error on dev loop9, logical block 0, async page read [ 805.633228][T28050] Buffer I/O error on dev loop9, logical block 0, async page read [ 805.641060][T28050] loop9: unable to read partition table [ 805.647162][T28050] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 805.647162][T28050] ) failed (rc=-5) [ 806.346120][T28067] loop5: detected capacity change from 0 to 1024 [ 806.489175][T28078] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 806.500926][T28074] loop9: detected capacity change from 0 to 7 [ 806.507187][T28074] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.515047][T28074] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.522918][T28074] loop9: unable to read partition table [ 806.528589][T28074] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 806.528589][T28074] ) failed (rc=-5) [ 806.550427][T28080] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.562250][T28067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.593107][T28063] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.11671: Allocating blocks 449-513 which overlap fs metadata [ 806.628335][T28063] EXT4-fs (loop5): pa ffff88810077ee70: logic 48, phys. 177, len 21 [ 806.636449][T28063] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 806.659919][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.292044][T28098] netlink: 'syz.3.11678': attribute type 4 has an invalid length. [ 807.408886][T28108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11680'. [ 807.463219][T28113] loop3: detected capacity change from 0 to 164 [ 807.481041][T28119] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11677'. [ 807.490344][T28119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11677'. [ 807.505527][T28080] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.523979][T28113] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 807.564488][T28080] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.586177][T28138] loop3: detected capacity change from 0 to 1024 [ 807.596530][T28138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.612144][T28146] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 807.618699][T28146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 807.626227][T28146] vhci_hcd vhci_hcd.0: Device attached [ 807.658564][T28147] vhci_hcd: connection closed [ 807.658735][ T59] vhci_hcd: stop threads [ 807.667958][ T59] vhci_hcd: release socket [ 807.672495][ T59] vhci_hcd: disconnect device [ 807.678553][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.700381][T28157] loop3: detected capacity change from 0 to 256 [ 807.707738][T28080] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.726054][T28157] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 807.748298][T28163] loop5: detected capacity change from 0 to 256 [ 807.765410][T28163] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 807.795784][T28080] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.819257][T28080] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.835314][T28080] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.847217][T28179] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 807.853806][T28179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 807.861401][T28179] vhci_hcd vhci_hcd.0: Device attached [ 807.896120][T28080] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.934727][T28179] loop3: detected capacity change from 0 to 164 [ 807.993025][T28182] vhci_hcd: connection closed [ 808.014583][ T59] vhci_hcd: stop threads [ 808.023542][ T59] vhci_hcd: release socket [ 808.028084][ T59] vhci_hcd: disconnect device [ 808.204410][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 808.204427][ T29] audit: type=1400 audit(1751816558.078:103692): avc: denied { mount } for pid=28192 comm="syz.4.11699" name="/" dev="rpc_pipefs" ino=128918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 808.421139][ T29] audit: type=1326 audit(1751816558.208:103693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.445033][ T29] audit: type=1326 audit(1751816558.208:103694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.468875][ T29] audit: type=1326 audit(1751816558.208:103695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.492745][ T29] audit: type=1326 audit(1751816558.208:103696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.516603][ T29] audit: type=1326 audit(1751816558.208:103697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.540431][ T29] audit: type=1326 audit(1751816558.208:103698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.564130][ T29] audit: type=1326 audit(1751816558.208:103699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.587923][ T29] audit: type=1326 audit(1751816558.208:103700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.611800][ T29] audit: type=1326 audit(1751816558.208:103701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28194 comm="syz.4.11700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 808.820800][T28202] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 809.266329][T28228] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 809.279609][T28233] Cannot find del_set index 4 as target [ 809.299376][T28228] SELinux: failed to load policy [ 809.331340][T28231] netlink: 'syz.4.11709': attribute type 3 has an invalid length. [ 809.787000][T28242] loop3: detected capacity change from 0 to 1024 [ 809.806224][T28242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.840496][T28242] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.11713: Allocating blocks 449-513 which overlap fs metadata [ 809.876607][T28242] EXT4-fs (loop3): pa ffff888106b889a0: logic 48, phys. 177, len 21 [ 809.884688][T28242] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 809.924966][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.974352][ T8230] usb 11-1: enqueue for inactive port 0 [ 809.980055][ T8230] usb 11-1: enqueue for inactive port 0 [ 810.054362][ T8230] vhci_hcd: vhci_device speed not set [ 810.140777][T28262] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 810.142571][T28266] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11718'. [ 810.147331][T28262] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.147494][T28262] vhci_hcd vhci_hcd.0: Device attached [ 810.156497][T28266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11718'. [ 810.197819][T28262] loop3: detected capacity change from 0 to 164 [ 810.212736][T28262] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 810.222100][T28264] vhci_hcd: connection closed [ 810.222243][ T59] vhci_hcd: stop threads [ 810.231260][ T59] vhci_hcd: release socket [ 810.235744][ T59] vhci_hcd: disconnect device [ 810.890475][T28315] loop5: detected capacity change from 0 to 1024 [ 810.906874][T28315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.925873][T28324] loop3: detected capacity change from 0 to 256 [ 810.943009][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.953091][T28324] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 810.962384][T28328] netlink: 'syz.4.11741': attribute type 7 has an invalid length. [ 810.981474][T28328] FAULT_INJECTION: forcing a failure. [ 810.981474][T28328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.994659][T28328] CPU: 0 UID: 0 PID: 28328 Comm: syz.4.11741 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 810.994799][T28328] Tainted: [W]=WARN [ 810.994807][T28328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.994818][T28328] Call Trace: [ 810.994824][T28328] [ 810.994830][T28328] __dump_stack+0x1d/0x30 [ 810.994851][T28328] dump_stack_lvl+0xe8/0x140 [ 810.994869][T28328] dump_stack+0x15/0x1b [ 810.994883][T28328] should_fail_ex+0x265/0x280 [ 810.994945][T28328] should_fail+0xb/0x20 [ 810.994968][T28328] should_fail_usercopy+0x1a/0x20 [ 810.994997][T28328] _copy_from_user+0x1c/0xb0 [ 810.995094][T28328] __copy_msghdr+0x244/0x300 [ 810.995124][T28328] ___sys_sendmsg+0x109/0x1d0 [ 810.995165][T28328] __x64_sys_sendmsg+0xd4/0x160 [ 810.995258][T28328] x64_sys_call+0x2999/0x2fb0 [ 810.995276][T28328] do_syscall_64+0xd2/0x200 [ 810.995292][T28328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 810.995377][T28328] ? clear_bhb_loop+0x40/0x90 [ 810.995397][T28328] ? clear_bhb_loop+0x40/0x90 [ 810.995484][T28328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.995564][T28328] RIP: 0033:0x7fce8105e929 [ 810.995657][T28328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.995725][T28328] RSP: 002b:00007fce7f6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.995752][T28328] RAX: ffffffffffffffda RBX: 00007fce81285fa0 RCX: 00007fce8105e929 [ 810.995765][T28328] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 000000000000000d [ 810.995778][T28328] RBP: 00007fce7f6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 810.995790][T28328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.995800][T28328] R13: 0000000000000000 R14: 00007fce81285fa0 R15: 00007fff83885ed8 [ 810.995816][T28328] [ 811.253655][T28343] lo speed is unknown, defaulting to 1000 [ 811.260193][T28343] lo speed is unknown, defaulting to 1000 [ 811.287790][T28340] lo speed is unknown, defaulting to 1000 [ 811.297424][T28340] lo speed is unknown, defaulting to 1000 [ 811.360980][T28389] loop5: detected capacity change from 0 to 164 [ 811.379902][T28392] loop9: detected capacity change from 0 to 7 [ 811.386162][T28392] Buffer I/O error on dev loop9, logical block 0, async page read [ 811.394166][T28392] Buffer I/O error on dev loop9, logical block 0, async page read [ 811.402048][T28392] loop9: unable to read partition table [ 811.407727][T28392] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 811.407727][T28392] ) failed (rc=-5) [ 811.901026][ T10] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 811.908608][ T10] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 811.916125][ T10] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0 [ 811.940567][ T10] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 812.052108][T28440] loop5: detected capacity change from 0 to 1024 [ 812.312802][T28458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.337129][T28459] netlink: 108 bytes leftover after parsing attributes in process `syz.6.11764'. [ 812.346404][T28459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11764'. [ 812.398045][T28440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.443791][T28458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.463015][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.523352][T28458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.628053][T28458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.694253][T28458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.708532][T28458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.743946][T28458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.762040][T28497] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11771'. [ 812.771274][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11771'. [ 812.784089][T28458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.867049][T28508] FAULT_INJECTION: forcing a failure. [ 812.867049][T28508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.880192][T28508] CPU: 0 UID: 0 PID: 28508 Comm: syz.6.11772 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 812.880233][T28508] Tainted: [W]=WARN [ 812.880240][T28508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 812.880253][T28508] Call Trace: [ 812.880260][T28508] [ 812.880268][T28508] __dump_stack+0x1d/0x30 [ 812.880290][T28508] dump_stack_lvl+0xe8/0x140 [ 812.880324][T28508] dump_stack+0x15/0x1b [ 812.880342][T28508] should_fail_ex+0x265/0x280 [ 812.880373][T28508] should_fail+0xb/0x20 [ 812.880424][T28508] should_fail_usercopy+0x1a/0x20 [ 812.880453][T28508] strncpy_from_user+0x25/0x230 [ 812.880486][T28508] ? kmem_cache_alloc_noprof+0x186/0x310 [ 812.880507][T28508] ? getname_flags+0x80/0x3b0 [ 812.880531][T28508] getname_flags+0xae/0x3b0 [ 812.880587][T28508] path_listxattrat+0x7e/0x2a0 [ 812.880613][T28508] __x64_sys_listxattr+0x4a/0x60 [ 812.880645][T28508] x64_sys_call+0xfff/0x2fb0 [ 812.880667][T28508] do_syscall_64+0xd2/0x200 [ 812.880686][T28508] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 812.880707][T28508] ? clear_bhb_loop+0x40/0x90 [ 812.880811][T28508] ? clear_bhb_loop+0x40/0x90 [ 812.880830][T28508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.880848][T28508] RIP: 0033:0x7f004d68e929 [ 812.880862][T28508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.880879][T28508] RSP: 002b:00007f004bcf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 812.880899][T28508] RAX: ffffffffffffffda RBX: 00007f004d8b5fa0 RCX: 00007f004d68e929 [ 812.880918][T28508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 812.880928][T28508] RBP: 00007f004bcf7090 R08: 0000000000000000 R09: 0000000000000000 [ 812.880939][T28508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.880949][T28508] R13: 0000000000000000 R14: 00007f004d8b5fa0 R15: 00007ffebb520208 [ 812.880965][T28508] [ 813.369642][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 813.369654][ T29] audit: type=1326 audit(1751816563.306:104082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 813.501248][ T29] audit: type=1326 audit(1751816563.336:104083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 813.658402][T28520] loop3: detected capacity change from 0 to 8192 [ 813.703838][ T29] audit: type=1326 audit(1751816563.636:104084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 813.734146][T28530] FAULT_INJECTION: forcing a failure. [ 813.734146][T28530] name failslab, interval 1, probability 0, space 0, times 0 [ 813.746976][T28530] CPU: 1 UID: 0 PID: 28530 Comm: syz.5.11781 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 813.747056][T28530] Tainted: [W]=WARN [ 813.747062][T28530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 813.747074][T28530] Call Trace: [ 813.747080][T28530] [ 813.747088][T28530] __dump_stack+0x1d/0x30 [ 813.747110][T28530] dump_stack_lvl+0xe8/0x140 [ 813.747129][T28530] dump_stack+0x15/0x1b [ 813.747160][T28530] should_fail_ex+0x265/0x280 [ 813.747185][T28530] should_failslab+0x8c/0xb0 [ 813.747207][T28530] __kmalloc_noprof+0xa5/0x3e0 [ 813.747228][T28530] ? ip_options_get+0x52/0x350 [ 813.747375][T28530] ip_options_get+0x52/0x350 [ 813.747392][T28530] ? tcp_release_cb+0xf1/0x370 [ 813.747421][T28530] do_ip_setsockopt+0x19d4/0x2240 [ 813.747475][T28530] ip_setsockopt+0x58/0x110 [ 813.747498][T28530] tcp_setsockopt+0x95/0xb0 [ 813.747528][T28530] sock_common_setsockopt+0x66/0x80 [ 813.747563][T28530] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 813.747590][T28530] __sys_setsockopt+0x181/0x200 [ 813.747620][T28530] __x64_sys_setsockopt+0x64/0x80 [ 813.747724][T28530] x64_sys_call+0x2bd5/0x2fb0 [ 813.747743][T28530] do_syscall_64+0xd2/0x200 [ 813.747759][T28530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 813.747818][T28530] ? clear_bhb_loop+0x40/0x90 [ 813.747837][T28530] ? clear_bhb_loop+0x40/0x90 [ 813.747889][T28530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.747912][T28530] RIP: 0033:0x7fd7a75ae929 [ 813.747926][T28530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.747943][T28530] RSP: 002b:00007fd7a5c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 813.748053][T28530] RAX: ffffffffffffffda RBX: 00007fd7a77d5fa0 RCX: 00007fd7a75ae929 [ 813.748063][T28530] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 813.748074][T28530] RBP: 00007fd7a5c17090 R08: 0000000000000000 R09: 0000000000000000 [ 813.748084][T28530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.748094][T28530] R13: 0000000000000000 R14: 00007fd7a77d5fa0 R15: 00007ffd3bc9f7c8 [ 813.748113][T28530] [ 813.754638][ T29] audit: type=1326 audit(1751816563.656:104085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 813.987999][ T29] audit: type=1326 audit(1751816563.656:104086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28509 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852119e929 code=0x7ffc0000 [ 814.072957][ T29] audit: type=1326 audit(1751816564.006:104087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28532 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 814.098297][ T29] audit: type=1326 audit(1751816564.026:104088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28532 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 814.122086][ T29] audit: type=1326 audit(1751816564.026:104089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28532 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 814.145855][ T29] audit: type=1326 audit(1751816564.026:104090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28532 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 814.169796][ T29] audit: type=1326 audit(1751816564.026:104091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28532 comm="syz.5.11783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 814.203832][T28542] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 814.210382][T28542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 814.218118][T28542] vhci_hcd vhci_hcd.0: Device attached [ 814.229833][T28548] vhci_hcd: connection closed [ 814.229933][ T406] vhci_hcd: stop threads [ 814.238923][ T406] vhci_hcd: release socket [ 814.243349][ T406] vhci_hcd: disconnect device [ 814.261174][T28553] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 814.267789][T28553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 814.275402][T28553] vhci_hcd vhci_hcd.0: Device attached [ 814.285128][T28553] loop3: detected capacity change from 0 to 164 [ 814.296239][T28553] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 814.306831][T28554] vhci_hcd: connection closed [ 814.315578][T27705] vhci_hcd: stop threads [ 814.324630][T27705] vhci_hcd: release socket [ 814.329047][T27705] vhci_hcd: disconnect device [ 815.001598][T28587] lo speed is unknown, defaulting to 1000 [ 815.012316][T28598] loop3: detected capacity change from 0 to 256 [ 815.015897][T28587] lo speed is unknown, defaulting to 1000 [ 815.025787][T28598] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 815.069591][T28625] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 815.176987][T28632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28632 comm=syz.2.11797 [ 815.476179][T28649] loop9: detected capacity change from 0 to 7 [ 815.476495][T28649] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.476566][T28649] Buffer I/O error on dev loop9, logical block 0, async page read [ 815.476581][T28649] loop9: unable to read partition table [ 815.476616][T28649] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 815.476616][T28649] ) failed (rc=-5) [ 816.139051][T28676] loop9: detected capacity change from 0 to 7 [ 816.145403][T28676] Buffer I/O error on dev loop9, logical block 0, async page read [ 816.153249][T28676] Buffer I/O error on dev loop9, logical block 0, async page read [ 816.161133][T28676] loop9: unable to read partition table [ 816.166831][T28676] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 816.166831][T28676] ) failed (rc=-5) [ 816.261362][T28681] loop3: detected capacity change from 0 to 2048 [ 816.325249][T28681] loop3: p4 < > [ 816.955570][T28703] lo speed is unknown, defaulting to 1000 [ 816.961644][T28703] lo speed is unknown, defaulting to 1000 [ 817.565479][T28735] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 817.598275][T28736] loop3: detected capacity change from 0 to 1024 [ 817.604899][T28736] EXT4-fs: Ignoring removed i_version option [ 817.611697][T28736] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 817.625677][T28736] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.11828: Invalid block bitmap block 0 in block_group 0 [ 817.639910][T28736] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.11828: Failed to acquire dquot type 0 [ 817.651960][T28736] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.11828: Freeing blocks not in datazone - block = 0, count = 4096 [ 817.666302][T28736] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.11828: Invalid inode bitmap blk 0 in block_group 0 [ 817.679215][T28736] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 817.687885][T28736] EXT4-fs (loop3): 1 orphan inode deleted [ 817.693947][T28736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.710356][T27705] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 817.730958][T28736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.853677][T28758] siw: device registration error -23 [ 817.896795][T28757] loop5: detected capacity change from 0 to 256 [ 817.906040][T28757] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 817.989022][T28766] loop5: detected capacity change from 0 to 1024 [ 818.005270][T28770] loop9: detected capacity change from 0 to 7 [ 818.011645][T28770] Buffer I/O error on dev loop9, logical block 0, async page read [ 818.019605][T28770] Buffer I/O error on dev loop9, logical block 0, async page read [ 818.027442][T28770] loop9: unable to read partition table [ 818.033111][T28770] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 818.033111][T28770] ) failed (rc=-5) [ 818.097684][T28766] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.158788][T28766] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.11838: Allocating blocks 449-513 which overlap fs metadata [ 818.238757][T28766] EXT4-fs (loop5): pa ffff88810077ee70: logic 48, phys. 177, len 21 [ 818.246971][T28766] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 818.344057][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.544562][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 818.544578][ T29] audit: type=1326 audit(1751816568.455:104235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7a75ae929 code=0x0 [ 818.574156][T28776] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 818.580677][T28776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 818.587581][ T29] audit: type=1326 audit(1751816568.515:104236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.588284][T28776] vhci_hcd vhci_hcd.0: Device attached [ 818.617916][ T29] audit: type=1326 audit(1751816568.555:104237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.648416][ T29] audit: type=1326 audit(1751816568.555:104238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.672335][ T29] audit: type=1326 audit(1751816568.555:104239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.696157][ T29] audit: type=1326 audit(1751816568.555:104240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.719833][ T29] audit: type=1326 audit(1751816568.555:104241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.743587][ T29] audit: type=1326 audit(1751816568.555:104242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.767248][ T29] audit: type=1326 audit(1751816568.555:104243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.790979][ T29] audit: type=1326 audit(1751816568.555:104244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28786 comm="syz.5.11842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 818.823767][T28782] vhci_hcd: connection closed [ 818.827147][ T1977] vhci_hcd: stop threads [ 818.836285][ T1977] vhci_hcd: release socket [ 818.840758][ T1977] vhci_hcd: disconnect device [ 819.211868][T28826] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.291006][T28826] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.368573][T28826] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.497367][T28826] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.538525][T28840] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 819.545140][T28840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.552844][T28840] vhci_hcd vhci_hcd.0: Device attached [ 819.570497][T28840] loop5: detected capacity change from 0 to 164 [ 819.580607][T28840] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 819.589891][T28843] vhci_hcd: connection closed [ 819.590030][ T1872] vhci_hcd: stop threads [ 819.599044][ T1872] vhci_hcd: release socket [ 819.603537][ T1872] vhci_hcd: disconnect device [ 819.627823][T28851] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11857'. [ 819.663253][T28826] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.681202][T28826] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.693380][T28826] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.712155][T28826] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.756546][T28867] loop9: detected capacity change from 0 to 7 [ 819.763067][T28867] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.771047][T28867] Buffer I/O error on dev loop9, logical block 0, async page read [ 819.778901][T28867] loop9: unable to read partition table [ 819.784774][T28867] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 819.784774][T28867] ) failed (rc=-5) [ 820.012864][T28873] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 820.019407][T28873] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 820.026987][T28873] vhci_hcd vhci_hcd.0: Device attached [ 820.073921][T28875] vhci_hcd: connection closed [ 820.074127][ T406] vhci_hcd: stop threads [ 820.083218][ T406] vhci_hcd: release socket [ 820.083641][T28878] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 820.087698][ T406] vhci_hcd: disconnect device [ 820.129908][T28880] lo speed is unknown, defaulting to 1000 [ 820.139288][T28880] lo speed is unknown, defaulting to 1000 [ 820.437938][ T3535] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 820.437968][ T3535] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 820.437989][ T3535] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 820.438511][ T3535] hid-generic 0003:0004:0000.000E: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 820.525211][T28932] bond1: entered promiscuous mode [ 820.525282][T28932] bond1: entered allmulticast mode [ 820.525496][T28932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 820.533806][T28932] bond1 (unregistering): Released all slaves [ 820.622412][T28968] loop3: detected capacity change from 0 to 512 [ 820.640192][T28968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 820.673731][T29011] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.690551][T28968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.690620][T28968] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 820.719521][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.746285][T29011] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.776465][T29011] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.886057][T29011] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.918632][T29037] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 820.933509][T29011] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.939933][T29011] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.967801][T29011] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.980056][T29011] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 821.029524][T29048] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 821.036069][T29048] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 821.043709][T29048] vhci_hcd vhci_hcd.0: Device attached [ 821.146535][T29048] loop5: detected capacity change from 0 to 164 [ 821.168457][T29048] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 821.177304][T29050] vhci_hcd: connection closed [ 821.177761][ T406] vhci_hcd: stop threads [ 821.186757][ T406] vhci_hcd: release socket [ 821.191200][ T406] vhci_hcd: disconnect device [ 821.582521][ T10] vhci_hcd: vhci_device speed not set [ 821.825481][T29098] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11892'. [ 821.834761][T29098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11892'. [ 822.012269][T29127] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 822.018832][T29127] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.026557][T29127] vhci_hcd vhci_hcd.0: Device attached [ 822.037002][T29128] vhci_hcd: connection closed [ 822.037576][ T41] vhci_hcd: stop threads [ 822.046676][ T41] vhci_hcd: release socket [ 822.051136][ T41] vhci_hcd: disconnect device [ 822.063223][T29132] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20000 [ 822.180661][T29156] netlink: 108 bytes leftover after parsing attributes in process `syz.4.11908'. [ 822.189910][T29156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11908'. [ 822.502030][T29171] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11912'. [ 822.512742][T29170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11912'. [ 822.597128][T29175] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.668631][T29175] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.759241][T29175] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.827952][T29187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 822.834498][T29187] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.842076][T29187] vhci_hcd vhci_hcd.0: Device attached [ 822.849809][T29175] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.857021][T29189] vhci_hcd: connection closed [ 822.860856][ T41] vhci_hcd: stop threads [ 822.869936][ T41] vhci_hcd: release socket [ 822.874337][ T41] vhci_hcd: disconnect device [ 822.921515][T29198] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.938201][T29175] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.949621][T29175] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.962189][T29175] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.974724][T29175] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.009427][T29213] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11920'. [ 823.018635][T29213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11920'. [ 823.028824][T29198] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.076006][T29198] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.165953][T29198] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.377938][T29244] lo speed is unknown, defaulting to 1000 [ 823.384160][T29244] lo speed is unknown, defaulting to 1000 [ 823.422430][T29280] FAULT_INJECTION: forcing a failure. [ 823.422430][T29280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.435693][T29280] CPU: 0 UID: 0 PID: 29280 Comm: syz.3.11931 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 823.435804][T29280] Tainted: [W]=WARN [ 823.435810][T29280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.435822][T29280] Call Trace: [ 823.435828][T29280] [ 823.435836][T29280] __dump_stack+0x1d/0x30 [ 823.435858][T29280] dump_stack_lvl+0xe8/0x140 [ 823.435879][T29280] dump_stack+0x15/0x1b [ 823.435896][T29280] should_fail_ex+0x265/0x280 [ 823.435962][T29280] should_fail+0xb/0x20 [ 823.435984][T29280] should_fail_usercopy+0x1a/0x20 [ 823.436084][T29280] _copy_from_user+0x1c/0xb0 [ 823.436104][T29280] ___sys_sendmsg+0xc1/0x1d0 [ 823.436142][T29280] __x64_sys_sendmsg+0xd4/0x160 [ 823.436166][T29280] x64_sys_call+0x2999/0x2fb0 [ 823.436188][T29280] do_syscall_64+0xd2/0x200 [ 823.436207][T29280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 823.436232][T29280] ? clear_bhb_loop+0x40/0x90 [ 823.436326][T29280] ? clear_bhb_loop+0x40/0x90 [ 823.436344][T29280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.436362][T29280] RIP: 0033:0x7f852119e929 [ 823.436377][T29280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.436458][T29280] RSP: 002b:00007f851f807038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.436476][T29280] RAX: ffffffffffffffda RBX: 00007f85213c5fa0 RCX: 00007f852119e929 [ 823.436493][T29280] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 823.436503][T29280] RBP: 00007f851f807090 R08: 0000000000000000 R09: 0000000000000000 [ 823.436516][T29280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.436529][T29280] R13: 0000000000000000 R14: 00007f85213c5fa0 R15: 00007fffb8132e08 [ 823.436544][T29280] [ 823.702090][T29356] lo speed is unknown, defaulting to 1000 [ 823.708622][T29356] lo speed is unknown, defaulting to 1000 [ 823.728182][T29244] chnl_net:caif_netlink_parms(): no params data found [ 823.827122][T29403] loop3: detected capacity change from 0 to 164 [ 823.992198][T29244] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.999341][T29244] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.006620][T29244] bridge_slave_0: entered allmulticast mode [ 824.013191][T29244] bridge_slave_0: entered promiscuous mode [ 824.013606][T29439] loop5: detected capacity change from 0 to 1024 [ 824.019988][T29244] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.032476][T29244] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.040144][T29244] bridge_slave_1: entered allmulticast mode [ 824.045931][T29439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.047109][T29244] bridge_slave_1: entered promiscuous mode [ 824.072428][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 824.072444][ T29] audit: type=1326 audit(1751816574.001:104776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.102649][ T29] audit: type=1326 audit(1751816574.001:104777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.126386][ T29] audit: type=1326 audit(1751816574.001:104778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.150168][ T29] audit: type=1326 audit(1751816574.001:104779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.174543][ T29] audit: type=1326 audit(1751816574.001:104780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.198464][ T29] audit: type=1326 audit(1751816574.021:104781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.5.11933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a75ae929 code=0x7ffc0000 [ 824.224334][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.234975][T29244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.246694][T29244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.275986][T29244] team0: Port device team_slave_0 added [ 824.282757][T29244] team0: Port device team_slave_1 added [ 824.290508][ T29] audit: type=1326 audit(1751816574.231:104782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.4.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 824.317428][ T29] audit: type=1326 audit(1751816574.231:104783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.4.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 824.341347][ T29] audit: type=1326 audit(1751816574.231:104784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.4.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 824.365242][ T29] audit: type=1326 audit(1751816574.231:104785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29478 comm="syz.4.11935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce8105e929 code=0x7ffc0000 [ 824.407591][T29244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.414641][T29244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.440625][T29244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.475719][T29244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.482823][T29244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 824.508966][T29244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 824.628493][T29244] hsr_slave_0: entered promiscuous mode [ 824.636646][T29244] hsr_slave_1: entered promiscuous mode [ 824.642488][T29244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.652790][T29244] Cannot create hsr debugfs directory [ 824.739878][T29609] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 824.746415][T29609] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 824.753967][T29609] vhci_hcd vhci_hcd.0: Device attached [ 824.772471][T29614] vhci_hcd: connection closed [ 824.772878][ T406] vhci_hcd: stop threads [ 824.782021][ T406] vhci_hcd: release socket [ 824.786494][ T406] vhci_hcd: disconnect device [ 824.799367][T29244] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.830654][T29198] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.844519][T29198] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.855772][T29198] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.869389][T29198] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.925445][T29244] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.047838][T29667] loop9: detected capacity change from 0 to 7 [ 825.048073][T29667] Buffer I/O error on dev loop9, logical block 0, async page read [ 825.048098][T29667] Buffer I/O error on dev loop9, logical block 0, async page read [ 825.048113][T29667] loop9: unable to read partition table [ 825.048209][T29667] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 825.048209][T29667] ) failed (rc=-5) [ 825.116880][T29670] pim6reg: entered allmulticast mode [ 825.133312][T29670] pim6reg: left allmulticast mode [ 825.347673][T29244] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.392670][T29684] lo speed is unknown, defaulting to 1000 [ 825.393046][T29684] lo speed is unknown, defaulting to 1000 [ 825.407531][T29244] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.543691][T29717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29717 comm=syz.4.11953 [ 825.545963][T29719] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 825.563440][T29719] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 825.563526][T29719] vhci_hcd vhci_hcd.0: Device attached [ 825.578681][T29720] vhci_hcd: connection closed [ 825.579067][ T1872] vhci_hcd: stop threads [ 825.579075][ T1872] vhci_hcd: release socket [ 825.579082][ T1872] vhci_hcd: disconnect device [ 825.840736][T29736] loop5: detected capacity change from 0 to 128 [ 825.851579][T29736] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 825.863991][T29736] ext4 filesystem being mounted at /452/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 825.890384][T29736] lo speed is unknown, defaulting to 1000 [ 825.890832][T29736] lo speed is unknown, defaulting to 1000 [ 825.964396][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11958'. [ 825.973497][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11958'. [ 826.144232][T29774] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 826.144389][T29774] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 826.144422][T29774] vhci_hcd vhci_hcd.0: Device attached [ 826.159948][T29775] vhci_hcd: connection closed [ 826.166364][ T1872] vhci_hcd: stop threads [ 826.166375][ T1872] vhci_hcd: release socket [ 826.166382][ T1872] vhci_hcd: disconnect device [ 826.195318][T29779] loop3: detected capacity change from 0 to 164 [ 826.206037][T29779] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 826.220123][T29782] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 826.476219][T29805] lo speed is unknown, defaulting to 1000 [ 826.482505][T29805] lo speed is unknown, defaulting to 1000 [ 826.565981][T29800] loop3: detected capacity change from 0 to 8192 [ 826.628790][T16207] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 826.645913][T29831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29831 comm=syz.4.11973 [ 826.838242][T29855] loop5: detected capacity change from 0 to 8192 [ 826.942500][T29855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11979'. [ 827.023896][T29885] loop3: detected capacity change from 0 to 1024 [ 827.044550][T29885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.057661][T29885] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.11985: Allocating blocks 449-513 which overlap fs metadata [ 827.090720][T29885] EXT4-fs (loop3): pa ffff888106b889a0: logic 48, phys. 177, len 21 [ 827.090746][T29885] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 827.097113][T29897] lo speed is unknown, defaulting to 1000 [ 827.097365][T29897] lo speed is unknown, defaulting to 1000 [ 827.130592][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.261521][T29938] siw: device registration error -23 [ 827.280893][T29940] random: crng reseeded on system resumption [ 827.473193][T29244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 827.484340][T29958] loop5: detected capacity change from 0 to 512 [ 827.487440][T29244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 827.503130][T29244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 827.513490][T29244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 827.531257][T29958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.531321][T29958] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.613361][T29974] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=29974 comm=syz.5.11996 [ 827.663375][T29976] FAULT_INJECTION: forcing a failure. [ 827.663375][T29976] name failslab, interval 1, probability 0, space 0, times 0 [ 827.663407][T29976] CPU: 0 UID: 0 PID: 29976 Comm: syz.4.11997 Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 827.663437][T29976] Tainted: [W]=WARN [ 827.663444][T29976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.663468][T29976] Call Trace: [ 827.663475][T29976] [ 827.663482][T29976] __dump_stack+0x1d/0x30 [ 827.663504][T29976] dump_stack_lvl+0xe8/0x140 [ 827.663524][T29976] dump_stack+0x15/0x1b [ 827.663542][T29976] should_fail_ex+0x265/0x280 [ 827.663576][T29976] should_failslab+0x8c/0xb0 [ 827.663600][T29976] __kmalloc_noprof+0xa5/0x3e0 [ 827.663627][T29976] ? io_cache_alloc_new+0x2a/0xb0 [ 827.663704][T29976] io_cache_alloc_new+0x2a/0xb0 [ 827.663721][T29976] io_sendmsg_prep+0x2df/0x5e0 [ 827.663748][T29976] io_submit_sqes+0x5e5/0xfd0 [ 827.663796][T29976] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 827.663824][T29976] ? 0xffffffff81000000 [ 827.663834][T29976] ? __rcu_read_unlock+0x4f/0x70 [ 827.663948][T29976] ? get_pid_task+0x96/0xd0 [ 827.664014][T29976] ? proc_fail_nth_write+0x12d/0x160 [ 827.664067][T29976] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 827.664098][T29976] ? vfs_write+0x75e/0x8e0 [ 827.664128][T29976] ? __rcu_read_unlock+0x4f/0x70 [ 827.664224][T29976] ? __fget_files+0x184/0x1c0 [ 827.664245][T29976] ? fput+0x8f/0xc0 [ 827.664269][T29976] __x64_sys_io_uring_enter+0x78/0x90 [ 827.664298][T29976] x64_sys_call+0x28c8/0x2fb0 [ 827.664319][T29976] do_syscall_64+0xd2/0x200 [ 827.664354][T29976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 827.664464][T29976] ? clear_bhb_loop+0x40/0x90 [ 827.664484][T29976] ? clear_bhb_loop+0x40/0x90 [ 827.664573][T29976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.664593][T29976] RIP: 0033:0x7fce8105e929 [ 827.664633][T29976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.664649][T29976] RSP: 002b:00007fce7f6c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 827.664668][T29976] RAX: ffffffffffffffda RBX: 00007fce81285fa0 RCX: 00007fce8105e929 [ 827.664681][T29976] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000007 [ 827.664693][T29976] RBP: 00007fce7f6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 827.664769][T29976] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 827.664781][T29976] R13: 0000000000000000 R14: 00007fce81285fa0 R15: 00007fff83885ed8 [ 827.664805][T29976] [ 827.678585][T16207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.698790][T29244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.809446][ T51] bond0 (unregistering): Released all slaves [ 827.981764][T29244] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.993468][ T1872] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.000765][ T1872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.010610][ T1872] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.017691][ T1872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.045520][T29244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 828.055958][T29244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.127295][ T51] hsr_slave_0: left promiscuous mode [ 828.133010][ T51] hsr_slave_1: left promiscuous mode [ 828.143263][ T51] veth1_macvtap: left promiscuous mode [ 828.152965][ T51] veth0_macvtap: left promiscuous mode [ 828.160064][ T51] veth1_vlan: left promiscuous mode [ 828.165439][ T51] veth0_vlan: left promiscuous mode [ 828.204242][ T51] pim6reg (unregistering): left allmulticast mode [ 828.278801][ T3411] lo speed is unknown, defaulting to 1000 [ 828.284651][ T3411] infiniband syz0: ib_query_port failed (-19) [ 828.309659][T29244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.387503][T29244] veth0_vlan: entered promiscuous mode [ 828.399453][T29244] veth1_vlan: entered promiscuous mode [ 828.424278][T29244] veth0_macvtap: entered promiscuous mode [ 828.432573][T29244] veth1_macvtap: entered promiscuous mode [ 828.445983][T29244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.458649][T29244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.472059][T29244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.480843][T29244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.489608][T29244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.498391][T29244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.512538][T30050] loop3: detected capacity change from 0 to 1024 [ 828.512902][T30050] EXT4-fs: Ignoring removed i_version option [ 828.513637][T30050] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 828.544269][T30050] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.12009: Invalid block bitmap block 0 in block_group 0 [ 828.549224][T30047] lo speed is unknown, defaulting to 1000 [ 828.558099][T30050] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12009: Failed to acquire dquot type 0 [ 828.575517][T30050] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.12009: Freeing blocks not in datazone - block = 0, count = 4096 [ 828.590981][T30050] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.12009: Invalid inode bitmap blk 0 in block_group 0 [ 828.591234][T30050] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 828.591353][T30050] EXT4-fs (loop3): 1 orphan inode deleted [ 828.591812][T30050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.594221][ T406] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 828.607887][T30050] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.086951][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 829.086967][ T29] audit: type=1326 audit(1751816579.021:105359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.117981][ T29] audit: type=1326 audit(1751816579.021:105360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.141854][ T29] audit: type=1326 audit(1751816579.021:105361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.165625][ T29] audit: type=1326 audit(1751816579.021:105362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.189548][ T29] audit: type=1326 audit(1751816579.021:105363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.213438][ T29] audit: type=1326 audit(1751816579.021:105364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.237210][ T29] audit: type=1326 audit(1751816579.021:105365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.261066][ T29] audit: type=1326 audit(1751816579.021:105366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.261092][ T29] audit: type=1326 audit(1751816579.021:105367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.261113][ T29] audit: type=1326 audit(1751816579.021:105368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30131 comm="syz.2.12031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad22be929 code=0x7ffc0000 [ 829.432202][T30150] netlink: 8640 bytes leftover after parsing attributes in process `syz.5.12037'. [ 829.586988][T30153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12035'. [ 829.598460][T30165] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 829.605051][T30165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 829.612628][T30165] vhci_hcd vhci_hcd.0: Device attached [ 829.622103][T30165] loop5: detected capacity change from 0 to 164 [ 829.631702][T30165] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 829.639652][T30169] vhci_hcd: connection closed [ 829.655058][ T51] vhci_hcd: stop threads [ 829.664049][ T51] vhci_hcd: release socket [ 829.668544][ T51] vhci_hcd: disconnect device [ 829.872133][T30180] lo speed is unknown, defaulting to 1000 [ 830.214865][T30213] netlink: 8640 bytes leftover after parsing attributes in process `syz.5.12049'. [ 830.244709][T30215] loop5: detected capacity change from 0 to 2048 [ 830.286704][T30215] loop5: p4 < > [ 830.324230][T30226] loop3: detected capacity change from 0 to 256 [ 830.340832][T30226] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 830.386658][T30238] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 830.393236][T30238] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 830.393328][T30238] vhci_hcd vhci_hcd.0: Device attached [ 830.403316][T30238] loop3: detected capacity change from 0 to 164 [ 830.417818][T30243] loop5: detected capacity change from 0 to 256 [ 830.419573][T30239] vhci_hcd: connection closed [ 830.419921][T27705] vhci_hcd: stop threads [ 830.434997][T27705] vhci_hcd: release socket [ 830.435005][T27705] vhci_hcd: disconnect device [ 830.458002][T30243] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 830.657989][T30248] siw: device registration error -23 [ 830.718674][T30250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 830.725218][T30250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 830.732780][T30250] vhci_hcd vhci_hcd.0: Device attached [ 830.743122][T30251] vhci_hcd: connection closed [ 830.743259][T27705] vhci_hcd: stop threads [ 830.752396][T27705] vhci_hcd: release socket [ 830.756895][T27705] vhci_hcd: disconnect device [ 832.065772][T30283] loop9: detected capacity change from 0 to 7 [ 832.072089][T30283] Buffer I/O error on dev loop9, logical block 0, async page read [ 832.080140][T30283] Buffer I/O error on dev loop9, logical block 0, async page read [ 832.088015][T30283] loop9: unable to read partition table [ 832.093692][T30283] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 832.093692][T30283] ) failed (rc=-5) [ 832.208194][T30300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12073'. [ 832.285854][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.295162][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.305879][T30300] hsr_slave_0: left promiscuous mode [ 832.321557][T30300] hsr_slave_1: left promiscuous mode [ 832.324694][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.327146][T30308] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 832.335974][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.342402][T30308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 832.359099][T30308] vhci_hcd vhci_hcd.0: Device attached [ 832.387652][T30310] vhci_hcd: connection closed [ 832.388054][ T51] vhci_hcd: stop threads [ 832.397118][ T51] vhci_hcd: release socket [ 832.401558][ T51] vhci_hcd: disconnect device [ 832.422075][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.431295][T30306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12074'. [ 832.533969][T30331] loop3: detected capacity change from 0 to 2048 [ 832.546092][T30333] loop5: detected capacity change from 0 to 256 [ 832.577454][T30331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.610918][T30333] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 832.708405][T30342] lo speed is unknown, defaulting to 1000 [ 833.330743][T30380] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12088'. [ 833.330771][T30380] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12088'. [ 833.607866][T30380] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12088'. [ 833.625199][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.701350][T30390] loop3: detected capacity change from 0 to 256 [ 833.726214][T30390] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 833.884894][T30408] pim6reg: entered allmulticast mode [ 833.911748][T30406] loop3: detected capacity change from 0 to 1024 [ 833.917033][T30406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 833.951015][T30406] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.12094: Allocating blocks 449-513 which overlap fs metadata [ 833.996876][T30409] netlink: 'syz.6.12096': attribute type 1 has an invalid length. [ 834.027683][T30405] EXT4-fs (loop3): pa ffff888106b889a0: logic 48, phys. 177, len 21 [ 834.027709][T30405] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 834.048564][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.188107][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 834.188122][ T29] audit: type=1400 audit(1751816584.133:105679): avc: denied { read write } for pid=30434 comm="syz.3.12101" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 834.188153][ T29] audit: type=1400 audit(1751816584.133:105680): avc: denied { open } for pid=30434 comm="syz.3.12101" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 834.193381][T27458] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 834.249464][T27458] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 834.249486][T27458] hid-generic 0003:0004:0000.000F: unknown main item tag 0x0 [ 834.250919][ T29] audit: type=1400 audit(1751816584.183:105681): avc: denied { read } for pid=30430 comm="syz.6.12099" dev="nsfs" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 834.258866][T27458] hid-generic 0003:0004:0000.000F: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 834.264702][ T29] audit: type=1400 audit(1751816584.183:105682): avc: denied { open } for pid=30430 comm="syz.6.12099" path="net:[4026532374]" dev="nsfs" ino=4026532374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 834.363121][T30439] loop3: detected capacity change from 0 to 512 [ 834.368193][T30439] EXT4-fs: Ignoring removed nomblk_io_submit option [ 834.378481][ T29] audit: type=1400 audit(1751816584.263:105683): avc: denied { create } for pid=30434 comm="syz.3.12101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 834.378514][ T29] audit: type=1326 audit(1751816584.263:105684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30430 comm="syz.6.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 834.378609][ T29] audit: type=1326 audit(1751816584.263:105685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30430 comm="syz.6.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 834.378726][ T29] audit: type=1326 audit(1751816584.263:105686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30430 comm="syz.6.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 834.378806][ T29] audit: type=1326 audit(1751816584.263:105687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30430 comm="syz.6.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 834.378876][ T29] audit: type=1326 audit(1751816584.263:105688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30430 comm="syz.6.12099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f004d68e929 code=0x7ffc0000 [ 834.484276][T30425] vlan2: entered allmulticast mode [ 834.520200][T30439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.520526][T30439] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 834.547409][T26668] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.610443][T30399] pim6reg: left allmulticast mode [ 834.778073][T26668] ================================================================== [ 834.786183][T26668] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 834.793659][T26668] [ 834.795986][T26668] read-write to 0xffff88811a2508c8 of 8 bytes by task 30442 on cpu 1: [ 834.804148][T26668] shmem_recalc_inode+0x36/0x1c0 [ 834.809107][T26668] shmem_get_folio_gfp+0x7a3/0xd60 [ 834.814233][T26668] shmem_write_begin+0xa8/0x190 [ 834.819095][T26668] generic_perform_write+0x181/0x490 [ 834.824373][T26668] shmem_file_write_iter+0xc5/0xf0 [ 834.829513][T26668] __kernel_write_iter+0x256/0x4c0 [ 834.834650][T26668] dump_user_range+0x407/0x8c0 [ 834.839425][T26668] elf_core_dump+0x1dc2/0x1f80 [ 834.844190][T26668] do_coredump+0x1dfa/0x27b0 [ 834.848789][T26668] get_signal+0xd85/0xf70 [ 834.853127][T26668] arch_do_signal_or_restart+0x96/0x480 [ 834.858673][T26668] irqentry_exit_to_user_mode+0x5e/0xa0 [ 834.864230][T26668] irqentry_exit+0x12/0x50 [ 834.868656][T26668] exc_general_protection+0x15b/0x1f0 [ 834.874024][T26668] asm_exc_general_protection+0x26/0x30 [ 834.879573][T26668] [ 834.881893][T26668] read to 0xffff88811a2508c8 of 8 bytes by task 26668 on cpu 0: [ 834.889528][T26668] shmem_getattr+0x41/0x200 [ 834.894033][T26668] vfs_getattr_nosec+0x146/0x1e0 [ 834.898983][T26668] vfs_statx+0x113/0x390 [ 834.903229][T26668] vfs_fstatat+0x115/0x170 [ 834.907648][T26668] __se_sys_newfstatat+0x55/0x260 [ 834.912678][T26668] __x64_sys_newfstatat+0x55/0x70 [ 834.917709][T26668] x64_sys_call+0x2c22/0x2fb0 [ 834.922387][T26668] do_syscall_64+0xd2/0x200 [ 834.926886][T26668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.932780][T26668] [ 834.935097][T26668] value changed: 0x0000000000001d89 -> 0x0000000000001d8c [ 834.942202][T26668] [ 834.944519][T26668] Reported by Kernel Concurrency Sanitizer on: [ 834.950674][T26668] CPU: 0 UID: 0 PID: 26668 Comm: syz-executor Tainted: G W 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 834.964923][T26668] Tainted: [W]=WARN [ 834.968733][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 834.978798][T26668] ================================================================== [ 835.038302][T30472] loop9: detected capacity change from 0 to 7 [ 835.044708][T30472] Buffer I/O error on dev loop9, logical block 0, async page read [ 835.052606][T30472] Buffer I/O error on dev loop9, logical block 0, async page read [ 835.060480][T30472] loop9: unable to read partition table [ 835.066184][T30472] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 835.066184][T30472] ) failed (rc=-5)