last executing test programs: 6m46.705312985s ago: executing program 4 (id=509): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000100010009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m46.662197385s ago: executing program 4 (id=511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) unshare(0x62040200) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 6m46.526113067s ago: executing program 4 (id=515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="9ebc19ff2001b982567200000080000000000000e6e30b27ad8ea4302773e9904aff42f0d19330773ad380d38229b9cffdbb972ed02f9149abf576489fc69549e7258ff8f8c32cd1908fdad6a428441ca2adc63642f497ae3229c906b461ee637f6208df76f0af488f8a483ba053622c80c3f97449490a439dab37161fd256d180128328b35668e8f3ab81ae8104ac8677e845dec88ea882", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$selinux_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 6m45.622892353s ago: executing program 4 (id=519): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r2) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x2, 0x3a, 'usr`quota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x4f, 0x4a, 0x46, 0x43]}, 0x35) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x2, 0x0, 0x3}}) socket$kcm(0xa, 0x2, 0x73) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000300)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 6m45.532004094s ago: executing program 4 (id=520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='kmem_cache_free\x00', r1}, 0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x300, 0x3d8, 0x3d8, 0x300, 0x3d8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}, @private2, [0xff000000, 0xff000000, 0xff000000, 0xff000000], [0xff, 0xff000000, 0xffffffff, 0xff], 'veth1_to_team\x00', 'macsec0\x00', {}, {}, 0x62, 0x61, 0x0, 0x8}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1ffffc, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@unspec=@addrtype1={{0x28}, {0x2, 0x140, 0xc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x916, {0x7c7a1f6d}}}}, {{@ipv6={@mcast1, @remote, [0xff000000, 0x0, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 'syzkaller0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x9, 0x4, 0x10}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) 6m45.429237524s ago: executing program 4 (id=521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000100010009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m45.418462154s ago: executing program 32 (id=521): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000080000000100010009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.792181448s ago: executing program 0 (id=7832): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000007c0)='sched_switch\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 1.746969838s ago: executing program 0 (id=7835): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/kernel/notes', 0x40000, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0180000000000000000001000000000000000b000000000300"], 0x28}}, 0x40000) r12 = socket$netlink(0x10, 0x3, 0x0) sendfile(r12, r7, 0x0, 0x7ffff088) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_open_dev$evdev(0x0, 0x0, 0x800) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) syz_read_part_table(0x5ad, &(0x7f0000000a00)="$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") chmod(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r14, 0xc0105512, &(0x7f0000000200)) 1.715963029s ago: executing program 3 (id=7837): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000040)) 1.673534599s ago: executing program 0 (id=7838): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 1.648951759s ago: executing program 3 (id=7839): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) 1.54839884s ago: executing program 0 (id=7844): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0xfd, 0x0, 0x0, 0x0, 0x7, 0x19040, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x2, @perf_config_ext={0x1008d, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0xb, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = eventfd2(0x2, 0x80001) write$eventfd(r4, &(0x7f0000000040)=0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ff"], 0x5c}}, 0x0) 1.449521221s ago: executing program 3 (id=7845): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r4) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a000000"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000005000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270eff0000000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000340), &(0x7f0000000380)=r11}, 0x20) r13 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r13) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.225520042s ago: executing program 2 (id=7849): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYRES16=r3, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="a947a96f4b"], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00 \x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r7, 0x0, 0x4000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = timerfd_create(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) read(r8, 0x0, 0x0) r9 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r9) 840.759035ms ago: executing program 2 (id=7852): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[], 0x69) close(r4) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000005000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="270eff0000000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000340), &(0x7f0000000380)=r9}, 0x20) r11 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 739.613715ms ago: executing program 5 (id=7855): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 707.428866ms ago: executing program 5 (id=7856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0xa004, 0x10000, 0x0, 0x4, 0xa, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x1000}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000814) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 653.522066ms ago: executing program 0 (id=7857): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) 623.878546ms ago: executing program 0 (id=7858): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000050000000c00", @ANYRES32=0x1, @ANYBLOB='@\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x43) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x800}, @ldst={0x3, 0x2, 0x0, 0x557bab16ec5fa19d, 0x4, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x281}, @map_fd={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x119, 0x0, &(0x7f00000009c0), 0x41100, 0x10, '\x00', r0, 0x25, r4, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r1], &(0x7f0000000ac0)=[{0x3, 0x2, 0x4, 0x2}, {0x3, 0x4, 0x9, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x3, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x3, 0xf}], 0x10, 0x4}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 569.287856ms ago: executing program 5 (id=7859): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000050000000c000000aeffffff01000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x43) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x800}, @ldst={0x3, 0x2, 0x0, 0x557bab16ec5fa19d, 0x4, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x281}, @map_fd={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x119, 0x0, &(0x7f00000009c0), 0x41100, 0x10, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r1], &(0x7f0000000ac0)=[{0x3, 0x2, 0x4, 0x2}, {0x3, 0x4, 0x9, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x3, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x3, 0xf}], 0x10, 0x4}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x101050, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r7, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7f}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x4, &(0x7f0000000380)) r12 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x0, 0x0) r14 = openat$cgroup_subtree(r13, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r14, &(0x7f00000000c0)=ANY=[@ANYBLOB='-cp'], 0x5) 542.348267ms ago: executing program 1 (id=7860): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000400)='/sys/kernel/notes', 0x40000, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0180000000000000000001000000000000000b000000000300"], 0x28}}, 0x40000) r12 = socket$netlink(0x10, 0x3, 0x0) sendfile(r12, r7, 0x0, 0x7ffff088) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) syz_open_dev$evdev(0x0, 0x0, 0x800) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) syz_read_part_table(0x5ad, &(0x7f0000000a00)="$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") chmod(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r14, 0xc0105512, &(0x7f0000000200)) 527.630907ms ago: executing program 5 (id=7861): creat(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB='traWs=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',k']) 501.021497ms ago: executing program 2 (id=7862): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000050000000c000000aeffffff01000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x43) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x800}, @ldst={0x3, 0x2, 0x0, 0x557bab16ec5fa19d, 0x4, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x281}, @map_fd={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x119, 0x0, &(0x7f00000009c0), 0x41100, 0x10, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r1], &(0x7f0000000ac0)=[{0x3, 0x2, 0x4, 0x2}, {0x3, 0x4, 0x9, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x3, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x3, 0xf}], 0x10, 0x4}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x101050, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400"], 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7f}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x4, &(0x7f0000000380)) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='-cpu'], 0x5) 485.056157ms ago: executing program 5 (id=7863): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[], 0x20}}, 0x800) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='bridge0\x00') 380.717938ms ago: executing program 3 (id=7864): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000050000000c000000aeffffff01000000", @ANYRES32=0x1, @ANYBLOB='@\x00'/12, @ANYRES32=r0, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x43) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=@framed={{}, [@jmp={0x5, 0x1, 0x8, 0xa, 0x6, 0xffffffffffffffe0, 0xffffffffffffffff}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x18, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0xb, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x800}, @ldst={0x3, 0x2, 0x0, 0x557bab16ec5fa19d, 0x4, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0xea0, 0x0, 0x0, 0x0, 0x281}, @map_fd={0x18, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x119, 0x0, &(0x7f00000009c0), 0x41100, 0x10, '\x00', r0, 0x25, r5, 0x8, &(0x7f0000000a00)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x4, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000a80)=[r1], &(0x7f0000000ac0)=[{0x3, 0x2, 0x4, 0x2}, {0x3, 0x4, 0x9, 0x7}, {0x0, 0x5, 0x8, 0xa}, {0x0, 0x3, 0x5, 0x9}, {0x5, 0x2, 0x3, 0x4}, {0x1, 0x5, 0x9, 0xa}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x3, 0xf}], 0x10, 0x4}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x101050, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="070000000400"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7f}, 0x18) mount$tmpfs(0x0, 0x0, &(0x7f0000000340), 0x4, &(0x7f0000000380)) r10 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r11 = fsmount(r10, 0x0, 0x0) r12 = openat$cgroup_subtree(r11, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000000c0)=ANY=[@ANYBLOB='-cpu'], 0x5) 367.598068ms ago: executing program 1 (id=7865): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffefffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40004) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x90) 342.108298ms ago: executing program 3 (id=7866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) 341.388778ms ago: executing program 2 (id=7867): setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 338.480078ms ago: executing program 5 (id=7868): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r4) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000005000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270eff0000000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000340), &(0x7f0000000380)=r11}, 0x20) r13 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r13) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 311.660128ms ago: executing program 2 (id=7869): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000280)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0x35, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 302.521298ms ago: executing program 3 (id=7870): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execveat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4e50a0a0500feff"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x88, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000009008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = open$dir(&(0x7f0000003540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x280000, 0x90) statx(r1, &(0x7f0000004540)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x4000, 0x10, &(0x7f0000000280)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xfe, 0x0, 0x7fff0026}]}) syz_usbip_server_init(0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x4}}, 0x20) 230.980329ms ago: executing program 1 (id=7871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=f']) 166.900099ms ago: executing program 1 (id=7872): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prlimit64(0x0, 0xe, 0x0, 0x0) 143.577179ms ago: executing program 1 (id=7873): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 127.234589ms ago: executing program 2 (id=7874): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x10007ffffffff}, 0x18) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) close(r4) execve(0x0, 0x0, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000005000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="270eff0000000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000340), &(0x7f0000000380)=r10}, 0x20) r12 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r12) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 1 (id=7875): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x797, &(0x7f0000001240)="$eJzs3c1rXFUbAPDnTpPmo33f5IUXpG4MCBopnZgaWwUXFRciWCjo2naYTEPNJFMyk9KEgC0iuBFUXAi66dqPunPrx1Z3/gkupKVqGoy4kMidzCSTzEw7SfNhye8HJ3POvTdzznM/zj0z9zI3gANrKP2TiTgWEe8nEQO16ZmISKq5rogzq8stLy7k05TEysprvyXV+UuLC/n6eyW11yO1wlMR8d07EcczzfWW5+Ync8ViYaZWHqlMXR4pz82fuDSVmyhMFKZPjY6NnTz97OlT2w6td/OEP36cP3r7g5ef/PLMX28/cvO975M4E0dr85a61uPYKUOrazciutNVuMFLO13ZPkv2uwFsS2b1CK+mYzEQh6q5Nvr2smUAwG55KyJWAIADJnH+B4ADpv49wNLiQr6eOvjaoOna2sPqzour0SzVrm0ur8XfVbtm1xvdEdG/lGy4MpJExOAO1D8UEZ9+/cbnaYpN11MBdtO16xFxYXCouf9Pmu5Z2KqnO1hmaFO5g/7vp/8+QJuAdd+k45/nWo3/Mmvjn2gx/ulpcexux/2P/8ytHaimrXT890LDvW3LDfHXDB6qlf5THfN1JxcvFQtp35b2Q8PR3ZOWR+9Rx/Ddv++2m9c4/vv9wzc/S+tPX9eXyNzq6tn4P+O5Su5BYm5053rEo12t4k/Wtn/SZvx7rsM6Xnn+3U/azUvjT+Otp+b4Gx3uPLAOrdyIeKLl9l+/oy255/2JI9XdYaS+U7Tw1c8f97erv3H7pymtv/5ZYC+k27//3vEPJo33a5bbvdNjbev44cbAt+3m3T/+1vv/4eT1ar6+R1zNVSozoxGHk1ebp59c/996ub58Gv/w462P/4b9/9DmdqefCS+0jXijrtu/frH9+HdXGv/4lrb/1jM3lyeb1l/9xNLZ9h+r5oZrUzrp/zpt4IOuPwAAAAAAAAAAAAAAAAAAAAAAAADoRCYijkaSya7lM5lsdvUZ3v+P/kyxVK4cv1ianR6P6rOyB6M7U/+py4GG30Mdrf0efr18clP5mYj4X0R81NNXLWfzpeL4fgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADVH2jz/P/VLz363DgDYNb373QAAYM85/wPAwbO183/frrUDANg7vU7qAHDg+P4fAA4e538AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB22bmzZ9O08ufiQj4tj1+Zm50sXTkxXihPZqdm89l8aeZydqJUmigWsvnSVNs3urb6UiyVLo/F9OzVkUqhXBkpz82fnyrNTlfOX5rKTRTOF7r3LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Fx5bn4yVywWZmRktpip70P/lvbItMwMbe8wb+wl+valbwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4GPwTAAD//1t7JQU=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c00028006"], 0x24}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x476}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='cpuhp_multi_enter\x00', r4, 0x0, 0x4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r6, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x64040011, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x101, 0x8, 0x3, 0xb1, 'syz0\x00', {0x105}}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x4, 0xf, 0x5, 0x9, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xff, 0xffffff00, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xffffffff], [0xffffffff, 0xff000000, 0xff], 0x0, 0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) getpid() r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x4}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) kernel console output (not intermixed with test programs): 888119b9b2a0 [ 424.984170][T23169] R13: ffff88811ac98000 R14: ffff88811ac98000 R15: ffff888119b9b2d8 [ 424.992222][T23169] FS: 00007f59a6c376c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 425.001254][T23169] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.008077][T23169] CR2: 00007f6ae7597dac CR3: 000000011cd2e000 CR4: 00000000003506f0 [ 425.016094][T23169] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 425.024380][T23169] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 425.032422][T23169] Call Trace: [ 425.035759][T23169] [ 425.038774][T23169] reg_set_min_max+0x215/0x260 [ 425.043636][T23169] check_cond_jmp_op+0x130d/0x19e0 [ 425.048842][T23169] do_check+0x3363/0x8460 [ 425.053281][T23169] do_check_common+0xc5e/0x12b0 [ 425.058282][T23169] bpf_check+0xaaae/0xd9d0 [ 425.063116][T23169] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 425.069556][T23169] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 425.075599][T23169] ? try_charge_memcg+0x215/0xa10 [ 425.080789][T23169] ? pcpu_block_refresh_hint+0x10b/0x170 [ 425.086599][T23169] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 425.092855][T23169] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 425.099526][T23169] ? css_rstat_updated+0xb7/0x240 [ 425.104819][T23169] ? __rcu_read_unlock+0x4f/0x70 [ 425.109862][T23169] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 425.115774][T23169] ? bpf_prog_alloc+0x5b/0x150 [ 425.120623][T23169] ? pcpu_alloc_noprof+0xd29/0x1250 [ 425.126021][T23169] ? should_fail_ex+0x30/0x280 [ 425.130983][T23169] ? should_failslab+0x8c/0xb0 [ 425.135849][T23169] ? __kmalloc_noprof+0x2a2/0x570 [ 425.141099][T23169] ? security_bpf_prog_load+0x60/0x140 [ 425.146648][T23169] ? selinux_bpf_prog_load+0xad/0xd0 [ 425.152083][T23169] ? security_bpf_prog_load+0x9e/0x140 [ 425.157795][T23169] bpf_prog_load+0xf6e/0x1100 [ 425.162645][T23169] ? security_bpf+0x2b/0x90 [ 425.167356][T23169] __sys_bpf+0x469/0x7c0 [ 425.171722][T23169] __x64_sys_bpf+0x41/0x50 [ 425.176357][T23169] x64_sys_call+0x2aee/0x3000 [ 425.181239][T23169] do_syscall_64+0xd2/0x200 [ 425.185825][T23169] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 425.191759][T23169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.197842][T23169] RIP: 0033:0x7f59a81cf6c9 [ 425.202339][T23169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.222138][T23169] RSP: 002b:00007f59a6c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.230972][T23169] RAX: ffffffffffffffda RBX: 00007f59a8425fa0 RCX: 00007f59a81cf6c9 [ 425.239391][T23169] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 425.247622][T23169] RBP: 00007f59a8251f91 R08: 0000000000000000 R09: 0000000000000000 [ 425.255660][T23169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.263708][T23169] R13: 00007f59a8426038 R14: 00007f59a8425fa0 R15: 00007fffa9f64bc8 [ 425.271948][T23169] [ 425.275209][T23169] ---[ end trace 0000000000000000 ]--- [ 425.400580][T23198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 425.431004][T23198] netlink: 'syz.5.7005': attribute type 10 has an invalid length. [ 425.486993][T23202] xt_CT: You must specify a L4 protocol and not use inversions on it [ 425.732290][T23240] FAULT_INJECTION: forcing a failure. [ 425.732290][T23240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.745399][T23240] CPU: 0 UID: 0 PID: 23240 Comm: syz.1.7024 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 425.745421][T23240] Tainted: [W]=WARN [ 425.745426][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.745434][T23240] Call Trace: [ 425.745438][T23240] [ 425.745442][T23240] __dump_stack+0x1d/0x30 [ 425.745531][T23240] dump_stack_lvl+0xe8/0x140 [ 425.745544][T23240] dump_stack+0x15/0x1b [ 425.745555][T23240] should_fail_ex+0x265/0x280 [ 425.745567][T23240] should_fail+0xb/0x20 [ 425.745577][T23240] should_fail_usercopy+0x1a/0x20 [ 425.745622][T23240] _copy_from_user+0x1c/0xb0 [ 425.745638][T23240] ___sys_sendmsg+0xc1/0x1d0 [ 425.745657][T23240] __x64_sys_sendmsg+0xd4/0x160 [ 425.745681][T23240] x64_sys_call+0x191e/0x3000 [ 425.745708][T23240] do_syscall_64+0xd2/0x200 [ 425.745723][T23240] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 425.745852][T23240] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 425.745872][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.745885][T23240] RIP: 0033:0x7f59a81cf6c9 [ 425.745895][T23240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.745907][T23240] RSP: 002b:00007f59a6c37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.745991][T23240] RAX: ffffffffffffffda RBX: 00007f59a8425fa0 RCX: 00007f59a81cf6c9 [ 425.745999][T23240] RDX: 0000000000000010 RSI: 0000200000000540 RDI: 0000000000000003 [ 425.746007][T23240] RBP: 00007f59a6c37090 R08: 0000000000000000 R09: 0000000000000000 [ 425.746015][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.746068][T23240] R13: 00007f59a8426038 R14: 00007f59a8425fa0 R15: 00007fffa9f64bc8 [ 425.746105][T23240] [ 425.770224][T23222] __nla_validate_parse: 7 callbacks suppressed [ 425.770311][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7016'. [ 425.969577][T23246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7026'. [ 426.015461][T23250] smc: net device bond0 applied user defined pnetid S [ 426.022865][T23250] smc: net device bond0 erased user defined pnetid S [ 426.064421][T23254] 9pnet: Could not find request transport: f [ 426.208087][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.232117][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.286525][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7040'. [ 426.335058][T23276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7041'. [ 426.437251][T23282] 9pnet_fd: Insufficient options for proto=fd [ 426.608014][T23285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7038'. [ 426.965076][T23290] siw: device registration error -23 [ 426.976585][T23292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7046'. [ 427.144020][T23305] FAULT_INJECTION: forcing a failure. [ 427.144020][T23305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.157308][T23305] CPU: 0 UID: 0 PID: 23305 Comm: syz.2.7051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 427.157351][T23305] Tainted: [W]=WARN [ 427.157359][T23305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 427.157373][T23305] Call Trace: [ 427.157379][T23305] [ 427.157386][T23305] __dump_stack+0x1d/0x30 [ 427.157411][T23305] dump_stack_lvl+0xe8/0x140 [ 427.157432][T23305] dump_stack+0x15/0x1b [ 427.157466][T23305] should_fail_ex+0x265/0x280 [ 427.157486][T23305] should_fail+0xb/0x20 [ 427.157503][T23305] should_fail_usercopy+0x1a/0x20 [ 427.157525][T23305] _copy_from_user+0x1c/0xb0 [ 427.157556][T23305] ___sys_sendmsg+0xc1/0x1d0 [ 427.157612][T23305] __x64_sys_sendmsg+0xd4/0x160 [ 427.157635][T23305] x64_sys_call+0x191e/0x3000 [ 427.157719][T23305] do_syscall_64+0xd2/0x200 [ 427.157812][T23305] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 427.157845][T23305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 427.157885][T23305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.157911][T23305] RIP: 0033:0x7fd1d9baf6c9 [ 427.157926][T23305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.157946][T23305] RSP: 002b:00007fd1d860f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.157968][T23305] RAX: ffffffffffffffda RBX: 00007fd1d9e05fa0 RCX: 00007fd1d9baf6c9 [ 427.157984][T23305] RDX: 00000000000000d0 RSI: 00002000000001c0 RDI: 0000000000000004 [ 427.157997][T23305] RBP: 00007fd1d860f090 R08: 0000000000000000 R09: 0000000000000000 [ 427.158013][T23305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.158095][T23305] R13: 00007fd1d9e06038 R14: 00007fd1d9e05fa0 R15: 00007ffe8ad22f18 [ 427.158112][T23305] [ 427.377293][T23313] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.396165][T23313] netlink: 'syz.0.7052': attribute type 10 has an invalid length. [ 427.404077][T23313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7052'. [ 427.532644][T23302] chnl_net:caif_netlink_parms(): no params data found [ 427.575608][T23302] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.582760][T23302] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.590034][T23302] bridge_slave_0: entered allmulticast mode [ 427.596816][T23302] bridge_slave_0: entered promiscuous mode [ 427.603712][T23302] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.610874][T23326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7054'. [ 427.610876][T23302] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.611091][T23302] bridge_slave_1: entered allmulticast mode [ 427.633375][T23302] bridge_slave_1: entered promiscuous mode [ 427.659081][T23302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.677074][T23302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.702919][T23302] team0: Port device team_slave_0 added [ 427.709627][T23302] team0: Port device team_slave_1 added [ 427.726536][T23302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.733538][T23302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.759521][T23302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.770652][T23302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.777606][T23302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.803617][T23302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.833010][T23302] hsr_slave_0: entered promiscuous mode [ 427.839137][T23302] hsr_slave_1: entered promiscuous mode [ 427.844989][T23302] debugfs: 'hsr0' already exists in 'hsr' [ 427.850735][T23302] Cannot create hsr debugfs directory [ 427.852786][T23334] 9pnet_fd: Insufficient options for proto=fd [ 427.949152][T23343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.978164][T23302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.986213][T23343] netlink: 'syz.3.7062': attribute type 10 has an invalid length. [ 427.996265][T23343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7062'. [ 428.046117][T23302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.076746][T23347] bridge0: port 1(gretap0) entered blocking state [ 428.083276][T23347] bridge0: port 1(gretap0) entered disabled state [ 428.099851][T23348] 9pnet_fd: Insufficient options for proto=fd [ 428.117527][T23347] gretap0: entered allmulticast mode [ 428.128531][T23347] gretap0: entered promiscuous mode [ 428.140462][T23347] bridge0: port 1(gretap0) entered blocking state [ 428.146900][T23347] bridge0: port 1(gretap0) entered forwarding state [ 428.176727][T23302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.219132][T23349] gretap0: left allmulticast mode [ 428.224208][T23349] gretap0: left promiscuous mode [ 428.229337][T23349] bridge0: port 1(gretap0) entered disabled state [ 428.269086][T23302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.321138][T23354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7066'. [ 428.365658][T23302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 428.399315][T23302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 428.410998][T23302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 428.429975][T23302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 428.511522][T23302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.544436][T23302] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.560625][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.567738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.599710][ T1445] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.606771][ T1445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.722969][T23302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.865832][T23382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 428.872445][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.880048][T23382] vhci_hcd vhci_hcd.0: Device attached [ 428.890638][T23302] veth0_vlan: entered promiscuous mode [ 428.897542][T23387] vhci_hcd: connection closed [ 428.899119][ T1445] vhci_hcd: stop threads [ 428.908134][ T1445] vhci_hcd: release socket [ 428.909770][T23302] veth1_vlan: entered promiscuous mode [ 428.912538][ T1445] vhci_hcd: disconnect device [ 428.939373][T23302] veth0_macvtap: entered promiscuous mode [ 428.946606][T23302] veth1_macvtap: entered promiscuous mode [ 428.957811][T23302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.962014][T23302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.976851][ T1445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.976920][ T1445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.977001][ T1445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.977103][ T1445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.244515][T23405] 9pnet: Could not find request transport: f [ 429.358087][T23410] smc: net device bond0 applied user defined pnetid S [ 429.371257][T23410] smc: net device bond0 erased user defined pnetid S [ 430.215026][T23432] 9pnet_fd: Insufficient options for proto=fd [ 430.271125][T23436] loop1: detected capacity change from 0 to 164 [ 430.289427][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 430.289442][ T29] audit: type=1400 audit(1762815599.471:108141): avc: denied { mount } for pid=23434 comm="syz.1.7093" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 430.371944][ T29] audit: type=1400 audit(1762815599.551:108142): avc: denied { unmount } for pid=23302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 430.480079][T23451] siw: device registration error -23 [ 430.492507][T23454] loop1: detected capacity change from 0 to 1024 [ 430.505808][T23454] EXT4-fs: Ignoring removed orlov option [ 430.535990][T23454] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.540380][ T29] audit: type=1326 audit(1762815599.721:108143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.2.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 430.610908][T23454] smc: net device bond0 applied user defined pnetid S [ 430.616623][ T29] audit: type=1400 audit(1762815599.741:108144): avc: denied { mount } for pid=23452 comm="syz.1.7102" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 430.625522][T23454] smc: net device bond0 erased user defined pnetid S [ 430.639704][ T29] audit: type=1400 audit(1762815599.741:108145): avc: denied { add_name } for pid=23452 comm="syz.1.7102" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 430.667081][ T29] audit: type=1400 audit(1762815599.741:108146): avc: denied { create } for pid=23452 comm="syz.1.7102" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 430.687439][ T29] audit: type=1326 audit(1762815599.761:108147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.2.7103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 430.711117][ T29] audit: type=1400 audit(1762815599.781:108148): avc: denied { read open } for pid=23452 comm="syz.1.7102" path="/11/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 430.734154][ T29] audit: type=1400 audit(1762815599.781:108149): avc: denied { write } for pid=23452 comm="syz.1.7102" name="bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 430.756091][ T29] audit: type=1326 audit(1762815599.781:108150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23452 comm="syz.1.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c288cf6c9 code=0x7ffc0000 [ 430.804395][T23455] __nla_validate_parse: 2 callbacks suppressed [ 430.804462][T23455] netlink: 464 bytes leftover after parsing attributes in process `syz.3.7101'. [ 430.875768][T23474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7109'. [ 430.932491][T23466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7105'. [ 431.005657][T23484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7114'. [ 431.051215][T23485] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7107'. [ 431.131014][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.211480][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7121'. [ 431.276077][T23505] 9pnet: Could not find request transport: f [ 431.303629][T23507] vhci_hcd: invalid port number 96 [ 431.308953][T23507] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 431.339701][T23513] FAULT_INJECTION: forcing a failure. [ 431.339701][T23513] name failslab, interval 1, probability 0, space 0, times 0 [ 431.352352][T23513] CPU: 0 UID: 0 PID: 23513 Comm: syz.3.7127 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.352386][T23513] Tainted: [W]=WARN [ 431.352394][T23513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.352409][T23513] Call Trace: [ 431.352417][T23513] [ 431.352426][T23513] __dump_stack+0x1d/0x30 [ 431.352543][T23513] dump_stack_lvl+0xe8/0x140 [ 431.352580][T23513] dump_stack+0x15/0x1b [ 431.352602][T23513] should_fail_ex+0x265/0x280 [ 431.352623][T23513] should_failslab+0x8c/0xb0 [ 431.352731][T23513] kmem_cache_alloc_noprof+0x50/0x480 [ 431.352827][T23513] ? audit_log_start+0x342/0x720 [ 431.352850][T23513] audit_log_start+0x342/0x720 [ 431.352872][T23513] ? kstrtouint+0x76/0xc0 [ 431.352946][T23513] audit_seccomp+0x48/0x100 [ 431.352989][T23513] ? __seccomp_filter+0x82d/0x1250 [ 431.353018][T23513] __seccomp_filter+0x83e/0x1250 [ 431.353084][T23513] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 431.353121][T23513] ? vfs_write+0x7e8/0x960 [ 431.353152][T23513] __secure_computing+0x82/0x150 [ 431.353180][T23513] syscall_trace_enter+0xcf/0x1e0 [ 431.353277][T23513] do_syscall_64+0xac/0x200 [ 431.353301][T23513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.353413][T23513] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.353525][T23513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.353550][T23513] RIP: 0033:0x7f30d1a8f6c9 [ 431.353568][T23513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.353590][T23513] RSP: 002b:00007f30d04ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 431.353619][T23513] RAX: ffffffffffffffda RBX: 00007f30d1ce5fa0 RCX: 00007f30d1a8f6c9 [ 431.353632][T23513] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 431.353645][T23513] RBP: 00007f30d04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 431.353659][T23513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.353674][T23513] R13: 00007f30d1ce6038 R14: 00007f30d1ce5fa0 R15: 00007ffeb558e668 [ 431.353703][T23513] [ 431.772526][T23549] FAULT_INJECTION: forcing a failure. [ 431.772526][T23549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.785655][T23549] CPU: 0 UID: 0 PID: 23549 Comm: syz.1.7140 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 431.785774][T23549] Tainted: [W]=WARN [ 431.785783][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 431.785798][T23549] Call Trace: [ 431.785806][T23549] [ 431.785814][T23549] __dump_stack+0x1d/0x30 [ 431.785837][T23549] dump_stack_lvl+0xe8/0x140 [ 431.785898][T23549] dump_stack+0x15/0x1b [ 431.786054][T23549] should_fail_ex+0x265/0x280 [ 431.786099][T23549] should_fail+0xb/0x20 [ 431.786118][T23549] should_fail_usercopy+0x1a/0x20 [ 431.786180][T23549] _copy_from_user+0x1c/0xb0 [ 431.786211][T23549] ___sys_sendmsg+0xc1/0x1d0 [ 431.786312][T23549] __x64_sys_sendmsg+0xd4/0x160 [ 431.786341][T23549] x64_sys_call+0x191e/0x3000 [ 431.786386][T23549] do_syscall_64+0xd2/0x200 [ 431.786407][T23549] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 431.786438][T23549] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 431.786525][T23549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.786550][T23549] RIP: 0033:0x7f5c288cf6c9 [ 431.786568][T23549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.786590][T23549] RSP: 002b:00007f5c27337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.786612][T23549] RAX: ffffffffffffffda RBX: 00007f5c28b25fa0 RCX: 00007f5c288cf6c9 [ 431.786629][T23549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 431.786674][T23549] RBP: 00007f5c27337090 R08: 0000000000000000 R09: 0000000000000000 [ 431.786686][T23549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.786728][T23549] R13: 00007f5c28b26038 R14: 00007f5c28b25fa0 R15: 00007ffd8515b418 [ 431.786748][T23549] [ 431.915387][T23548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.979221][T23553] netlink: 'syz.3.7141': attribute type 10 has an invalid length. [ 431.987034][T23553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7141'. [ 432.189638][T23576] block device autoloading is deprecated and will be removed. [ 432.216239][T23575] siw: device registration error -23 [ 432.261695][T23581] loop1: detected capacity change from 0 to 164 [ 432.376560][T23598] 9pnet: Could not find request transport: f [ 432.439905][T23605] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7164'. [ 432.450604][T23603] loop1: detected capacity change from 0 to 4096 [ 432.458958][T23603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.490994][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.526243][T23608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.547681][T23611] siw: device registration error -23 [ 432.687700][T23616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7168'. [ 432.813000][T23637] loop1: detected capacity change from 0 to 2048 [ 432.930789][T23647] loop1: detected capacity change from 0 to 1024 [ 432.937363][T23647] EXT4-fs: Ignoring removed orlov option [ 432.940569][T23652] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7185'. [ 432.973793][T23647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.050085][T23647] smc: net device bond0 applied user defined pnetid S [ 433.057934][T23647] smc: net device bond0 erased user defined pnetid S [ 433.565402][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.735631][T23695] smc: net device bond0 applied user defined pnetid S [ 433.742753][T23695] smc: net device bond0 erased user defined pnetid S [ 434.323780][T23702] smc: net device bond0 applied user defined pnetid S [ 434.334516][T23702] smc: net device bond0 erased user defined pnetid S [ 434.750362][T23731] 9pnet_fd: Insufficient options for proto=fd [ 435.313604][ T29] kauditd_printk_skb: 1301 callbacks suppressed [ 435.313619][ T29] audit: type=1400 audit(1762815604.491:109450): avc: denied { mounton } for pid=23738 comm="syz.2.7220" path="/267/file0" dev="tmpfs" ino=1415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 435.467362][T23741] FAULT_INJECTION: forcing a failure. [ 435.467362][T23741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.480606][T23741] CPU: 1 UID: 0 PID: 23741 Comm: syz.2.7221 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 435.480640][T23741] Tainted: [W]=WARN [ 435.480715][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.480730][T23741] Call Trace: [ 435.480738][T23741] [ 435.480747][T23741] __dump_stack+0x1d/0x30 [ 435.480772][T23741] dump_stack_lvl+0xe8/0x140 [ 435.480793][T23741] dump_stack+0x15/0x1b [ 435.480811][T23741] should_fail_ex+0x265/0x280 [ 435.480873][T23741] should_fail+0xb/0x20 [ 435.480890][T23741] should_fail_usercopy+0x1a/0x20 [ 435.480977][T23741] _copy_to_user+0x20/0xa0 [ 435.481040][T23741] simple_read_from_buffer+0xb5/0x130 [ 435.481066][T23741] proc_fail_nth_read+0x10e/0x150 [ 435.481175][T23741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.481208][T23741] vfs_read+0x1a8/0x770 [ 435.481233][T23741] ? __rcu_read_unlock+0x4f/0x70 [ 435.481266][T23741] ? __fget_files+0x184/0x1c0 [ 435.481297][T23741] ksys_read+0xda/0x1a0 [ 435.481366][T23741] __x64_sys_read+0x40/0x50 [ 435.481423][T23741] x64_sys_call+0x27c0/0x3000 [ 435.481446][T23741] do_syscall_64+0xd2/0x200 [ 435.481470][T23741] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 435.481500][T23741] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 435.481636][T23741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.481663][T23741] RIP: 0033:0x7fd1d9bae0dc [ 435.481678][T23741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.481697][T23741] RSP: 002b:00007fd1d860f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.481732][T23741] RAX: ffffffffffffffda RBX: 00007fd1d9e05fa0 RCX: 00007fd1d9bae0dc [ 435.481748][T23741] RDX: 000000000000000f RSI: 00007fd1d860f0a0 RDI: 0000000000000004 [ 435.481763][T23741] RBP: 00007fd1d860f090 R08: 0000000000000000 R09: 0000000000000000 [ 435.481776][T23741] R10: 0000000000012162 R11: 0000000000000246 R12: 0000000000000001 [ 435.481788][T23741] R13: 00007fd1d9e06038 R14: 00007fd1d9e05fa0 R15: 00007ffe8ad22f18 [ 435.481806][T23741] [ 435.807335][ T29] audit: type=1326 audit(1762815604.981:109451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.831111][ T29] audit: type=1326 audit(1762815604.981:109452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.854966][ T29] audit: type=1326 audit(1762815604.981:109453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.884864][T23749] smc: net device bond0 applied user defined pnetid S [ 435.892152][T23749] smc: net device bond0 erased user defined pnetid S [ 435.915433][ T29] audit: type=1326 audit(1762815604.981:109454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.939123][ T29] audit: type=1326 audit(1762815604.991:109455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.962920][ T29] audit: type=1326 audit(1762815605.061:109456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 435.986665][ T29] audit: type=1326 audit(1762815605.061:109457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 436.010383][ T29] audit: type=1326 audit(1762815605.061:109458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 436.034214][ T29] audit: type=1326 audit(1762815605.061:109459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23748 comm="syz.2.7224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 436.108158][T23767] __nla_validate_parse: 8 callbacks suppressed [ 436.108173][T23767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7232'. [ 436.261813][T23792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.306383][T23796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7237'. [ 436.575160][T23806] xt_CT: You must specify a L4 protocol and not use inversions on it [ 436.653001][T23809] FAULT_INJECTION: forcing a failure. [ 436.653001][T23809] name failslab, interval 1, probability 0, space 0, times 0 [ 436.665696][T23809] CPU: 1 UID: 0 PID: 23809 Comm: syz.2.7246 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 436.665791][T23809] Tainted: [W]=WARN [ 436.665798][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 436.665814][T23809] Call Trace: [ 436.665821][T23809] [ 436.665829][T23809] __dump_stack+0x1d/0x30 [ 436.665865][T23809] dump_stack_lvl+0xe8/0x140 [ 436.665949][T23809] dump_stack+0x15/0x1b [ 436.665967][T23809] should_fail_ex+0x265/0x280 [ 436.665986][T23809] ? audit_log_d_path+0x8d/0x150 [ 436.666008][T23809] should_failslab+0x8c/0xb0 [ 436.666049][T23809] __kmalloc_cache_noprof+0x4c/0x4a0 [ 436.666165][T23809] audit_log_d_path+0x8d/0x150 [ 436.666192][T23809] audit_log_d_path_exe+0x42/0x70 [ 436.666233][T23809] audit_log_task+0x1e9/0x250 [ 436.666345][T23809] ? kstrtouint+0x76/0xc0 [ 436.666394][T23809] audit_seccomp+0x61/0x100 [ 436.666468][T23809] ? __seccomp_filter+0x82d/0x1250 [ 436.666634][T23809] __seccomp_filter+0x83e/0x1250 [ 436.666720][T23809] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 436.666755][T23809] ? vfs_write+0x7e8/0x960 [ 436.666784][T23809] __secure_computing+0x82/0x150 [ 436.666817][T23809] syscall_trace_enter+0xcf/0x1e0 [ 436.666890][T23809] do_syscall_64+0xac/0x200 [ 436.666933][T23809] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 436.666968][T23809] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 436.667002][T23809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.667099][T23809] RIP: 0033:0x7fd1d9baf6c9 [ 436.667117][T23809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.667152][T23809] RSP: 002b:00007fd1d860f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 436.667173][T23809] RAX: ffffffffffffffda RBX: 00007fd1d9e05fa0 RCX: 00007fd1d9baf6c9 [ 436.667245][T23809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 436.667260][T23809] RBP: 00007fd1d860f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.667276][T23809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.667291][T23809] R13: 00007fd1d9e06038 R14: 00007fd1d9e05fa0 R15: 00007ffe8ad22f18 [ 436.667313][T23809] [ 436.909106][T23811] 9pnet_fd: Insufficient options for proto=fd [ 436.974993][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7250'. [ 437.023415][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7253'. [ 437.032839][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7253'. [ 437.042729][T23823] netlink: 'syz.3.7253': attribute type 21 has an invalid length. [ 437.050929][T23823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7253'. [ 437.105167][T23831] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7257'. [ 437.114158][T23831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7257'. [ 437.175755][T23838] netlink: 'syz.2.7254': attribute type 12 has an invalid length. [ 437.223414][T23842] netlink: 172 bytes leftover after parsing attributes in process `syz.5.7261'. [ 437.232763][T23842] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7261'. [ 437.328873][T23852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.389436][T23864] siw: device registration error -23 [ 437.519147][T23880] FAULT_INJECTION: forcing a failure. [ 437.519147][T23880] name failslab, interval 1, probability 0, space 0, times 0 [ 437.531935][T23880] CPU: 0 UID: 0 PID: 23880 Comm: syz.0.7277 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 437.531958][T23880] Tainted: [W]=WARN [ 437.531962][T23880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.531970][T23880] Call Trace: [ 437.531974][T23880] [ 437.531979][T23880] __dump_stack+0x1d/0x30 [ 437.531994][T23880] dump_stack_lvl+0xe8/0x140 [ 437.532030][T23880] dump_stack+0x15/0x1b [ 437.532041][T23880] should_fail_ex+0x265/0x280 [ 437.532053][T23880] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 437.532069][T23880] should_failslab+0x8c/0xb0 [ 437.532165][T23880] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 437.532184][T23880] ? shmem_alloc_inode+0x34/0x50 [ 437.532198][T23880] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 437.532231][T23880] shmem_alloc_inode+0x34/0x50 [ 437.532244][T23880] alloc_inode+0x40/0x170 [ 437.532269][T23880] new_inode+0x1d/0xe0 [ 437.532285][T23880] shmem_get_inode+0x244/0x750 [ 437.532315][T23880] shmem_mknod+0x46/0x180 [ 437.532370][T23880] vfs_mknod+0x2ce/0x310 [ 437.532384][T23880] do_mknodat+0x24b/0x610 [ 437.532405][T23880] __x64_sys_mknod+0x51/0x60 [ 437.532494][T23880] x64_sys_call+0x2d56/0x3000 [ 437.532508][T23880] do_syscall_64+0xd2/0x200 [ 437.532522][T23880] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 437.532657][T23880] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 437.532677][T23880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.532726][T23880] RIP: 0033:0x7f6ae733f6c9 [ 437.532735][T23880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.532746][T23880] RSP: 002b:00007f6ae5da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 437.532759][T23880] RAX: ffffffffffffffda RBX: 00007f6ae7595fa0 RCX: 00007f6ae733f6c9 [ 437.532767][T23880] RDX: 0000000000000700 RSI: 100000000000600d RDI: 0000200000000080 [ 437.532775][T23880] RBP: 00007f6ae5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 437.532842][T23880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.532856][T23880] R13: 00007f6ae7596038 R14: 00007f6ae7595fa0 R15: 00007ffe28631278 [ 437.532877][T23880] [ 437.820242][T23883] futex_wake_op: syz.0.7278 tries to shift op by -1; fix this program [ 437.882210][T23889] smc: net device bond0 applied user defined pnetid S [ 437.889379][T23889] smc: net device bond0 erased user defined pnetid S [ 437.959891][T23901] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 437.962862][T23897] xt_CT: You must specify a L4 protocol and not use inversions on it [ 437.966413][T23901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 437.982009][T23901] vhci_hcd vhci_hcd.0: Device attached [ 437.994199][T23903] vhci_hcd: connection closed [ 437.994396][ T53] vhci_hcd: stop threads [ 438.003366][ T53] vhci_hcd: release socket [ 438.007858][ T53] vhci_hcd: disconnect device [ 438.059188][T23912] vhci_hcd: invalid port number 96 [ 438.064315][T23912] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 438.086101][T23914] vhci_hcd: invalid port number 96 [ 438.091259][T23914] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 438.124136][T23918] smc: net device bond0 applied user defined pnetid S [ 438.131367][T23918] smc: net device bond0 erased user defined pnetid S [ 438.169012][T23920] 9pnet: Could not find request transport: f [ 438.197148][T23929] 9pnet_fd: Insufficient options for proto=fd [ 438.243206][T23936] bridge0: port 1(gretap0) entered blocking state [ 438.246602][T23937] loop1: detected capacity change from 0 to 2048 [ 438.249697][T23936] bridge0: port 1(gretap0) entered disabled state [ 438.262691][T23936] gretap0: entered allmulticast mode [ 438.268479][T23936] gretap0: entered promiscuous mode [ 438.273979][T23936] bridge0: port 1(gretap0) entered blocking state [ 438.280470][T23936] bridge0: port 1(gretap0) entered forwarding state [ 438.353407][T23945] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 438.373412][T23949] loop1: detected capacity change from 0 to 1024 [ 438.402954][T23949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.445837][T23949] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7308: bg 0: block 88: padding at end of block bitmap is not set [ 438.475938][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.536597][T23972] loop1: detected capacity change from 0 to 512 [ 438.553966][T23972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.567341][T23972] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.593616][T23972] IPVS: set_ctl: invalid protocol: 30821 0.0.0.0:32769 [ 438.601836][T23980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.621380][T23980] netlink: 'syz.2.7321': attribute type 10 has an invalid length. [ 438.666041][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.753471][T23993] loop1: detected capacity change from 0 to 2048 [ 438.781671][T23999] tipc: Enabling of bearer rejected, failed to enable media [ 438.875289][T24005] bridge_slave_0: left allmulticast mode [ 438.881053][T24005] bridge_slave_0: left promiscuous mode [ 438.886776][T24005] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.896092][T24005] bridge_slave_1: left allmulticast mode [ 438.901864][T24005] bridge_slave_1: left promiscuous mode [ 438.907608][T24005] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.915923][T24008] netlink: 'syz.1.7332': attribute type 10 has an invalid length. [ 438.926049][T24005] bond0: (slave bond_slave_0): Releasing backup interface [ 438.935663][T24005] bond0: (slave bond_slave_1): Releasing backup interface [ 438.947347][T24005] team0: Port device team_slave_0 removed [ 438.956726][T24005] team0: Port device team_slave_1 removed [ 438.963586][T24005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 438.971029][T24005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.982033][T24005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 438.989460][T24005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 438.999431][T24005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 439.026762][T24008] batman_adv: batadv0: Adding interface: veth1_vlan [ 439.033380][T24008] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.059196][T24008] batman_adv: batadv0: Interface activated: veth1_vlan [ 439.128488][T24016] netlink: 'syz.1.7336': attribute type 1 has an invalid length. [ 439.142157][T24016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.159075][T24016] bond1 (unregistering): Released all slaves [ 439.234196][T24020] macvtap1: entered promiscuous mode [ 439.239557][T24020] team0: entered promiscuous mode [ 439.244620][T24020] macvtap1: entered allmulticast mode [ 439.250061][T24020] team0: entered allmulticast mode [ 439.255456][T24020] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 439.310555][T24026] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 439.319680][T24025] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 439.326219][T24025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.334053][T24025] vhci_hcd vhci_hcd.0: Device attached [ 439.359859][T24033] FAULT_INJECTION: forcing a failure. [ 439.359859][T24033] name failslab, interval 1, probability 0, space 0, times 0 [ 439.362933][T24026] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.372525][T24033] CPU: 1 UID: 0 PID: 24033 Comm: syz.1.7339 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.372568][T24033] Tainted: [W]=WARN [ 439.372576][T24033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.372590][T24033] Call Trace: [ 439.372597][T24033] [ 439.372605][T24033] __dump_stack+0x1d/0x30 [ 439.372706][T24033] dump_stack_lvl+0xe8/0x140 [ 439.372730][T24033] dump_stack+0x15/0x1b [ 439.372749][T24033] should_fail_ex+0x265/0x280 [ 439.372768][T24033] should_failslab+0x8c/0xb0 [ 439.372809][T24033] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 439.372844][T24033] ? __alloc_skb+0x101/0x320 [ 439.372878][T24033] __alloc_skb+0x101/0x320 [ 439.372926][T24033] netlink_alloc_large_skb+0xbf/0xf0 [ 439.372962][T24033] netlink_sendmsg+0x3cf/0x6b0 [ 439.372985][T24033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.373046][T24033] __sock_sendmsg+0x145/0x180 [ 439.373074][T24033] ____sys_sendmsg+0x31e/0x4e0 [ 439.373152][T24033] ___sys_sendmsg+0x17b/0x1d0 [ 439.373184][T24033] __x64_sys_sendmsg+0xd4/0x160 [ 439.373209][T24033] x64_sys_call+0x191e/0x3000 [ 439.373253][T24033] do_syscall_64+0xd2/0x200 [ 439.373276][T24033] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 439.373308][T24033] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 439.373378][T24033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.373403][T24033] RIP: 0033:0x7f5c288cf6c9 [ 439.373419][T24033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.373440][T24033] RSP: 002b:00007f5c27316038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.373461][T24033] RAX: ffffffffffffffda RBX: 00007f5c28b26090 RCX: 00007f5c288cf6c9 [ 439.373475][T24033] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 439.373536][T24033] RBP: 00007f5c27316090 R08: 0000000000000000 R09: 0000000000000000 [ 439.373550][T24033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.373564][T24033] R13: 00007f5c28b26128 R14: 00007f5c28b26090 R15: 00007ffd8515b418 [ 439.373583][T24033] [ 439.586693][T24022] smc: net device bond0 applied user defined pnetid S [ 439.593667][T24034] smc: net device bond0 erased user defined pnetid S [ 439.605485][T24027] vhci_hcd: connection closed [ 439.605767][ T52] vhci_hcd: stop threads [ 439.614703][ T52] vhci_hcd: release socket [ 439.619285][ T52] vhci_hcd: disconnect device [ 439.647432][ T9] vhci_hcd: vhci_device speed not set [ 439.690970][T24042] gretap0: left allmulticast mode [ 439.696132][T24042] gretap0: left promiscuous mode [ 439.701443][T24042] bridge0: port 1(gretap0) entered disabled state [ 439.716835][T24044] FAULT_INJECTION: forcing a failure. [ 439.716835][T24044] name failslab, interval 1, probability 0, space 0, times 0 [ 439.729490][T24044] CPU: 0 UID: 0 PID: 24044 Comm: syz.5.7345 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.729536][T24044] Tainted: [W]=WARN [ 439.729542][T24044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 439.729555][T24044] Call Trace: [ 439.729561][T24044] [ 439.729568][T24044] __dump_stack+0x1d/0x30 [ 439.729592][T24044] dump_stack_lvl+0xe8/0x140 [ 439.729615][T24044] dump_stack+0x15/0x1b [ 439.729633][T24044] should_fail_ex+0x265/0x280 [ 439.729704][T24044] should_failslab+0x8c/0xb0 [ 439.729735][T24044] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 439.729771][T24044] ? __alloc_skb+0x101/0x320 [ 439.729860][T24044] __alloc_skb+0x101/0x320 [ 439.729900][T24044] ? audit_log_start+0x342/0x720 [ 439.729925][T24044] audit_log_start+0x3a0/0x720 [ 439.730028][T24044] ? kstrtouint+0x76/0xc0 [ 439.730120][T24044] audit_seccomp+0x48/0x100 [ 439.730156][T24044] ? __seccomp_filter+0x82d/0x1250 [ 439.730189][T24044] __seccomp_filter+0x83e/0x1250 [ 439.730260][T24044] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 439.730296][T24044] ? vfs_write+0x7e8/0x960 [ 439.730328][T24044] __secure_computing+0x82/0x150 [ 439.730373][T24044] syscall_trace_enter+0xcf/0x1e0 [ 439.730442][T24044] do_syscall_64+0xac/0x200 [ 439.730508][T24044] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 439.730586][T24044] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 439.730621][T24044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.730643][T24044] RIP: 0033:0x7ff4f001f6c9 [ 439.730665][T24044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.730684][T24044] RSP: 002b:00007ff4eea87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 439.730703][T24044] RAX: ffffffffffffffda RBX: 00007ff4f0275fa0 RCX: 00007ff4f001f6c9 [ 439.730716][T24044] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000006 [ 439.730729][T24044] RBP: 00007ff4eea87090 R08: 0000000000000000 R09: 0000000000000000 [ 439.730742][T24044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.730754][T24044] R13: 00007ff4f0276038 R14: 00007ff4f0275fa0 R15: 00007fffc6723878 [ 439.730785][T24044] [ 439.990661][T24055] 9pnet: Could not find request transport: f [ 439.996314][T24048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.041885][T24046] loop1: detected capacity change from 0 to 8192 [ 440.069551][T24063] vhci_hcd: invalid port number 96 [ 440.074659][T24063] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 440.081988][T24046] loop1: p1 < > p2 < > p3 p4 < > [ 440.087022][T24046] loop1: partition table partially beyond EOD, truncated [ 440.094271][T24046] loop1: p1 start 67108864 is beyond EOD, truncated [ 440.101651][T24046] loop1: p3 start 100859904 is beyond EOD, truncated [ 440.124214][T24066] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 440.130780][T24066] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 440.138361][T24066] vhci_hcd vhci_hcd.0: Device attached [ 440.152262][T24067] vhci_hcd: connection closed [ 440.152414][ T52] vhci_hcd: stop threads [ 440.161416][ T52] vhci_hcd: release socket [ 440.165815][ T52] vhci_hcd: disconnect device [ 440.246234][T24078] smc: net device bond0 applied user defined pnetid S [ 440.256188][T24078] smc: net device bond0 erased user defined pnetid S [ 440.317528][ T29] kauditd_printk_skb: 1491 callbacks suppressed [ 440.317542][ T29] audit: type=1326 audit(1762815609.491:110949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 440.347722][ T29] audit: type=1326 audit(1762815609.501:110950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ae7336567 code=0x7ffc0000 [ 440.371285][ T29] audit: type=1326 audit(1762815609.501:110951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ae72db779 code=0x7ffc0000 [ 440.394849][ T29] audit: type=1326 audit(1762815609.501:110952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ae7336567 code=0x7ffc0000 [ 440.418486][ T29] audit: type=1326 audit(1762815609.501:110953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ae72db779 code=0x7ffc0000 [ 440.442052][ T29] audit: type=1326 audit(1762815609.501:110954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ae7336567 code=0x7ffc0000 [ 440.465592][ T29] audit: type=1326 audit(1762815609.501:110955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ae72db779 code=0x7ffc0000 [ 440.489149][ T29] audit: type=1326 audit(1762815609.501:110956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ae7336567 code=0x7ffc0000 [ 440.512726][ T29] audit: type=1326 audit(1762815609.501:110957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ae72db779 code=0x7ffc0000 [ 440.536287][ T29] audit: type=1326 audit(1762815609.501:110958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24077 comm="syz.0.7358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ae7336567 code=0x7ffc0000 [ 440.600755][T24088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 440.607995][T24088] IPv6: NLM_F_CREATE should be set when creating new route [ 440.672036][T24092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.814924][T24105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.842975][T24114] netlink: 'syz.5.7369': attribute type 10 has an invalid length. [ 440.936671][T24113] loop1: detected capacity change from 0 to 8192 [ 440.960884][T24123] 9pnet: Could not find request transport: f [ 440.997767][T24113] loop1: p1 < > p2 < > p3 p4 < > [ 441.002851][T24113] loop1: partition table partially beyond EOD, truncated [ 441.025249][T24132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.033881][T24113] loop1: p1 start 67108864 is beyond EOD, truncated [ 441.060953][T24135] netlink: zone id is out of range [ 441.066103][T24135] netlink: zone id is out of range [ 441.071547][T24113] loop1: p3 start 100859904 is beyond EOD, truncated [ 441.094645][T24135] netlink: zone id is out of range [ 441.112779][T24138] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 441.119299][T24138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 441.126941][T24138] vhci_hcd vhci_hcd.0: Device attached [ 441.136476][T24135] netlink: set zone limit has 8 unknown bytes [ 441.437456][ T9] usb 7-1: new high-speed USB device number 8 using vhci_hcd [ 441.500610][T24162] __nla_validate_parse: 18 callbacks suppressed [ 441.500628][T24162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7392'. [ 441.535215][T24168] pimreg: entered allmulticast mode [ 441.544800][T24168] pimreg: left allmulticast mode [ 441.559229][T24166] vhci_hcd: invalid port number 96 [ 441.564369][T24166] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 441.579614][T24168] sd 0:0:1:0: device reset [ 441.602923][T24172] 9pnet: Could not find request transport: f [ 441.702418][T24170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7396'. [ 441.789860][T24140] vhci_hcd: connection reset by peer [ 441.795343][ T53] vhci_hcd: stop threads [ 441.799774][ T53] vhci_hcd: release socket [ 441.804312][ T53] vhci_hcd: disconnect device [ 441.813381][T24187] FAULT_INJECTION: forcing a failure. [ 441.813381][T24187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.826563][T24187] CPU: 0 UID: 0 PID: 24187 Comm: syz.3.7403 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.826599][T24187] Tainted: [W]=WARN [ 441.826607][T24187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 441.826634][T24187] Call Trace: [ 441.826641][T24187] [ 441.826649][T24187] __dump_stack+0x1d/0x30 [ 441.826674][T24187] dump_stack_lvl+0xe8/0x140 [ 441.826697][T24187] dump_stack+0x15/0x1b [ 441.826718][T24187] should_fail_ex+0x265/0x280 [ 441.826803][T24185] tipc: Started in network mode [ 441.826818][T24187] should_fail+0xb/0x20 [ 441.826835][T24187] should_fail_usercopy+0x1a/0x20 [ 441.826860][T24187] copy_fpstate_to_sigframe+0x628/0x7d0 [ 441.826909][T24187] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 441.826964][T24187] ? x86_task_fpu+0x36/0x60 [ 441.826997][T24187] get_sigframe+0x34d/0x490 [ 441.827019][T24187] ? get_signal+0xdc7/0xf70 [ 441.827046][T24187] x64_setup_rt_frame+0xa8/0x580 [ 441.827108][T24187] arch_do_signal_or_restart+0x23e/0x440 [ 441.827171][T24187] exit_to_user_mode_loop+0x77/0x110 [ 441.827279][T24187] do_syscall_64+0x1d6/0x200 [ 441.827303][T24187] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 441.827444][T24187] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 441.827482][T24187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.827506][T24187] RIP: 0033:0x7f30d1a8f6c9 [ 441.827523][T24187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.827543][T24187] RSP: 002b:00007f30d04ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 441.827638][T24187] RAX: fffffffffffffff2 RBX: 00007f30d1ce5fa0 RCX: 00007f30d1a8f6c9 [ 441.827653][T24187] RDX: 00000000000000a4 RSI: 00002000000004c0 RDI: 0000000000000002 [ 441.827667][T24187] RBP: 00007f30d04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 441.827691][T24187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.827705][T24187] R13: 00007f30d1ce6038 R14: 00007f30d1ce5fa0 R15: 00007ffeb558e668 [ 441.827725][T24187] [ 441.862756][T24188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7399'. [ 441.862858][T24185] tipc: Node identity 720f5b21a36d, cluster identity 4711 [ 441.983142][T24195] netlink: 464 bytes leftover after parsing attributes in process `syz.5.7400'. [ 441.986630][T24185] tipc: Enabled bearer , priority 0 [ 442.061695][T24193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.068933][T24193] IPv6: NLM_F_CREATE should be set when creating new route [ 442.077236][T24194] tipc: Disabling bearer [ 442.105592][T24199] smc: net device bond0 applied user defined pnetid S [ 442.115119][T24199] smc: net device bond0 erased user defined pnetid S [ 442.159326][T24201] vhci_hcd: invalid port number 96 [ 442.164503][T24201] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 442.188730][T24203] vhci_hcd: invalid port number 96 [ 442.193862][T24203] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 442.222131][T24207] bridge0: port 1(gretap0) entered blocking state [ 442.228713][T24207] bridge0: port 1(gretap0) entered disabled state [ 442.235220][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7411'. [ 442.235726][T24207] gretap0: entered allmulticast mode [ 442.251722][T24207] gretap0: entered promiscuous mode [ 442.257571][T24207] bridge0: port 1(gretap0) entered blocking state [ 442.264001][T24207] bridge0: port 1(gretap0) entered forwarding state [ 442.280926][T24207] gretap0: left allmulticast mode [ 442.285977][T24207] gretap0: left promiscuous mode [ 442.291083][T24207] bridge0: port 1(gretap0) entered disabled state [ 442.399535][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7415'. [ 442.410956][T24219] macvtap3: entered promiscuous mode [ 442.416231][T24219] team0: entered promiscuous mode [ 442.421329][T24219] macvtap3: entered allmulticast mode [ 442.426680][T24219] team0: entered allmulticast mode [ 442.431877][T24219] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 442.443172][T24219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7415'. [ 442.452166][T24219] team0: left allmulticast mode [ 442.456996][T24219] team0: left promiscuous mode [ 442.642573][T24222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7416'. [ 444.064936][T24262] FAULT_INJECTION: forcing a failure. [ 444.064936][T24262] name failslab, interval 1, probability 0, space 0, times 0 [ 444.077591][T24262] CPU: 0 UID: 0 PID: 24262 Comm: syz.3.7432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 444.077628][T24262] Tainted: [W]=WARN [ 444.077701][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.077721][T24262] Call Trace: [ 444.077729][T24262] [ 444.077736][T24262] __dump_stack+0x1d/0x30 [ 444.077758][T24262] dump_stack_lvl+0xe8/0x140 [ 444.077778][T24262] dump_stack+0x15/0x1b [ 444.077876][T24262] should_fail_ex+0x265/0x280 [ 444.077896][T24262] should_failslab+0x8c/0xb0 [ 444.077926][T24262] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 444.077988][T24262] ? __alloc_skb+0x101/0x320 [ 444.078019][T24262] __alloc_skb+0x101/0x320 [ 444.078047][T24262] ? audit_log_start+0x342/0x720 [ 444.078071][T24262] audit_log_start+0x3a0/0x720 [ 444.078146][T24262] ? kstrtouint+0x76/0xc0 [ 444.078221][T24262] audit_seccomp+0x48/0x100 [ 444.078261][T24262] ? __seccomp_filter+0x82d/0x1250 [ 444.078292][T24262] __seccomp_filter+0x83e/0x1250 [ 444.078368][T24262] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 444.078407][T24262] ? vfs_write+0x7e8/0x960 [ 444.078465][T24262] __secure_computing+0x82/0x150 [ 444.078498][T24262] syscall_trace_enter+0xcf/0x1e0 [ 444.078594][T24262] do_syscall_64+0xac/0x200 [ 444.078619][T24262] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 444.078722][T24262] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 444.078763][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.078842][T24262] RIP: 0033:0x7f30d1a8f6c9 [ 444.078857][T24262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.078875][T24262] RSP: 002b:00007f30d04ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ea [ 444.078895][T24262] RAX: ffffffffffffffda RBX: 00007f30d1ce5fa0 RCX: 00007f30d1a8f6c9 [ 444.078908][T24262] RDX: 0000000000000021 RSI: 00000000000002c6 RDI: 00000000000002c6 [ 444.078921][T24262] RBP: 00007f30d04ef090 R08: 0000000000000000 R09: 0000000000000000 [ 444.078937][T24262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.078997][T24262] R13: 00007f30d1ce6038 R14: 00007f30d1ce5fa0 R15: 00007ffeb558e668 [ 444.079015][T24262] [ 444.313369][T24265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7433'. [ 444.332099][T24265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.340607][T24265] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 444.387849][T24274] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.7437'. [ 444.397194][T24274] netlink: zone id is out of range [ 444.402385][T24274] netlink: zone id is out of range [ 444.407887][T24274] netlink: zone id is out of range [ 444.420979][T24274] netlink: set zone limit has 8 unknown bytes [ 444.429018][T24274] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 444.435537][T24274] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.443055][T24274] vhci_hcd vhci_hcd.0: Device attached [ 444.470426][T24282] 9pnet: Could not find request transport: f [ 444.586111][T24290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=24290 comm=syz.3.7442 [ 444.687518][ T1067] usb 5-1: new high-speed USB device number 10 using vhci_hcd [ 444.757932][T24300] smc: net device bond0 applied user defined pnetid S [ 444.765091][T24300] smc: net device bond0 erased user defined pnetid S [ 444.971590][T24277] vhci_hcd: connection reset by peer [ 444.982327][ T12] vhci_hcd: stop threads [ 444.986580][ T12] vhci_hcd: release socket [ 444.991030][ T12] vhci_hcd: disconnect device [ 445.101419][T24311] bridge0: port 1(gretap0) entered blocking state [ 445.107969][T24311] bridge0: port 1(gretap0) entered disabled state [ 445.114624][T24311] gretap0: entered allmulticast mode [ 445.120461][T24311] gretap0: entered promiscuous mode [ 445.126076][T24311] bridge0: port 1(gretap0) entered blocking state [ 445.132510][T24311] bridge0: port 1(gretap0) entered forwarding state [ 445.142609][T24311] gretap0: left allmulticast mode [ 445.147744][T24311] gretap0: left promiscuous mode [ 445.152782][T24311] bridge0: port 1(gretap0) entered disabled state [ 445.216056][T24315] pimreg: entered allmulticast mode [ 445.610177][ T29] kauditd_printk_skb: 718 callbacks suppressed [ 445.610191][ T29] audit: type=1326 audit(1762815614.791:111675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.646343][ T29] audit: type=1326 audit(1762815614.791:111676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.670010][ T29] audit: type=1326 audit(1762815614.791:111677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.692427][T24325] netlink: zone id is out of range [ 445.693666][ T29] audit: type=1326 audit(1762815614.791:111678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.698796][T24325] netlink: zone id is out of range [ 445.699029][T24325] netlink: zone id is out of range [ 445.722503][ T29] audit: type=1326 audit(1762815614.791:111679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.735521][T24325] netlink: set zone limit has 8 unknown bytes [ 445.756519][ T29] audit: type=1326 audit(1762815614.791:111680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.785065][T24325] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 445.786174][ T29] audit: type=1326 audit(1762815614.791:111681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.792631][T24325] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.792735][T24325] vhci_hcd vhci_hcd.0: Device attached [ 445.816229][ T29] audit: type=1326 audit(1762815614.791:111682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.852780][ T29] audit: type=1326 audit(1762815614.791:111683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.876394][ T29] audit: type=1326 audit(1762815614.791:111684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24320 comm="syz.3.7455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 445.905264][T24327] vhci_hcd: connection closed [ 445.905569][ T12] vhci_hcd: stop threads [ 445.914496][ T12] vhci_hcd: release socket [ 445.918967][ T12] vhci_hcd: disconnect device [ 445.949426][T24330] vhci_hcd: invalid port number 96 [ 445.954597][T24330] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 446.043837][T24340] FAULT_INJECTION: forcing a failure. [ 446.043837][T24340] name failslab, interval 1, probability 0, space 0, times 0 [ 446.056468][T24340] CPU: 1 UID: 0 PID: 24340 Comm: syz.2.7463 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 446.056549][T24340] Tainted: [W]=WARN [ 446.056553][T24340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.056561][T24340] Call Trace: [ 446.056566][T24340] [ 446.056571][T24340] __dump_stack+0x1d/0x30 [ 446.056586][T24340] dump_stack_lvl+0xe8/0x140 [ 446.056623][T24340] dump_stack+0x15/0x1b [ 446.056634][T24340] should_fail_ex+0x265/0x280 [ 446.056647][T24340] should_failslab+0x8c/0xb0 [ 446.056665][T24340] kmem_cache_alloc_noprof+0x50/0x480 [ 446.056738][T24340] ? alloc_empty_file+0x76/0x200 [ 446.056749][T24340] ? mntput+0x4b/0x80 [ 446.056760][T24340] alloc_empty_file+0x76/0x200 [ 446.056772][T24340] path_openat+0x68/0x2170 [ 446.056854][T24340] ? _parse_integer_limit+0x170/0x190 [ 446.056880][T24340] ? kstrtoull+0x111/0x140 [ 446.056899][T24340] ? kstrtouint+0x76/0xc0 [ 446.056984][T24340] do_filp_open+0x109/0x230 [ 446.057019][T24340] do_sys_openat2+0xa6/0x110 [ 446.057095][T24340] __x64_sys_openat+0xf2/0x120 [ 446.057153][T24340] x64_sys_call+0x2eab/0x3000 [ 446.057167][T24340] do_syscall_64+0xd2/0x200 [ 446.057181][T24340] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 446.057199][T24340] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.057230][T24340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.057272][T24340] RIP: 0033:0x7fd1d9baf6c9 [ 446.057282][T24340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.057294][T24340] RSP: 002b:00007fd1d860f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.057306][T24340] RAX: ffffffffffffffda RBX: 00007fd1d9e05fa0 RCX: 00007fd1d9baf6c9 [ 446.057337][T24340] RDX: 0000000000002000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 446.057345][T24340] RBP: 00007fd1d860f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.057352][T24340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.057360][T24340] R13: 00007fd1d9e06038 R14: 00007fd1d9e05fa0 R15: 00007ffe8ad22f18 [ 446.057371][T24340] [ 446.296757][T24344] smc: net device bond0 applied user defined pnetid S [ 446.303844][T24344] smc: net device bond0 erased user defined pnetid S [ 446.576779][T24349] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 446.579871][ T9] vhci_hcd: vhci_device speed not set [ 446.595813][T24349] netlink: 'syz.3.7467': attribute type 10 has an invalid length. [ 446.605856][T24349] __nla_validate_parse: 4 callbacks suppressed [ 446.605868][T24349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7467'. [ 447.225366][T24361] smc: net device bond0 applied user defined pnetid S [ 447.232671][T24361] smc: net device bond0 erased user defined pnetid S [ 447.564979][T24364] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 447.571514][T24364] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 447.579097][T24364] vhci_hcd vhci_hcd.0: Device attached [ 447.606254][T24371] pimreg: entered allmulticast mode [ 447.612239][T24365] vhci_hcd: connection closed [ 447.612601][ T1445] vhci_hcd: stop threads [ 447.621633][ T1445] vhci_hcd: release socket [ 447.626083][ T1445] vhci_hcd: disconnect device [ 447.654059][T24371] sd 0:0:1:0: device reset [ 447.671393][T24369] pimreg: left allmulticast mode [ 447.737331][T24378] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 447.781693][T24380] netlink: 'syz.0.7479': attribute type 10 has an invalid length. [ 447.789543][T24380] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7479'. [ 447.888233][T24391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7484'. [ 447.963599][T24381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7480'. [ 448.162342][T24399] netlink: 464 bytes leftover after parsing attributes in process `syz.0.7485'. [ 448.271366][T24405] sctp: [Deprecated]: syz.3.7489 (pid 24405) Use of int in max_burst socket option deprecated. [ 448.271366][T24405] Use struct sctp_assoc_value instead [ 448.305599][T24405] netlink: 'syz.3.7489': attribute type 10 has an invalid length. [ 448.305982][T24408] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7486'. [ 448.348197][T24405] team0: Port device dummy0 added [ 448.427254][T24418] netlink: 'syz.2.7493': attribute type 10 has an invalid length. [ 448.435162][T24418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7493'. [ 448.522702][T24427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7495'. [ 448.522718][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7495'. [ 448.522739][T24427] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7495'. [ 448.695475][T24434] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.827820][T24439] vhci_hcd: invalid port number 96 [ 448.832978][T24439] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 448.898645][T24446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.910774][T24449] 9pnet_fd: Insufficient options for proto=fd [ 448.920349][T24443] loop1: detected capacity change from 0 to 1024 [ 448.947668][T24443] EXT4-fs: Ignoring removed orlov option [ 448.967039][T24451] netlink: 'syz.2.7506': attribute type 10 has an invalid length. [ 448.967547][T24443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.999245][T24447] smc: net device bond0 applied user defined pnetid S [ 449.018895][T24447] smc: net device bond0 erased user defined pnetid S [ 449.045605][T24443] smc: net device bond0 applied user defined pnetid S [ 449.073133][T24443] smc: net device bond0 erased user defined pnetid S [ 449.574638][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.640788][T24468] 9pnet: Could not find request transport: f [ 449.777464][ T1067] vhci_hcd: vhci_device speed not set [ 449.789904][T24475] vhci_hcd: invalid port number 96 [ 449.795040][T24475] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 449.820735][T24479] 9pnet_fd: Insufficient options for proto=fd [ 449.917116][T24489] xt_hashlimit: max too large, truncated to 1048576 [ 450.030736][T24495] loop1: detected capacity change from 0 to 1024 [ 450.051987][T24495] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 450.058510][T24495] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 450.066082][T24495] vhci_hcd vhci_hcd.0: Device attached [ 450.081915][T24496] vhci_hcd: connection closed [ 450.082307][ T31] vhci_hcd: stop threads [ 450.091381][ T31] vhci_hcd: release socket [ 450.095874][ T31] vhci_hcd: disconnect device [ 450.182617][T24504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 450.288631][T24510] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 450.299608][T24510] block device autoloading is deprecated and will be removed. [ 450.307115][T24508] vhci_hcd: invalid port number 96 [ 450.312250][T24508] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 450.334921][T24512] netlink: 'syz.0.7530': attribute type 21 has an invalid length. [ 450.343197][T24512] netlink: 'syz.0.7530': attribute type 1 has an invalid length. [ 450.347628][T24516] 9pnet_fd: Insufficient options for proto=fd [ 450.376371][T24519] bridge0: port 1(gretap0) entered blocking state [ 450.382849][T24519] bridge0: port 1(gretap0) entered disabled state [ 450.389584][T24519] gretap0: entered allmulticast mode [ 450.395678][T24519] gretap0: entered promiscuous mode [ 450.401216][T24519] bridge0: port 1(gretap0) entered blocking state [ 450.407677][T24519] bridge0: port 1(gretap0) entered forwarding state [ 450.416310][T24519] gretap0: left allmulticast mode [ 450.421463][T24519] gretap0: left promiscuous mode [ 450.426647][T24519] bridge0: port 1(gretap0) entered disabled state [ 450.456086][T24524] bridge0: port 1(gretap0) entered blocking state [ 450.462636][T24524] bridge0: port 1(gretap0) entered disabled state [ 450.469521][T24524] gretap0: entered allmulticast mode [ 450.475634][T24524] gretap0: entered promiscuous mode [ 450.481313][T24524] bridge0: port 1(gretap0) entered blocking state [ 450.487776][T24524] bridge0: port 1(gretap0) entered forwarding state [ 450.498082][T24524] gretap0: left allmulticast mode [ 450.503128][T24524] gretap0: left promiscuous mode [ 450.508251][T24524] bridge0: port 1(gretap0) entered disabled state [ 450.564068][T24534] bridge0: port 1(gretap0) entered blocking state [ 450.570571][T24534] bridge0: port 1(gretap0) entered disabled state [ 450.577191][T24534] gretap0: entered allmulticast mode [ 450.582914][T24534] gretap0: entered promiscuous mode [ 450.588513][T24534] bridge0: port 1(gretap0) entered blocking state [ 450.595017][T24534] bridge0: port 1(gretap0) entered forwarding state [ 450.604321][T24534] gretap0: left allmulticast mode [ 450.609451][T24534] gretap0: left promiscuous mode [ 450.614626][T24534] bridge0: port 1(gretap0) entered disabled state [ 450.621698][ T29] kauditd_printk_skb: 914 callbacks suppressed [ 450.621712][ T29] audit: type=1326 audit(1762815619.801:112599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f0016567 code=0x7ffc0000 [ 450.652108][ T29] audit: type=1326 audit(1762815619.841:112600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4effbb779 code=0x7ffc0000 [ 450.675684][ T29] audit: type=1326 audit(1762815619.841:112601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f0016567 code=0x7ffc0000 [ 450.699314][ T29] audit: type=1326 audit(1762815619.841:112602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4effbb779 code=0x7ffc0000 [ 450.722877][ T29] audit: type=1326 audit(1762815619.841:112603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff4f001f6c9 code=0x7ffc0000 [ 450.746713][ T29] audit: type=1326 audit(1762815619.931:112604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f0016567 code=0x7ffc0000 [ 450.770351][ T29] audit: type=1326 audit(1762815619.931:112605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4effbb779 code=0x7ffc0000 [ 450.801533][T24538] vhci_hcd: invalid port number 96 [ 450.806689][T24538] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 450.814361][T24541] 9pnet_fd: Insufficient options for proto=fd [ 450.826581][ T29] audit: type=1326 audit(1762815619.931:112606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7ff4f001f6c9 code=0x7ffc0000 [ 450.850431][ T29] audit: type=1326 audit(1762815619.931:112607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4f0016567 code=0x7ffc0000 [ 450.874014][ T29] audit: type=1326 audit(1762815619.931:112608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24486 comm="syz.5.7521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff4effbb779 code=0x7ffc0000 [ 450.977213][T24558] siw: device registration error -23 [ 451.013877][T24566] vhci_hcd: invalid port number 121 [ 451.019333][T24566] vhci_hcd: default hub control req: 4000 v0051 i0079 l0 [ 451.059003][T24570] vhci_hcd: invalid port number 96 [ 451.064145][T24570] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 451.117249][T24574] 9pnet_fd: Insufficient options for proto=fd [ 451.313432][T24591] smc: net device bond0 applied user defined pnetid S [ 451.321961][T24591] smc: net device bond0 erased user defined pnetid S [ 451.400173][T24593] loop1: detected capacity change from 0 to 4096 [ 451.500411][T24593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.550673][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.879446][T24608] vhci_hcd: invalid port number 96 [ 451.884589][T24608] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 451.919693][T24612] __nla_validate_parse: 32 callbacks suppressed [ 451.919770][T24612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7571'. [ 452.110614][T24620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7575'. [ 452.244659][T24628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7577'. [ 452.461813][T24636] loop1: detected capacity change from 0 to 8192 [ 452.499535][T24636] loop1: p1 < > p2 < > p3 p4 < > [ 452.504626][T24636] loop1: partition table partially beyond EOD, truncated [ 452.519909][T24636] loop1: p1 start 67108864 is beyond EOD, truncated [ 452.535389][T24636] loop1: p3 start 100859904 is beyond EOD, truncated [ 452.685066][T24644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7581'. [ 452.849493][T24647] vhci_hcd: invalid port number 96 [ 452.854622][T24647] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 452.876709][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7585'. [ 452.989309][T24658] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.7588'. [ 452.998943][T24658] net_ratelimit: 2 callbacks suppressed [ 452.998972][T24658] netlink: zone id is out of range [ 453.009653][T24658] netlink: zone id is out of range [ 453.015191][T24658] netlink: zone id is out of range [ 453.028909][T24658] netlink: set zone limit has 8 unknown bytes [ 453.037702][T24658] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 453.040392][T24653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7586'. [ 453.044215][T24658] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 453.060715][T24658] vhci_hcd vhci_hcd.0: Device attached [ 453.141904][T24662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7589'. [ 453.209942][T24666] FAULT_INJECTION: forcing a failure. [ 453.209942][T24666] name failslab, interval 1, probability 0, space 0, times 0 [ 453.222639][T24666] CPU: 0 UID: 0 PID: 24666 Comm: syz.2.7591 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.222673][T24666] Tainted: [W]=WARN [ 453.222680][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 453.222695][T24666] Call Trace: [ 453.222782][T24666] [ 453.222790][T24666] __dump_stack+0x1d/0x30 [ 453.222817][T24666] dump_stack_lvl+0xe8/0x140 [ 453.222843][T24666] dump_stack+0x15/0x1b [ 453.222863][T24666] should_fail_ex+0x265/0x280 [ 453.222883][T24666] ? audit_log_d_path+0x8d/0x150 [ 453.222905][T24666] should_failslab+0x8c/0xb0 [ 453.222961][T24666] __kmalloc_cache_noprof+0x4c/0x4a0 [ 453.222995][T24666] audit_log_d_path+0x8d/0x150 [ 453.223080][T24666] audit_log_d_path_exe+0x42/0x70 [ 453.223141][T24666] audit_log_task+0x1e9/0x250 [ 453.223176][T24666] ? kstrtouint+0x76/0xc0 [ 453.223235][T24666] audit_seccomp+0x61/0x100 [ 453.223314][T24666] ? __seccomp_filter+0x82d/0x1250 [ 453.223351][T24666] __seccomp_filter+0x83e/0x1250 [ 453.223455][T24666] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 453.223489][T24666] ? vfs_write+0x7e8/0x960 [ 453.223588][T24666] __secure_computing+0x82/0x150 [ 453.223627][T24666] syscall_trace_enter+0xcf/0x1e0 [ 453.223658][T24666] do_syscall_64+0xac/0x200 [ 453.223680][T24666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 453.223713][T24666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 453.223748][T24666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.223818][T24666] RIP: 0033:0x7fd1d9baf6c9 [ 453.223834][T24666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.223903][T24666] RSP: 002b:00007fd1d860f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 453.223926][T24666] RAX: ffffffffffffffda RBX: 00007fd1d9e05fa0 RCX: 00007fd1d9baf6c9 [ 453.223943][T24666] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 453.223966][T24666] RBP: 00007fd1d860f090 R08: 0000000000000000 R09: 0000000000000000 [ 453.223980][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.223993][T24666] R13: 00007fd1d9e06038 R14: 00007fd1d9e05fa0 R15: 00007ffe8ad22f18 [ 453.224011][T24666] [ 453.482253][T24672] bridge0: port 1(gretap0) entered blocking state [ 453.488826][T24672] bridge0: port 1(gretap0) entered disabled state [ 453.500066][T24672] gretap0: entered allmulticast mode [ 453.507377][T24672] gretap0: entered promiscuous mode [ 453.514475][T24672] bridge0: port 1(gretap0) entered blocking state [ 453.520933][T24672] bridge0: port 1(gretap0) entered forwarding state [ 453.530708][T24672] gretap0: left allmulticast mode [ 453.535762][T24672] gretap0: left promiscuous mode [ 453.541011][T24672] bridge0: port 1(gretap0) entered disabled state [ 453.623711][T24695] 9pnet_fd: Insufficient options for proto=fd [ 453.687462][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7599'. [ 453.755953][T24659] vhci_hcd: connection closed [ 453.756464][ T1445] vhci_hcd: stop threads [ 453.765373][ T1445] vhci_hcd: release socket [ 453.769827][ T1445] vhci_hcd: disconnect device [ 453.794166][T24702] bridge0: port 1(gretap0) entered blocking state [ 453.800692][T24702] bridge0: port 1(gretap0) entered disabled state [ 453.807609][T24702] gretap0: entered allmulticast mode [ 453.813715][T24702] gretap0: entered promiscuous mode [ 453.819382][T24702] bridge0: port 1(gretap0) entered blocking state [ 453.825856][T24702] bridge0: port 1(gretap0) entered forwarding state [ 453.834925][T24702] gretap0: left allmulticast mode [ 453.840098][T24702] gretap0: left promiscuous mode [ 453.845261][T24702] bridge0: port 1(gretap0) entered disabled state [ 453.858082][T24705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7603'. [ 454.008487][T24713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 454.039438][T24713] netlink: 'syz.0.7608': attribute type 10 has an invalid length. [ 454.153885][T24720] FAULT_INJECTION: forcing a failure. [ 454.153885][T24720] name failslab, interval 1, probability 0, space 0, times 0 [ 454.166557][T24720] CPU: 1 UID: 0 PID: 24720 Comm: syz.0.7611 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.166603][T24720] Tainted: [W]=WARN [ 454.166609][T24720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 454.166623][T24720] Call Trace: [ 454.166629][T24720] [ 454.166714][T24720] __dump_stack+0x1d/0x30 [ 454.166736][T24720] dump_stack_lvl+0xe8/0x140 [ 454.166757][T24720] dump_stack+0x15/0x1b [ 454.166775][T24720] should_fail_ex+0x265/0x280 [ 454.166799][T24720] should_failslab+0x8c/0xb0 [ 454.166864][T24720] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 454.166902][T24720] ? __alloc_skb+0x101/0x320 [ 454.166960][T24720] __alloc_skb+0x101/0x320 [ 454.166991][T24720] netlink_alloc_large_skb+0xbf/0xf0 [ 454.167023][T24720] netlink_sendmsg+0x3cf/0x6b0 [ 454.167046][T24720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.167113][T24720] __sock_sendmsg+0x145/0x180 [ 454.167138][T24720] ____sys_sendmsg+0x31e/0x4e0 [ 454.167177][T24720] ___sys_sendmsg+0x17b/0x1d0 [ 454.167227][T24720] __x64_sys_sendmsg+0xd4/0x160 [ 454.167249][T24720] x64_sys_call+0x191e/0x3000 [ 454.167272][T24720] do_syscall_64+0xd2/0x200 [ 454.167297][T24720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 454.167332][T24720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 454.167411][T24720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.167439][T24720] RIP: 0033:0x7f6ae733f6c9 [ 454.167454][T24720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.167522][T24720] RSP: 002b:00007f6ae5da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.167545][T24720] RAX: ffffffffffffffda RBX: 00007f6ae7595fa0 RCX: 00007f6ae733f6c9 [ 454.167561][T24720] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 454.167573][T24720] RBP: 00007f6ae5da7090 R08: 0000000000000000 R09: 0000000000000000 [ 454.167586][T24720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.167598][T24720] R13: 00007f6ae7596038 R14: 00007f6ae7595fa0 R15: 00007ffe28631278 [ 454.167677][T24720] [ 454.403523][T24723] 9pnet: Could not find request transport: f [ 454.429462][T24726] siw: device registration error -23 [ 454.517092][T24732] smc: net device bond0 applied user defined pnetid S [ 454.524212][T24732] smc: net device bond0 erased user defined pnetid S [ 454.614202][T24736] netlink: 'syz.2.7615': attribute type 12 has an invalid length. [ 454.675941][T24738] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 454.756103][T24740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.796521][T24748] smc: net device bond0 applied user defined pnetid S [ 454.805336][T24748] smc: net device bond0 erased user defined pnetid S [ 454.901078][T24759] block device autoloading is deprecated and will be removed. [ 454.943903][T24758] smc: net device bond0 applied user defined pnetid S [ 454.964656][T24758] smc: net device bond0 erased user defined pnetid S [ 455.552555][T24775] smc: net device bond0 applied user defined pnetid S [ 455.576039][T24775] smc: net device bond0 erased user defined pnetid S [ 456.027613][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 456.027651][ T29] audit: type=1326 audit(1762815625.211:113266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.084433][T24784] loop1: detected capacity change from 0 to 8192 [ 456.090760][T24786] smc: net device bond0 applied user defined pnetid S [ 456.091109][T24786] smc: net device bond0 erased user defined pnetid S [ 456.114435][ T29] audit: type=1326 audit(1762815625.211:113267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.138145][ T29] audit: type=1326 audit(1762815625.241:113268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.161896][ T29] audit: type=1326 audit(1762815625.241:113269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.185610][ T29] audit: type=1326 audit(1762815625.241:113270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.209389][ T29] audit: type=1326 audit(1762815625.241:113271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.233037][ T29] audit: type=1326 audit(1762815625.241:113272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.256751][ T29] audit: type=1326 audit(1762815625.241:113273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.280469][ T29] audit: type=1326 audit(1762815625.251:113274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.304165][ T29] audit: type=1326 audit(1762815625.251:113275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24785 comm="syz.0.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae733f6c9 code=0x7ffc0000 [ 456.386661][T24791] loop1: p1 < > p2 < > p3 p4 < > [ 456.391731][T24791] loop1: partition table partially beyond EOD, truncated [ 456.401779][T24794] netlink: zone id is out of range [ 456.406884][T24794] netlink: zone id is out of range [ 456.422231][T24794] netlink: zone id is out of range [ 456.432225][T24791] loop1: p1 start 67108864 is beyond EOD, truncated [ 456.449692][T24791] loop1: p3 start 100859904 is beyond EOD, truncated [ 456.467897][T24794] netlink: set zone limit has 8 unknown bytes [ 456.474966][T24795] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 456.481475][T24795] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 456.489021][T24795] vhci_hcd vhci_hcd.0: Device attached [ 456.504932][T24784] loop1: p1 < > p2 < > p3 p4 < > [ 456.509997][T24784] loop1: partition table partially beyond EOD, truncated [ 456.528432][T24784] loop1: p1 start 67108864 is beyond EOD, truncated [ 456.543035][T24784] loop1: p3 start 100859904 is beyond EOD, truncated [ 456.807439][ T36] usb 7-1: new low-speed USB device number 9 using vhci_hcd [ 457.028853][T24796] vhci_hcd: connection reset by peer [ 457.037579][ T12] vhci_hcd: stop threads [ 457.041823][ T12] vhci_hcd: release socket [ 457.046245][ T12] vhci_hcd: disconnect device [ 457.051210][T24805] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.109809][T24810] vhci_hcd: invalid port number 96 [ 457.115016][T24810] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 457.189217][T24815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 457.221709][T24819] netlink: 'syz.0.7645': attribute type 10 has an invalid length. [ 457.229840][T24819] __nla_validate_parse: 6 callbacks suppressed [ 457.229855][T24819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7645'. [ 457.273314][T24820] smc: net device bond0 applied user defined pnetid S [ 457.287826][T24820] smc: net device bond0 erased user defined pnetid S [ 457.306361][T24826] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 457.312884][T24826] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.320529][T24826] vhci_hcd vhci_hcd.0: Device attached [ 457.336683][T24827] vhci_hcd: connection closed [ 457.336821][ T1445] vhci_hcd: stop threads [ 457.345773][ T1445] vhci_hcd: release socket [ 457.350244][ T1445] vhci_hcd: disconnect device [ 457.429484][T24833] Cannot find add_set index 0 as target [ 457.487897][T24834] 9pnet_fd: Insufficient options for proto=fd [ 457.964053][T24839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.049100][T24839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.121263][T24844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.153673][T24839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.203920][T24839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.253745][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.264721][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.277670][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.293414][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.322188][T24852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7659'. [ 458.364939][T24857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7661'. [ 458.407708][T24855] team0: Port device dummy0 removed [ 458.423097][T24855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 458.440403][T24860] netlink: 'syz.3.7660': attribute type 10 has an invalid length. [ 458.440429][T24859] bridge0: port 1(gretap0) entered blocking state [ 458.440463][T24859] bridge0: port 1(gretap0) entered disabled state [ 458.440597][T24859] gretap0: entered allmulticast mode [ 458.448316][T24860] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7660'. [ 458.455615][T24859] gretap0: entered promiscuous mode [ 458.482566][T24859] bridge0: port 1(gretap0) entered blocking state [ 458.489092][T24859] bridge0: port 1(gretap0) entered forwarding state [ 458.501932][T24861] gretap0: left allmulticast mode [ 458.507024][T24861] gretap0: left promiscuous mode [ 458.512257][T24861] bridge0: port 1(gretap0) entered disabled state [ 458.586184][T24873] loop2: detected capacity change from 0 to 1024 [ 458.595317][T24873] EXT4-fs: Ignoring removed orlov option [ 458.604882][T24873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.648852][T24873] smc: net device bond0 applied user defined pnetid S [ 458.660259][T24873] smc: net device bond0 erased user defined pnetid S [ 458.694000][T24879] sd 0:0:1:0: device reset [ 458.834846][T24882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 458.879264][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.905527][T24885] loop2: detected capacity change from 0 to 2048 [ 458.912509][T24885] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 458.971485][T24887] serio: Serial port ptm0 [ 459.058806][T24893] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 459.065341][T24893] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 459.072946][T24893] vhci_hcd vhci_hcd.0: Device attached [ 459.104420][T24894] vhci_hcd: connection closed [ 459.104573][ T12] vhci_hcd: stop threads [ 459.113514][ T12] vhci_hcd: release socket [ 459.117959][ T12] vhci_hcd: disconnect device [ 459.180683][T24897] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 459.206204][T24897] netlink: 'syz.2.7674': attribute type 10 has an invalid length. [ 459.214075][T24897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7674'. [ 459.246602][T24900] sd 0:0:1:0: device reset [ 459.310140][T24906] vhci_hcd: invalid port number 96 [ 459.315290][T24906] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 459.351415][T24912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.435509][T24917] loop2: detected capacity change from 0 to 1024 [ 459.442109][T24917] EXT4-fs: Ignoring removed orlov option [ 459.449528][T24917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.473518][T24917] smc: net device bond0 applied user defined pnetid S [ 459.480633][T24917] smc: net device bond0 erased user defined pnetid S [ 459.660851][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.476695][T24939] netlink: 'syz.5.7691': attribute type 1 has an invalid length. [ 460.490826][T24939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 460.546212][ T3539] kernel read not supported for file bpf-prog (pid: 3539 comm: kworker/1:4) [ 460.615866][T24944] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.729585][T24951] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.7696'. [ 460.738926][T24951] netlink: zone id is out of range [ 460.744040][T24951] netlink: zone id is out of range [ 460.746316][T24949] loop2: detected capacity change from 0 to 4096 [ 460.749468][T24951] netlink: zone id is out of range [ 460.771533][T24949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.787388][T24951] netlink: set zone limit has 8 unknown bytes [ 460.797805][T24955] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 460.804322][T24955] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.811868][T24955] vhci_hcd vhci_hcd.0: Device attached [ 460.823123][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.884679][T24961] 9pnet: Could not find request transport: f [ 460.892617][T24963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.901069][T24963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.909931][T24963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7697'. [ 460.945895][T24968] loop2: detected capacity change from 0 to 128 [ 460.975588][T24970] siw: device registration error -23 [ 461.011089][T24972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7703'. [ 461.046390][T24976] loop2: detected capacity change from 0 to 1024 [ 461.053070][T24976] EXT4-fs: Ignoring removed orlov option [ 461.061191][T24976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.076885][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 461.076928][ T29] audit: type=1326 audit(1762815630.261:113931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.086565][T24976] smc: net device bond0 applied user defined pnetid S [ 461.106879][ T29] audit: type=1326 audit(1762815630.261:113932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.120063][T24976] smc: net device bond0 erased user defined pnetid S [ 461.137184][ T29] audit: type=1326 audit(1762815630.261:113933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.167492][ T29] audit: type=1326 audit(1762815630.261:113934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.191276][ T29] audit: type=1326 audit(1762815630.261:113935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.215060][ T29] audit: type=1326 audit(1762815630.261:113936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.238705][ T29] audit: type=1326 audit(1762815630.261:113937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.262488][ T29] audit: type=1326 audit(1762815630.261:113938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.286141][ T29] audit: type=1326 audit(1762815630.261:113939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.310226][ T29] audit: type=1326 audit(1762815630.261:113940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24975 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d9baf6c9 code=0x7ffc0000 [ 461.335339][T24985] xt_CT: You must specify a L4 protocol and not use inversions on it [ 461.361240][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.370752][T24956] vhci_hcd: connection closed [ 461.370853][ T31] vhci_hcd: stop threads [ 461.379822][ T31] vhci_hcd: release socket [ 461.384309][ T31] vhci_hcd: disconnect device [ 461.474324][T24996] block device autoloading is deprecated and will be removed. [ 461.556439][T25001] loop0: detected capacity change from 0 to 128 [ 461.569782][T25003] [syz.5.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820] [ 461.587944][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7714'. [ 461.599980][T25003] netlink: 'syz.5.7712': attribute type 10 has an invalid length. [ 461.607930][T25003] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7712'. [ 461.624375][T25003] geneve1: entered promiscuous mode [ 461.629858][T25003] geneve1: entered allmulticast mode [ 461.640292][T25003] team0: Port device geneve1 added [ 461.668104][T25014] bridge0: port 1(gretap0) entered blocking state [ 461.674545][T25014] bridge0: port 1(gretap0) entered disabled state [ 461.681324][T25014] gretap0: entered allmulticast mode [ 461.687120][T25014] gretap0: entered promiscuous mode [ 461.693132][T25014] bridge0: port 1(gretap0) entered blocking state [ 461.699658][T25014] bridge0: port 1(gretap0) entered forwarding state [ 461.710063][T25014] gretap0: left allmulticast mode [ 461.715095][T25014] gretap0: left promiscuous mode [ 461.720204][T25014] bridge0: port 1(gretap0) entered disabled state [ 461.740857][T25017] loop0: detected capacity change from 0 to 1024 [ 461.748033][T25017] EXT4-fs: Ignoring removed orlov option [ 461.755451][T25017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.776266][T25017] smc: net device bond0 applied user defined pnetid S [ 461.783370][T25017] smc: net device bond0 erased user defined pnetid S [ 461.869412][ T36] usb 7-1: enqueue for inactive port 0 [ 461.874889][ T36] usb 7-1: enqueue for inactive port 0 [ 461.955440][ T36] vhci_hcd: vhci_device speed not set [ 462.280962][T19029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.297193][T25029] __nla_validate_parse: 1 callbacks suppressed [ 462.297298][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7720'. [ 462.373025][T25033] loop0: detected capacity change from 0 to 8192 [ 462.417557][T25033] loop0: p1 < > p2 < > p3 p4 < > [ 462.422630][T25033] loop0: partition table partially beyond EOD, truncated [ 462.429842][T25033] loop0: p1 start 67108864 is beyond EOD, truncated [ 462.436737][T25033] loop0: p3 start 100859904 is beyond EOD, truncated [ 462.616778][T25035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7722'. [ 462.653765][T25039] bridge0: port 1(gretap0) entered blocking state [ 462.660323][T25039] bridge0: port 1(gretap0) entered disabled state [ 462.666993][T25039] gretap0: entered allmulticast mode [ 462.672832][T25039] gretap0: entered promiscuous mode [ 462.678399][T25039] bridge0: port 1(gretap0) entered blocking state [ 462.684833][T25039] bridge0: port 1(gretap0) entered forwarding state [ 462.693848][T25039] gretap0: left allmulticast mode [ 462.698899][T25039] gretap0: left promiscuous mode [ 462.703924][T25039] bridge0: port 1(gretap0) entered disabled state [ 462.881682][T25054] loop1: detected capacity change from 0 to 1024 [ 462.888185][T25049] wireguard0: entered promiscuous mode [ 462.893709][T25049] wireguard0: entered allmulticast mode [ 462.897823][T25054] EXT4-fs: Ignoring removed orlov option [ 462.925123][T25054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.964109][T25055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7729'. [ 463.003576][T25054] smc: net device bond0 applied user defined pnetid S [ 463.022680][T25054] smc: net device bond0 erased user defined pnetid S [ 463.310369][T25065] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 463.341853][T25066] netlink: 'syz.0.7731': attribute type 10 has an invalid length. [ 463.349809][T25066] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7731'. [ 463.372243][T25068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7732'. [ 463.922918][T25075] loop2: detected capacity change from 0 to 8192 [ 463.956241][T25087] loop0: detected capacity change from 0 to 1024 [ 463.973956][T25075] loop2: p1 < > p2 < > p3 p4 < > [ 463.979056][T25075] loop2: partition table partially beyond EOD, truncated [ 463.987550][T25075] loop2: p1 start 67108864 is beyond EOD, truncated [ 463.994532][T25087] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 464.001036][T25087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 464.008621][T25087] vhci_hcd vhci_hcd.0: Device attached [ 464.015034][T25091] bridge0: port 1(gretap0) entered blocking state [ 464.021617][T25091] bridge0: port 1(gretap0) entered disabled state [ 464.028478][T25089] vhci_hcd: connection closed [ 464.028619][ T1445] vhci_hcd: stop threads [ 464.037550][ T1445] vhci_hcd: release socket [ 464.040319][T25088] netlink: 204 bytes leftover after parsing attributes in process `syz.2.7736'. [ 464.042016][ T1445] vhci_hcd: disconnect device [ 464.042173][T25075] loop2: p3 start 100859904 is beyond EOD, [ 464.051273][T25091] gretap0: entered allmulticast mode [ 464.055704][T25075] truncated [ 464.071665][T25091] gretap0: entered promiscuous mode [ 464.077372][T25091] bridge0: port 1(gretap0) entered blocking state [ 464.083831][T25091] bridge0: port 1(gretap0) entered forwarding state [ 464.091627][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.091720][T25093] gretap0: left allmulticast mode [ 464.105599][T25093] gretap0: left promiscuous mode [ 464.110812][T25093] bridge0: port 1(gretap0) entered disabled state [ 464.168959][T25095] loop1: detected capacity change from 0 to 8192 [ 464.179656][T25097] vhci_hcd: invalid port number 96 [ 464.184809][T25097] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 464.203899][T25099] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7742'. [ 464.217624][T25095] loop1: p1 < > p2 < > p3 p4 < > [ 464.222718][T25095] loop1: partition table partially beyond EOD, truncated [ 464.230746][T25095] loop1: p1 start 67108864 is beyond EOD, truncated [ 464.237968][T25095] loop1: p3 start 100859904 is beyond EOD, truncated [ 464.255978][T25095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7740'. [ 464.322771][T25104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7744'. [ 464.417856][T25118] loop2: detected capacity change from 0 to 1024 [ 464.424474][T25118] EXT4-fs: Ignoring removed orlov option [ 464.436599][T25118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.478446][T25118] smc: net device bond0 applied user defined pnetid S [ 464.493012][T25118] smc: net device bond0 erased user defined pnetid S [ 464.506797][T25127] smc: net device bond0 applied user defined pnetid S [ 464.527216][T25127] smc: net device bond0 erased user defined pnetid S [ 464.583040][T25136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7757'. [ 464.649731][T25141] loop0: detected capacity change from 0 to 2048 [ 464.658092][T25141] EXT4-fs (loop0): cluster size (2048) smaller than block size (4096) [ 464.673035][T25143] loop1: detected capacity change from 0 to 128 [ 464.952736][T25158] loop0: detected capacity change from 0 to 1024 [ 464.980099][T25158] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 464.986628][T25158] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 464.994247][T25158] vhci_hcd vhci_hcd.0: Device attached [ 465.039477][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.056032][T25160] loop1: detected capacity change from 0 to 8192 [ 465.066234][T25161] vhci_hcd: connection closed [ 465.067083][ T52] vhci_hcd: stop threads [ 465.076096][ T52] vhci_hcd: release socket [ 465.080512][ T52] vhci_hcd: disconnect device [ 465.117747][T25160] loop1: p1 < > p2 < > p3 p4 < > [ 465.122796][T25160] loop1: partition table partially beyond EOD, truncated [ 465.131703][T25160] loop1: p1 start 67108864 is beyond EOD, truncated [ 465.149196][T25160] loop1: p3 start 100859904 is beyond EOD, truncated [ 465.392830][T25184] netlink: 'syz.3.7775': attribute type 12 has an invalid length. [ 465.569234][T25193] netlink: 'syz.2.7781': attribute type 12 has an invalid length. [ 466.167589][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 466.167603][ T29] audit: type=1326 audit(1762815635.351:114422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.216166][T25211] smc: net device bond0 applied user defined pnetid S [ 466.228003][T25211] smc: net device bond0 erased user defined pnetid S [ 466.228354][ T29] audit: type=1326 audit(1762815635.381:114423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.258399][ T29] audit: type=1326 audit(1762815635.381:114424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.282058][ T29] audit: type=1326 audit(1762815635.381:114425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.305844][ T29] audit: type=1326 audit(1762815635.391:114426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.329498][ T29] audit: type=1326 audit(1762815635.391:114427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.353154][ T29] audit: type=1326 audit(1762815635.391:114428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.376807][ T29] audit: type=1326 audit(1762815635.391:114429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.400513][ T29] audit: type=1326 audit(1762815635.391:114430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.424217][ T29] audit: type=1326 audit(1762815635.391:114431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25210 comm="syz.3.7787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d1a8f6c9 code=0x7ffc0000 [ 466.558202][T25213] loop2: detected capacity change from 0 to 4096 [ 466.565384][T25220] sd 0:0:1:0: device reset [ 466.575407][T25213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.634626][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.720603][T25228] loop2: detected capacity change from 0 to 1024 [ 466.750538][T25224] loop0: detected capacity change from 0 to 8192 [ 466.777141][T25228] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 466.783669][T25228] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 466.791272][T25228] vhci_hcd vhci_hcd.0: Device attached [ 466.807758][T25224] loop0: p1 < > p2 < > p3 p4 < > [ 466.812803][T25224] loop0: partition table partially beyond EOD, truncated [ 466.825351][T25224] loop0: p1 start 67108864 is beyond EOD, truncated [ 466.859929][T25224] loop0: p3 start 100859904 is beyond EOD, truncated [ 466.877564][T25233] vhci_hcd: connection closed [ 466.877706][ T52] vhci_hcd: stop threads [ 466.886596][ T52] vhci_hcd: release socket [ 466.891105][ T52] vhci_hcd: disconnect device [ 467.073958][T25247] netlink: 'syz.1.7797': attribute type 12 has an invalid length. [ 467.099717][T25246] smc: net device bond0 applied user defined pnetid S [ 467.121200][T25246] smc: net device bond0 erased user defined pnetid S [ 467.245197][T25251] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 467.275394][T25251] tipc: Started in network mode [ 467.280426][T25251] tipc: Node identity ac14140f, cluster identity 4711 [ 467.299525][T25251] tipc: New replicast peer: 255.255.255.255 [ 467.305640][T25251] tipc: Enabled bearer , priority 10 [ 467.420642][T25253] loop2: detected capacity change from 0 to 1024 [ 467.436721][T25253] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 467.443269][T25253] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 467.450967][T25253] vhci_hcd vhci_hcd.0: Device attached [ 467.513724][T25254] vhci_hcd: connection closed [ 467.513958][ T3441] vhci_hcd: stop threads [ 467.522919][ T3441] vhci_hcd: release socket [ 467.527315][ T3441] vhci_hcd: disconnect device [ 467.850510][T25259] loop1: detected capacity change from 0 to 4096 [ 467.870087][T25259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.929856][T25263] siw: device registration error -23 [ 467.939098][T23302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.062336][T25271] loop0: detected capacity change from 0 to 8192 [ 468.119842][T25271] loop0: p1 < > p2 < > p3 p4 < > [ 468.120770][T25266] __nla_validate_parse: 8 callbacks suppressed [ 468.120785][T25266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7805'. [ 468.124938][T25271] loop0: partition table partially beyond EOD, truncated [ 468.155897][T25271] loop0: p1 start 67108864 is beyond EOD, truncated [ 468.163741][T25271] loop0: p3 start 100859904 is beyond EOD, truncated [ 468.172236][T25283] bridge0: port 1(gretap0) entered blocking state [ 468.178707][T25283] bridge0: port 1(gretap0) entered disabled state [ 468.185305][T25283] gretap0: entered allmulticast mode [ 468.194728][T25271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7808'. [ 468.204448][T25283] gretap0: entered promiscuous mode [ 468.210111][T25283] bridge0: port 1(gretap0) entered blocking state [ 468.216625][T25283] bridge0: port 1(gretap0) entered forwarding state [ 468.224227][T25285] gretap0: left allmulticast mode [ 468.229305][T25285] gretap0: left promiscuous mode [ 468.234458][T25285] bridge0: port 1(gretap0) entered disabled state [ 468.301740][T25291] vhci_hcd: invalid port number 96 [ 468.306885][T25291] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 468.317439][ T36] tipc: Node number set to 2886997007 [ 468.327208][T25294] siw: device registration error -23 [ 468.338750][T25292] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7810'. [ 468.355024][T25296] bridge0: port 1(gretap0) entered blocking state [ 468.361522][T25296] bridge0: port 1(gretap0) entered disabled state [ 468.365184][T25290] loop0: detected capacity change from 0 to 8192 [ 468.374805][T25296] gretap0: entered allmulticast mode [ 468.381345][T25296] gretap0: entered promiscuous mode [ 468.386879][T25296] bridge0: port 1(gretap0) entered blocking state [ 468.393391][T25296] bridge0: port 1(gretap0) entered forwarding state [ 468.402261][T25296] gretap0: left allmulticast mode [ 468.407300][T25296] gretap0: left promiscuous mode [ 468.407709][T25290] loop0: p1 < > p2 < > p3 p4 < > [ 468.412366][T25296] bridge0: port 1(gretap0) entered disabled state [ 468.417263][T25290] loop0: partition table partially beyond EOD, truncated [ 468.427536][T25290] loop0: p1 start 67108864 is beyond EOD, truncated [ 468.447746][T25290] loop0: p3 start 100859904 is beyond EOD, truncated [ 468.524183][T25290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7815'. [ 468.551107][T25298] loop1: detected capacity change from 0 to 8192 [ 468.566448][T25309] sd 0:0:1:0: device reset [ 468.598090][T25298] loop1: p1 < > p2 < > p3 p4 < > [ 468.603130][T25298] loop1: partition table partially beyond EOD, truncated [ 468.627525][T25298] loop1: p1 start 67108864 is beyond EOD, truncated [ 468.633569][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7823'. [ 468.643387][T25298] loop1: p3 start 100859904 is beyond EOD, truncated [ 468.650415][T25313] loop2: detected capacity change from 0 to 1024 [ 468.656911][T25312] loop0: detected capacity change from 0 to 8192 [ 468.658717][T25313] EXT4-fs: Ignoring removed orlov option [ 468.671113][T25313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.698844][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.710205][T25316] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.7829'. [ 468.720621][T25316] netlink: zone id is out of range [ 468.725732][T25316] netlink: zone id is out of range [ 468.730992][T25318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7828'. [ 468.731364][T25316] netlink: zone id is out of range [ 468.745291][T25312] loop0: p1 < > p2 < > p3 p4 < > [ 468.750421][T25312] loop0: partition table partially beyond EOD, truncated [ 468.752964][T25316] netlink: set zone limit has 8 unknown bytes [ 468.758015][T25312] loop0: p1 start 67108864 is beyond EOD, truncated [ 468.772712][T25316] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 468.779230][T25316] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 468.786757][T25316] vhci_hcd vhci_hcd.0: Device attached [ 468.787331][T25312] loop0: p3 start 100859904 is beyond EOD, truncated [ 468.804690][T25319] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7820'. [ 468.840606][T25312] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7826'. [ 468.910959][T25329] xt_CT: You must specify a L4 protocol and not use inversions on it [ 468.955271][T25334] loop0: detected capacity change from 0 to 2048 [ 469.000803][T25338] vhci_hcd: invalid port number 96 [ 469.006017][T25338] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 469.028226][ T1067] usb 11-1: new high-speed USB device number 5 using vhci_hcd [ 469.146902][T25350] loop2: detected capacity change from 0 to 8192 [ 469.177811][T25350] loop2: p1 < > p2 < > p3 p4 < > [ 469.182853][T25350] loop2: partition table partially beyond EOD, truncated [ 469.190311][T25350] loop2: p1 start 67108864 is beyond EOD, truncated [ 469.197677][T25350] loop2: p3 start 100859904 is beyond EOD, truncated [ 469.220748][T25350] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7843'. [ 469.242579][T25355] smc: net device bond0 applied user defined pnetid S [ 469.249814][T25355] smc: net device bond0 erased user defined pnetid S [ 469.518589][T25320] vhci_hcd: connection reset by peer [ 469.547847][ T42] vhci_hcd: stop threads [ 469.552133][ T42] vhci_hcd: release socket [ 469.556540][ T42] vhci_hcd: disconnect device [ 469.658137][T25364] loop1: detected capacity change from 0 to 2048 [ 469.729497][T25368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.824127][T25371] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 469.831205][T25371] batman_adv: batadv0: Removing interface: veth1_vlan [ 469.838103][T25374] loop2: detected capacity change from 0 to 1024 [ 469.858281][T25374] EXT4-fs: Ignoring removed orlov option [ 469.878537][T25374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.879137][T25378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.935558][T25382] sd 0:0:1:0: device reset [ 469.945365][T25374] smc: net device bond0 applied user defined pnetid S [ 469.952700][T25374] smc: net device bond0 erased user defined pnetid S [ 470.168158][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.202896][T25398] bridge0: port 1(gretap0) entered blocking state [ 470.209436][T25398] bridge0: port 1(gretap0) entered disabled state [ 470.228418][T25394] loop1: detected capacity change from 0 to 2048 [ 470.237955][T25398] gretap0: entered allmulticast mode [ 470.244028][T25398] gretap0: entered promiscuous mode [ 470.249753][T25398] bridge0: port 1(gretap0) entered blocking state [ 470.256258][T25398] bridge0: port 1(gretap0) entered forwarding state [ 470.264985][T25401] gretap0: left allmulticast mode [ 470.270238][T25401] gretap0: left promiscuous mode [ 470.275275][T25401] bridge0: port 1(gretap0) entered disabled state [ 470.336881][T25409] sd 0:0:1:0: device reset [ 470.384126][T25416] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 470.385407][T25411] smc: net device bond0 applied user defined pnetid S [ 470.390950][T25416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 470.391099][T25416] vhci_hcd vhci_hcd.0: Device attached [ 470.404356][T25411] smc: net device bond0 erased user defined pnetid S [ 470.438324][T25417] vhci_hcd: connection closed [ 470.441391][ T42] vhci_hcd: stop threads [ 470.450453][ T42] vhci_hcd: release socket [ 470.454940][ T42] vhci_hcd: disconnect device [ 470.471356][T25420] 9pnet: Could not find request transport: f [ 470.562520][T25426] loop2: detected capacity change from 0 to 1024 [ 470.593380][T25426] EXT4-fs: Ignoring removed orlov option [ 470.632137][T25426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.715580][T25426] smc: net device bond0 applied user defined pnetid S [ 470.726000][T25432] loop1: detected capacity change from 0 to 2048 [ 470.746337][T25426] smc: net device bond0 erased user defined pnetid S [ 470.754272][T25432] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 470.834859][T25426] ================================================================== [ 470.842977][T25426] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 470.851247][T25426] [ 470.853557][T25426] write to 0xffff8881006285f8 of 4 bytes by task 25433 on cpu 1: [ 470.861261][T25426] writeback_single_inode+0x150/0x3f0 [ 470.866640][T25426] sync_inode_metadata+0x5b/0x90 [ 470.871585][T25426] generic_buffers_fsync_noflush+0xd9/0x120 [ 470.877479][T25426] ext4_sync_file+0x1ab/0x690 [ 470.882147][T25426] vfs_fsync_range+0x10d/0x130 [ 470.886906][T25426] ext4_buffered_write_iter+0x34f/0x3c0 [ 470.892447][T25426] ext4_file_write_iter+0x387/0xf60 [ 470.897634][T25426] iter_file_splice_write+0x666/0xa60 [ 470.902998][T25426] direct_splice_actor+0x156/0x2a0 [ 470.908102][T25426] splice_direct_to_actor+0x312/0x680 [ 470.913468][T25426] do_splice_direct+0xda/0x150 [ 470.918223][T25426] do_sendfile+0x380/0x650 [ 470.922640][T25426] __x64_sys_sendfile64+0x105/0x150 [ 470.927836][T25426] x64_sys_call+0x2bb4/0x3000 [ 470.932503][T25426] do_syscall_64+0xd2/0x200 [ 470.936996][T25426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.942882][T25426] [ 470.945192][T25426] read to 0xffff8881006285f8 of 4 bytes by task 25426 on cpu 0: [ 470.952804][T25426] __mark_inode_dirty+0x191/0x750 [ 470.957831][T25426] ext4_write_inline_data_end+0x3e5/0x5f0 [ 470.963552][T25426] ext4_write_end+0x3d7/0x730 [ 470.968223][T25426] generic_perform_write+0x312/0x490 [ 470.973501][T25426] ext4_buffered_write_iter+0x1ee/0x3c0 [ 470.979035][T25426] ext4_file_write_iter+0x387/0xf60 [ 470.984221][T25426] iter_file_splice_write+0x666/0xa60 [ 470.989583][T25426] direct_splice_actor+0x156/0x2a0 [ 470.994685][T25426] splice_direct_to_actor+0x312/0x680 [ 471.000049][T25426] do_splice_direct+0xda/0x150 [ 471.004804][T25426] do_sendfile+0x380/0x650 [ 471.009223][T25426] __x64_sys_sendfile64+0x105/0x150 [ 471.014420][T25426] x64_sys_call+0x2bb4/0x3000 [ 471.019087][T25426] do_syscall_64+0xd2/0x200 [ 471.023580][T25426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.029461][T25426] [ 471.031766][T25426] value changed: 0x00000070 -> 0x00000002 [ 471.037464][T25426] [ 471.039769][T25426] Reported by Kernel Concurrency Sanitizer on: [ 471.045906][T25426] CPU: 0 UID: 0 PID: 25426 Comm: syz.2.7874 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 471.057269][T25426] Tainted: [W]=WARN [ 471.061055][T25426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 471.071095][T25426] ================================================================== [ 471.403177][T19992] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.177443][ T1067] vhci_hcd: vhci_device speed not set