last executing test programs: 22m47.380628661s ago: executing program 1 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x8, 0xb, 0x49, @ipv4={'\x00', '\xff\xff', @local}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x10, 0x5, 0xf75e}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 22m47.241578837s ago: executing program 1 (id=1357): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) 22m47.1649775s ago: executing program 1 (id=1358): socket$unix(0x1, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22m47.130154851s ago: executing program 1 (id=1360): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000005b40)={0x0, 0x0, &(0x7f0000005c00)=[{&(0x7f0000005b80)="07725017effce197099144c0a7c7b4ff7a01f684725bc5658a22a40fb730cdf7d0d4edd00c11c2d9bb5afc9fd8e0156de9780b277b655d7953efcc4b138a7b7b14bc00fb00c67d3ad34bf5bee0d77c47974947474b9c4755", 0x58}], 0x1}, 0x4040004) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2c3}}, '\x00'}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x402800, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r1, &(0x7f0000000340), 0x4) 22m47.039991385s ago: executing program 1 (id=1363): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100002, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000a00), &(0x7f00000001c0)=r0}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x40, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x4008004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900), 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r6}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0) 22m46.978424818s ago: executing program 1 (id=1365): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e92f4ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 22m31.942771298s ago: executing program 32 (id=1365): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e92f4ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 21m58.350838948s ago: executing program 0 (id=2401): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 21m58.08482698s ago: executing program 0 (id=2407): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') fcntl$notify(r0, 0x402, 0xc0000001) getdents(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x30}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000380)={@mcast2, r4}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bind$netlink(r9, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f00000003c0)=""/82, &(0x7f0000000340)=0x52) fsetxattr$security_selinux(r1, &(0x7f0000000540), &(0x7f0000000580)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x3) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000680)={0x0, 0x1}, &(0x7f0000000700)=0x8) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r10, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r11, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2) socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000280)='./bus/file0\x00', 0x21081e, &(0x7f0000000a80), 0x1, 0x510, &(0x7f0000001480)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_LIMIT={0x5, 0xb, 0x81}]}}}, @IFLA_MASTER={0x8}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 21m57.934257146s ago: executing program 0 (id=2408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESDEC=r0, @ANYRESOCT=r1], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r4}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 21m57.887312558s ago: executing program 0 (id=2410): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x831018, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212509d, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) (fail_nth: 1) 21m57.764396573s ago: executing program 0 (id=2412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0xabc, 0x600) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 21m57.757676104s ago: executing program 0 (id=2413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c9"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) 21m57.729432575s ago: executing program 33 (id=2413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000900)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c9"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x9d}, 0x18) 10m57.335591077s ago: executing program 3 (id=12941): syz_usb_connect$uac1(0x6, 0xf9, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x0, 0x10, 0x4c, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x4}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x5, 0x1, 0xff}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x6, 0x7}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x10, "2e8f6e42fce5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3b, 0x1}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0xb, 0x9, "4909333ea9b58d88"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x0, 0x3, 'A', "74e6b8"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x8, 0x1, 0x9c, 0x4, "d5cfea"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x70}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x1, 0x2, 0xe, 'W8', "349a"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3, 0x9, 0x9, {0x7, 0x25, 0x1, 0xbcc1e88594e98602, 0xd, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xe, 0x3, 0x9, 0xfb}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x8, 0xac, "", "2061c9"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2, 0x2, 0x1, 0xd, "973cef"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1, 0xc7cc, 0x2c, "048a5d6e55"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xd5, 0x1, 0x1, {0x7, 0x25, 0x1, 0x0, 0x4, 0x81}}}}}}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1b, 0xf, 0x17, 0xff, 0x8}, 0x95, &(0x7f00000004c0)={0x5, 0xf, 0x95, 0x4, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x8, 0xf000, 0x9, [0xc000, 0x3f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x8, 0xba, 0x57cc}, @ptm_cap={0x3}, @generic={0x6f, 0x10, 0xa, "3f1c6fbcc4bce077c893b0e56a9b0d0849d97f5a043af3a369ffde3adf65bc23bf5a366747a6723f89dd9543bc7d90365beed8a513faa6b3b3a6a72631b282b61caf7fb4a8f51a84056b27c83496dc22c9d3ab0d1e4e4fd384ee030732f90320a7939b8fc1d38bfdc3e04305"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xd6, &(0x7f00000005c0)=@string={0xd6, 0x3, "34391fc3045ced8aed3aa89ef06e696451a28dcf46fad26eb467317f4e0b7a6c314e3f9a52883336834b8f9772f81b2e77c54ac1fff95fe64a04ee917c3f3c067483cd9acbab021925c7e3fd90d3ce724a6b2c0eda038ad727de1548760a73b11af0d461a1c946d486ed9a05da989b6b6acab59a17a17d5ebb0eeba9778a20085b03198c23a114a636c800750e0cc9448c3ace9e86fc75c31b2d72b7e53513fc720d7dfd2ed26143c4ca54533806e168d9131e618628b8cbeb01bce0d9c0d12d871d5d8b68fad23927e1a6d55dbb6834ee00d5f6"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4b, &(0x7f00000006c0)=@string={0x4b, 0x3, "da8832d22bd58de118b8c5aae9b87e7101ce564d54f76b141a791d07a0dcd7d5c4e55c3b7603cac45f13145477e931abcd7a259911fdb3ef32fa444233781feb8bdbdbd34c65250c36"}}]}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r1, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000300)) 10m56.8111349s ago: executing program 3 (id=12947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r4 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r3, &(0x7f0000000400)=r4, 0x12) 10m56.78168189s ago: executing program 3 (id=12949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) 10m56.754984072s ago: executing program 3 (id=12950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000200)={0x1ff, 0xa9, 0x9}) 10m56.727483993s ago: executing program 3 (id=12952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x5, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x2}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x6}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x10, 0x3, 0x0) eventfd2(0x82, 0x80800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)=ANY=[@ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r6, 0x541c, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r7, r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x50) 10m56.612930898s ago: executing program 3 (id=12955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x18, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x0, 0x2, 0x7, 0x4, 0xffffffffffffffd4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x7, 0x6, 0xfffffffffffffff4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x24, &(0x7f0000000180)=""/36, 0x40f00, 0x36, '\x00', r4, @tracing=0x1c, r5, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x1ff, 0x10001}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[r7, r8], &(0x7f00000003c0)=[{0x2, 0x5, 0x10, 0x6}, {0x4, 0x3, 0xa, 0x4}, {0x0, 0x2, 0x5, 0x5}], 0x10, 0x62}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1) 10m41.519378281s ago: executing program 34 (id=12955): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x600000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x3, 0x0}, 0x8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1a, 0x18, &(0x7f0000000080)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x3, 0x1, 0x0, r1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @exit, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x0, 0x2, 0x7, 0x4, 0xffffffffffffffd4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x1, 0x7, 0x6, 0xfffffffffffffff4, 0x10}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0x24, &(0x7f0000000180)=""/36, 0x40f00, 0x36, '\x00', r4, @tracing=0x1c, r5, 0x8, &(0x7f0000000240)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x1ff, 0x10001}, 0x10, r6, 0xffffffffffffffff, 0x3, &(0x7f0000000380)=[r7, r8], &(0x7f00000003c0)=[{0x2, 0x5, 0x10, 0x6}, {0x4, 0x3, 0xa, 0x4}, {0x0, 0x2, 0x5, 0x5}], 0x10, 0x62}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) (fail_nth: 1) 6m29.62165701s ago: executing program 6 (id=18121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xec, r2, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x1000, 0x64}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @key_params, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_MAC={0xa}, @key_params, @key_params=[@NL80211_ATTR_KEY_SEQ={0xc, 0xa, "58f017987b4dd730"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c3765890d3"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a8cbea26b3"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "e6b47c5559"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3f252bf7edd2261568611586bc"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "bfe74dd293"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "e592b7f591b0763647542450cb"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="8e3709c79bbd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000042}, 0x4000014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x6087) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001a40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x7, 0xfff1}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 6m29.554728773s ago: executing program 6 (id=18122): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}, {0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m29.421950828s ago: executing program 6 (id=18123): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1b) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x18) 6m29.322693113s ago: executing program 6 (id=18124): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x18) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000e00)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="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"], 0x2, 0x699, &(0x7f0000001300)="$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") r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) write$binfmt_script(r4, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000b00)='./file1\x00', 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000200)={[{@errors_remount}, {@nolazytime}]}, 0x1, 0x46b, &(0x7f0000000600)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r7}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 6m29.157758939s ago: executing program 6 (id=18125): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) unshare(0x22020400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6m28.890733751s ago: executing program 6 (id=18133): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8f0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x2, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 6m28.871063562s ago: executing program 35 (id=18133): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x8f0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x2, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1m30.728155855s ago: executing program 4 (id=23149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x200000000}, 0x18) r1 = socket$igmp(0x2, 0x3, 0x2) accept4$inet(r1, &(0x7f00000004c0)={0x2, 0x0, @multicast2}, &(0x7f0000000500)=0x10, 0x80000) syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) eventfd(0x579) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioperm(0x0, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000009440)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r7) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b00000020001900e20807ffaff8d89ebe4c8eb753937dbe54561072a13805b0ccbb06bf08001500c000000008000100", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8002}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000800)={0x27, r6, 0x1, 0x4, 0x4, 0x3, "7f67a16f956bbefc0a86e783ec3a8489f86523f9944d2314432d4b11d5a929e4f0218936632c7511e4c52b5c217dacbd426dcec35e60c96f204b9a3f97ba05", 0x2f}, 0x60) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000380)=""/117, &(0x7f0000000400)=0x75) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4001000010001304000000000000000000000000000000000000000000000000004e24000002000d1dbd3300a000"/68, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000ffffac1414bb000004d432000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000800000000020000000000000000000000000000000000000800000000000000cc000000000000000000000000000000f6000000000000000000000000000000000000000a00010100000000000000004f001200726663343330392863636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000080000000bed40c00"], 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f0000000180)}, 0x20) 1m30.684315867s ago: executing program 4 (id=23151): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010101}, 0x10) 1m30.590891711s ago: executing program 4 (id=23153): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xe8}, 0x10) 1m30.590544201s ago: executing program 4 (id=23154): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x110) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001"], 0x7a) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x831018, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x212509d, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x800010, 0x0) 1m30.39101327s ago: executing program 4 (id=23157): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) 1m30.281652205s ago: executing program 4 (id=23159): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x5c, 0x66, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x9, 0xf}, {0x5, 0xfff3}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x160e}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7f}]}, 0x5c}}, 0x20048080) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="aacff3e3ebefb09a818b257f6b28a842bf0b50a34e324c9195bc4d0925f63866e66c33bc187101f8926730463a8a885ab4f45c6ca1f0ee5a82ef1d6040254299f44c141b48838db469706a349a92873a575e1001d53c56e1dbd7904171a5dd717d36b18284db", @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) getpeername$qrtr(r3, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xd3283d0368e269b3, 0x110, r0, 0x9a726000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) get_mempolicy(&(0x7f0000000000), 0x0, 0xae24, &(0x7f0000008000/0x1000)=nil, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 1m30.238147306s ago: executing program 36 (id=23159): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x5c, 0x66, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x9, 0xf}, {0x5, 0xfff3}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x160e}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7f}]}, 0x5c}}, 0x20048080) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfffa}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES64=r1, @ANYBLOB="aacff3e3ebefb09a818b257f6b28a842bf0b50a34e324c9195bc4d0925f63866e66c33bc187101f8926730463a8a885ab4f45c6ca1f0ee5a82ef1d6040254299f44c141b48838db469706a349a92873a575e1001d53c56e1dbd7904171a5dd717d36b18284db", @ANYRES8=r0, @ANYRES32=r0, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) getpeername$qrtr(r3, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ff6000/0x7000)=nil, 0x7000, 0xd3283d0368e269b3, 0x110, r0, 0x9a726000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) get_mempolicy(&(0x7f0000000000), 0x0, 0xae24, &(0x7f0000008000/0x1000)=nil, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 4.706603248s ago: executing program 7 (id=24571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1, 0x11fe, &(0x7f0000001800)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) ustat(0x8000000000000001, &(0x7f0000000000)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 4.411052241s ago: executing program 7 (id=24573): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400"], 0xe8}}, 0x0) 4.345329873s ago: executing program 7 (id=24574): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1f094e0, &(0x7f00000006c0)={[{@grpquota}, {@dioread_nolock}], [{@fowner_gt}, {@fowner_eq}, {@smackfsdef}]}, 0x1, 0xbae, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000540)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x3}, 0x10000000000001) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$NFQNL_MSG_VERDICT(r0, 0x0, 0x4040009) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x48}}, 0x84080) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) setreuid(0x0, 0xee00) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x1, 0x0) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) write(r7, &(0x7f0000000280)="8e", 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) 3.474409101s ago: executing program 7 (id=24587): modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x22) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)="1c393502dda1a67d93b1cecc", 0xc}], 0x2}, 0x20008010) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b22ac8e8a7d617f09f37810000003aa83200"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0xa0, 0x10}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='ext4_mb_discard_preallocations\x00', r3}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x208000, 0x0) unshare(0x42000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 3.069662008s ago: executing program 7 (id=24592): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2.453101995s ago: executing program 9 (id=24598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) chroot(&(0x7f0000000000)='./file0/file2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write2(0x11, &(0x7f00000008c0)={0x4, 0x0, 0x4000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4}, {"c516"}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) syz_io_uring_setup(0x761a, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x2d, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000003000000b3e9f0622c000400150001000200000200002e006b0334a7000000000000000000000000000400000000000000705779797a32000000002a2a1d64cb7af4f93b09f23af398ef5e9bf233578fd78d12353f5e622193841db7c35383a9c248fe0fe9611d2c5f184dcb54f7f39383086b2b5e515a581f8fa7870e8fe7e6e1d9a4a97a29b1b2"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 2.140571188s ago: executing program 9 (id=24600): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000540), 0x80000000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB], 0x50) 1.894365889s ago: executing program 9 (id=24604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r3 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x7f, 0x60, 0xc, 0x4, 0x0, 0x9, 0x5, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000400), 0x8}, 0x100210, 0x4, 0x33, 0x0, 0xffffffffffffff36, 0x6, 0x5, 0x0, 0x80000009, 0x0, 0x2}, 0xffffffffffffffff, 0xc, r2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000600)={0x1, 0x0, [0x0]}) unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000001c0)={r6, 0x6}, 0x8) fcntl$getflags(r2, 0x408) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.585757102s ago: executing program 9 (id=24605): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendto$inet6(r0, &(0x7f0000000080)='[', 0x1, 0x20000010, &(0x7f00000000c0)={0xa, 0x4e20, 0xc, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, 0x1c) 1.453972008s ago: executing program 8 (id=24607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r1}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x1c3041, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 1.39078313s ago: executing program 8 (id=24608): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r6, 0x1) 1.028540876s ago: executing program 2 (id=24609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$eJzs3V9rm9UfAPDvk6bdn26/dTDGTy+ksAsnc+na+meCF/NSdDjQ+xnarIymy2jSsdaB24W78UaGIOJAfAHeezl8A76KgQ6GjqIX3lSe9EmXNUmbtpnpzOcDac95npOcc/I85+R78iQkgIE1nv7JRbwUEV8lEcea9uUj2zm+Xm71ya2Z9JbE2trHvyeRZNsa5ZPs/2iW+X9E/PxFxJlca73V5ZX5YrlcWszyE7WF6xPV5ZWzVxeKc6W50rWp6enzb05PvfP2Wz3r62uX/vr2owfvn//y1Oo3Pz46fi+JC3Ek29fcjz243ZwZj/HsORmOC5sKTvagsv0k6XcD2JWhbJwPRzoHHIuhbNQD/32fR8QaMKAS4x8GVCMOaKzte7QOfmE8fm99AdTa//z6eyNxsL42OryaPLMySte7Yz2oP63jp9/u30tv0bv3IQC2dftORJzL51vnvySb/3bvXBdlNtexw/lvbYdNApo8SOOf19vFP5WsxMH6383xz2ibsbsb24//3KMeVNNRGv+92zb+3bhoNTaU5Y7WY77h5MrVcimd2/4XEadj+ECa3+p6zvnVhx3nqafx30g9Bkzrb8SCWTse5Q88e5/ZYq24lz43e3wn4uW28W+yEf8mbY5/+nxc6rKOk6X7r3Ta1xz/tu//87X2Q8Sr2fG//cya6OkVrWTr65MT9fNhonFWtPrz7slfOtXfuf9Hn0NvW6XH/3Db83+j/2NJ8/Xa6s7r+P7g36VO+7Y//u3P/5Hkk3p6JNt2s1irLU5GjCQftm6fenrfRr5RPu3/6VPtx/9W5/+hiPi0y/7fPXG3Y9F+n/9p/2d3dPx3nnj4wWffdaq/u+P/Rj11OtvSzfzXbQP38twBAAAAAADAfpOLiCOR5Aob6VyuUFj/fMeJOJwrV6q1M1cqS9dmo/5d2bEYzjWudI82fR5iMvs8bCM/tSk/HRHHI+LroUP1fGGmUp7td+cBAAAAAAAAAAAAAAAAAABgnxjt8P3/1K9D/W4d8Nz5yW8YXNuO/1780hOwL3n9h8Fl/MPgMv5hcBn/MLjySb9bAPSL138YXMY/DC7jHwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrq0sWL6W1t9cmtmTQ/e2N5ab5y4+xsqTpfWFiaKcxUFq8X5ho/ELKw5YMlf0S5Urk+ORVLNydqpWptorq8cnmhsnStdvnqQnGudLk0/G90CgAAAAAAAAAAAAAAAAAAAF4w1eWV+WK5XFqUkNhVIr8/miGxnmgM7D0/YH/nJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9k8AAAD//24dNcY=") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) 1.017298297s ago: executing program 5 (id=24610): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="cc5a4dbac0affd0a97", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="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", 0x129}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}], 0x3, 0x480e0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timer_delete(r1) listen(0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 988.687638ms ago: executing program 2 (id=24611): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000380), &(0x7f0000000200)=""/163}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) r5 = syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000300)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@stripe={'stripe', 0x3d, 0x7}}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r7 = msgget$private(0x0, 0x406) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01030000000000000000010000000800010014"], 0x30}}, 0x44) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r10, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048011}, 0x4001010) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000800)=""/191, &(0x7f00000008c0)=0xbf) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) msgctl$IPC_SET(r7, 0x1, &(0x7f0000000780)={{0x2, r11, r12, 0x0, r13, 0x13, 0x8001}, 0x0, 0x0, 0x8001, 0x5ee, 0x8, 0x3, 0x0, 0xa7ef, 0x80, 0x7, 0xffffffffffffffff, r5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x200000000}, 0x18) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno#', @ANYRESHEX=r14, @ANYBLOB=',wfdno=', @ANYRESHEX=r15, @ANYBLOB=',version=9p2000,\x00']) write$cgroup_pid(r4, &(0x7f0000000400)=r5, 0x12) 971.194968ms ago: executing program 5 (id=24612): modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x22) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000380)="1c393502dda1a67d93b1cecc", 0xc}], 0x2}, 0x20008010) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b22ac8e8a7d617f09f37810000003aa83200"/31, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0], 0xa0, 0x10}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x2, 0x0) keyctl$KEYCTL_WATCH_KEY(0x6, 0x0, 0xffffffffffffffff, 0xfffffffdfffffffc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000180)='ext4_mb_discard_preallocations\x00', r3}, 0x18) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mount(0x0, 0x0, 0x0, 0x208000, 0x0) unshare(0x42000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 875.938843ms ago: executing program 2 (id=24613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x8, 0x80, 0x6, 0x81}, {0x8, 0x5, 0x3, 0x4}, {0x0, 0x7f, 0x9, 0x3}]}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x80000, 0x2) 818.944595ms ago: executing program 5 (id=24614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000540), 0x80000000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB], 0x50) 810.701566ms ago: executing program 8 (id=24615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000540), 0x80000000, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff00000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB], 0x50) 749.308518ms ago: executing program 2 (id=24616): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r6, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) 682.510511ms ago: executing program 9 (id=24617): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 660.181612ms ago: executing program 8 (id=24618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="854b", 0x2}], 0x20, 0x14, 0x0) 646.981213ms ago: executing program 9 (id=24619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) 637.452293ms ago: executing program 5 (id=24620): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="cc5a4dbac0affd0a97", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="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", 0x129}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}], 0x3, 0x480e0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timer_delete(r2) listen(0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r8, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 550.900707ms ago: executing program 8 (id=24621): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x572, &(0x7f0000001700)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) 533.094477ms ago: executing program 5 (id=24622): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x4, r0, 'id0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "db748d6b120426ad", "4fe429faa1e90c473725b5e429ac42fa", "917e060b", "92816af8b4efb2ad"}, 0x28) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 464.792721ms ago: executing program 8 (id=24623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="cc5a4dbac0affd0a97", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="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", 0x129}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}], 0x3, 0x480e0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) timer_delete(r2) listen(0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000003, 0x13, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x10007ffffffff}, 0x18) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 206.431021ms ago: executing program 5 (id=24624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x1, 0x11fe, &(0x7f0000001800)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x50f, &(0x7f0000000680)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r4 = syz_pidfd_open(0x0, 0x0) pidfd_getfd(r4, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f0000000300)='usrquota') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) ustat(0x8000000000000001, &(0x7f0000000000)) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 82.610587ms ago: executing program 2 (id=24625): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="cc5a4dbac0affd0a97", 0x9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d58", 0x129}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}], 0x3, 0x480e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 999.5µs ago: executing program 7 (id=24626): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000ff80850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x2f5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r6, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r6, 0x1) 0s ago: executing program 2 (id=24627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000500, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_open_procfs(0x0, &(0x7f0000000540)='net/udp6\x00') r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x8, 0x80, 0x6, 0x81}, {0x8, 0x5, 0x3, 0x4}, {0x0, 0x7f, 0x9, 0x3}]}) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r9, &(0x7f0000000040)=ANY=[], 0x6) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socket$inet6(0xa, 0x80000, 0x2) kernel console output (not intermixed with test programs): 0_macvtap: left promiscuous mode [ 1497.971887][T27068] veth1_vlan: left promiscuous mode [ 1497.977098][T27068] veth0_vlan: left promiscuous mode [ 1498.034318][T27068] team0 (unregistering): Port device team_slave_1 removed [ 1498.047233][T27068] team0 (unregistering): Port device team_slave_0 removed [ 1498.073133][T27068] team0 (unregistering): Port device dummy0 removed [ 1498.146436][T13872] netlink: 134744 bytes leftover after parsing attributes in process `syz.9.23378'. [ 1498.156860][T13872] netlink: zone id is out of range [ 1498.162134][T13872] netlink: zone id is out of range [ 1498.167324][T13872] netlink: get zone limit has 4 unknown bytes [ 1498.175257][T13872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.185210][T13872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1498.417336][T13733] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1498.426457][T13733] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1498.435851][T13733] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1498.445301][T13733] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1498.489048][T13894] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23386'. [ 1498.503303][T13733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.531181][T13733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.542505][T27030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.549691][T27030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.560800][T27030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.567912][T27030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.663468][T13733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1498.751561][T13733] veth0_vlan: entered promiscuous mode [ 1498.760467][T13733] veth1_vlan: entered promiscuous mode [ 1498.787539][T13733] veth0_macvtap: entered promiscuous mode [ 1498.804517][T13733] veth1_macvtap: entered promiscuous mode [ 1498.817229][T13733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.827521][T13733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.841661][T27038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.856607][T27038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.876727][T27038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.891207][T27038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.936376][T13919] lo speed is unknown, defaulting to 1000 [ 1499.028197][T13919] lo speed is unknown, defaulting to 1000 [ 1499.103411][T13929] netlink: 'syz.9.23393': attribute type 10 has an invalid length. [ 1499.136009][T13929] bond0: (slave dummy0): Releasing backup interface [ 1499.158902][T13929] team0: Port device dummy0 added [ 1499.171698][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23395'. [ 1499.194628][T13938] 9pnet_fd: Insufficient options for proto=fd [ 1499.245504][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23396'. [ 1499.277294][T13942] loop9: detected capacity change from 0 to 736 [ 1499.416604][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23399'. [ 1499.434293][T13952] loop9: detected capacity change from 0 to 736 [ 1499.599273][T13950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1499.648228][T13950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.732788][T13970] loop9: detected capacity change from 0 to 8192 [ 1499.863844][T13976] netlink: 'syz.7.23407': attribute type 10 has an invalid length. [ 1499.902790][T13976] bond0: (slave dummy0): Releasing backup interface [ 1499.924697][T13976] team0: Port device dummy0 added [ 1499.973022][T13982] lo speed is unknown, defaulting to 1000 [ 1500.004181][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.7.23408'. [ 1500.077561][T13986] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.23409'. [ 1500.110860][T13986] netlink: zone id is out of range [ 1500.116041][T13986] netlink: zone id is out of range [ 1500.121296][T13986] netlink: get zone limit has 4 unknown bytes [ 1500.137961][T13982] lo speed is unknown, defaulting to 1000 [ 1500.703964][T13996] netlink: 'syz.8.23413': attribute type 10 has an invalid length. [ 1500.728533][T13996] team0: Port device dummy0 removed [ 1500.769626][T13996] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1500.846266][T14006] lo speed is unknown, defaulting to 1000 [ 1500.952216][T14006] lo speed is unknown, defaulting to 1000 [ 1501.226626][T14013] netlink: 464 bytes leftover after parsing attributes in process `syz.8.23419'. [ 1501.321603][ T29] kauditd_printk_skb: 664 callbacks suppressed [ 1501.321622][ T29] audit: type=1326 audit(2000000686.535:204532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14024 comm="syz.8.23424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1501.351987][ T29] audit: type=1326 audit(2000000686.535:204533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14024 comm="syz.8.23424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1501.376606][ T29] audit: type=1326 audit(2000000686.535:204534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14024 comm="syz.8.23424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1501.480350][ T29] audit: type=1326 audit(2000000686.695:204535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14024 comm="syz.8.23424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1501.504428][ T29] audit: type=1326 audit(2000000686.695:204536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14024 comm="syz.8.23424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1501.699994][T14031] FAULT_INJECTION: forcing a failure. [ 1501.699994][T14031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.713532][T14031] CPU: 1 UID: 0 PID: 14031 Comm: syz.5.23426 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1501.713658][T14031] Tainted: [W]=WARN [ 1501.713665][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1501.713755][T14031] Call Trace: [ 1501.713763][T14031] [ 1501.713772][T14031] __dump_stack+0x1d/0x30 [ 1501.713793][T14031] dump_stack_lvl+0xe8/0x140 [ 1501.713811][T14031] dump_stack+0x15/0x1b [ 1501.713870][T14031] should_fail_ex+0x265/0x280 [ 1501.713893][T14031] should_fail+0xb/0x20 [ 1501.713908][T14031] should_fail_usercopy+0x1a/0x20 [ 1501.714027][T14031] _copy_from_iter+0xd2/0xe80 [ 1501.714047][T14031] ? __build_skb_around+0x1ab/0x200 [ 1501.714071][T14031] ? __alloc_skb+0x223/0x320 [ 1501.714173][T14031] netlink_sendmsg+0x471/0x6b0 [ 1501.714194][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1501.714217][T14031] __sock_sendmsg+0x145/0x180 [ 1501.714247][T14031] ____sys_sendmsg+0x31e/0x4e0 [ 1501.714269][T14031] ___sys_sendmsg+0x17b/0x1d0 [ 1501.714298][T14031] __x64_sys_sendmsg+0xd4/0x160 [ 1501.714320][T14031] x64_sys_call+0x191e/0x3000 [ 1501.714342][T14031] do_syscall_64+0xd2/0x200 [ 1501.714429][T14031] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1501.714541][T14031] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1501.714581][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.714602][T14031] RIP: 0033:0x7fe1b2c4f749 [ 1501.714619][T14031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.714716][T14031] RSP: 002b:00007fe1b16b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1501.714738][T14031] RAX: ffffffffffffffda RBX: 00007fe1b2ea5fa0 RCX: 00007fe1b2c4f749 [ 1501.714753][T14031] RDX: 0000000020000808 RSI: 0000200000000640 RDI: 0000000000000003 [ 1501.714827][T14031] RBP: 00007fe1b16b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.714898][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.714933][T14031] R13: 00007fe1b2ea6038 R14: 00007fe1b2ea5fa0 R15: 00007ffe6bdb6c18 [ 1501.714951][T14031] [ 1502.142860][ T29] audit: type=1326 audit(2000000687.335:204537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.23430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1502.167039][ T29] audit: type=1326 audit(2000000687.335:204538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.23430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1502.190992][ T29] audit: type=1326 audit(2000000687.335:204539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.23430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1502.214986][ T29] audit: type=1326 audit(2000000687.335:204540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.23430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1502.238923][ T29] audit: type=1326 audit(2000000687.335:204541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.2.23430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1502.294392][T14048] netlink: 464 bytes leftover after parsing attributes in process `syz.5.23432'. [ 1502.304184][T14043] 9pnet_fd: Insufficient options for proto=fd [ 1502.433539][T14035] netlink: 'syz.9.23428': attribute type 10 has an invalid length. [ 1502.485861][T14056] FAULT_INJECTION: forcing a failure. [ 1502.485861][T14056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1502.499200][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.2.23434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1502.499237][T14056] Tainted: [W]=WARN [ 1502.499266][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1502.499280][T14056] Call Trace: [ 1502.499287][T14056] [ 1502.499296][T14056] __dump_stack+0x1d/0x30 [ 1502.499322][T14056] dump_stack_lvl+0xe8/0x140 [ 1502.499347][T14056] dump_stack+0x15/0x1b [ 1502.499367][T14056] should_fail_ex+0x265/0x280 [ 1502.499416][T14056] should_fail+0xb/0x20 [ 1502.499435][T14056] should_fail_usercopy+0x1a/0x20 [ 1502.499454][T14056] _copy_from_user+0x1c/0xb0 [ 1502.499494][T14056] ___sys_recvmsg+0xaa/0x370 [ 1502.499517][T14056] ? _parse_integer+0x27/0x40 [ 1502.499618][T14056] do_recvmmsg+0x1ef/0x540 [ 1502.499647][T14056] ? fput+0x8f/0xc0 [ 1502.499666][T14056] __x64_sys_recvmmsg+0xe5/0x170 [ 1502.499686][T14056] x64_sys_call+0x27aa/0x3000 [ 1502.499708][T14056] do_syscall_64+0xd2/0x200 [ 1502.499744][T14056] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1502.499775][T14056] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1502.499825][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.499848][T14056] RIP: 0033:0x7f4f4f2df749 [ 1502.499865][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1502.499885][T14056] RSP: 002b:00007f4f4dd1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1502.499934][T14056] RAX: ffffffffffffffda RBX: 00007f4f4f536090 RCX: 00007f4f4f2df749 [ 1502.499964][T14056] RDX: 0000000000000001 RSI: 00002000000050c0 RDI: 000000000000000b [ 1502.500000][T14056] RBP: 00007f4f4dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1502.500015][T14056] R10: 0000000040000100 R11: 0000000000000246 R12: 0000000000000001 [ 1502.500029][T14056] R13: 00007f4f4f536128 R14: 00007f4f4f536090 R15: 00007ffc4261a588 [ 1502.500049][T14056] [ 1502.561455][T14063] loop5: detected capacity change from 0 to 1024 [ 1502.721288][T14063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 1502.729996][T14063] System zones: 0-1, 3-12 [ 1502.735085][T14063] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1502.780160][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1502.832864][T14080] 9pnet_fd: Insufficient options for proto=fd [ 1503.923302][T14102] SELinux: failed to load policy [ 1503.936098][T14090] lo speed is unknown, defaulting to 1000 [ 1504.049426][T14090] lo speed is unknown, defaulting to 1000 [ 1504.726385][T14120] lo speed is unknown, defaulting to 1000 [ 1504.899293][T14120] lo speed is unknown, defaulting to 1000 [ 1504.986255][T14143] lo speed is unknown, defaulting to 1000 [ 1505.402029][T14143] lo speed is unknown, defaulting to 1000 [ 1505.908822][T14162] lo speed is unknown, defaulting to 1000 [ 1505.999164][T14162] lo speed is unknown, defaulting to 1000 [ 1506.051996][T14166] netlink: 'syz.9.23473': attribute type 1 has an invalid length. [ 1506.153804][T14166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1506.178238][T14168] bond1: (slave geneve2): making interface the new active one [ 1506.197904][T14168] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1506.217373][T14174] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.23474'. [ 1506.227642][T14174] netlink: zone id is out of range [ 1506.232872][T14174] netlink: zone id is out of range [ 1506.238372][T14174] netlink: get zone limit has 4 unknown bytes [ 1506.277982][T14176] loop5: detected capacity change from 0 to 1024 [ 1506.337505][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 1506.337520][ T29] audit: type=1326 audit(2000000691.545:204701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1b2c4e3aa code=0x7ffc0000 [ 1506.412907][ T29] audit: type=1326 audit(2000000691.585:204702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1b2c4e3aa code=0x7ffc0000 [ 1506.436673][ T29] audit: type=1326 audit(2000000691.585:204703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe1b2c4de97 code=0x7ffc0000 [ 1506.460951][ T29] audit: type=1326 audit(2000000691.585:204704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe1b2c50eea code=0x7ffc0000 [ 1506.519414][T14176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1506.533122][ T29] audit: type=1326 audit(2000000691.755:204705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1b2c4df90 code=0x7ffc0000 [ 1506.557657][ T29] audit: type=1326 audit(2000000691.755:204706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe1b2c4e497 code=0x7ffc0000 [ 1506.582086][ T29] audit: type=1326 audit(2000000691.755:204707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1b2c4df90 code=0x7ffc0000 [ 1506.606242][ T29] audit: type=1326 audit(2000000691.755:204708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1506.630430][ T29] audit: type=1326 audit(2000000691.755:204709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1506.667702][ T29] audit: type=1326 audit(2000000691.875:204710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14175 comm="syz.5.23475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1506.707658][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.767413][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23476'. [ 1506.801699][T14184] 9pnet_fd: Insufficient options for proto=fd [ 1507.344909][T14210] netlink: 'syz.9.23487': attribute type 10 has an invalid length. [ 1507.357426][T14210] team0 (unregistering): Port device team_slave_0 removed [ 1507.366600][T14210] team0 (unregistering): Port device team_slave_1 removed [ 1507.374880][T14210] team0 (unregistering): Port device dummy0 removed [ 1507.482320][T14217] netlink: 'syz.9.23490': attribute type 1 has an invalid length. [ 1507.500123][T14217] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1507.631255][T14230] netlink: 464 bytes leftover after parsing attributes in process `syz.9.23494'. [ 1507.733004][T14240] sch_fq: defrate 4294967295 ignored. [ 1507.998039][T14257] netlink: 'syz.2.23506': attribute type 10 has an invalid length. [ 1508.012355][T14257] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1508.650374][T14270] lo speed is unknown, defaulting to 1000 [ 1508.763287][T14270] lo speed is unknown, defaulting to 1000 [ 1509.113754][T14278] loop5: detected capacity change from 0 to 512 [ 1509.122808][T14278] EXT4-fs: Ignoring removed oldalloc option [ 1509.132271][T14278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1509.160387][T14278] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 1509.178797][T14278] System zones: 1-3, 19-19, 35-38 [ 1509.186759][T14278] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.202695][T14278] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.203090][T14287] FAULT_INJECTION: forcing a failure. [ 1509.203090][T14287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1509.227233][T14287] CPU: 1 UID: 0 PID: 14287 Comm: ÿ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1509.227268][T14287] Tainted: [W]=WARN [ 1509.227275][T14287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1509.227289][T14287] Call Trace: [ 1509.227296][T14287] [ 1509.227305][T14287] __dump_stack+0x1d/0x30 [ 1509.227330][T14287] dump_stack_lvl+0xe8/0x140 [ 1509.227392][T14287] dump_stack+0x15/0x1b [ 1509.227456][T14287] should_fail_ex+0x265/0x280 [ 1509.227494][T14287] should_fail+0xb/0x20 [ 1509.227548][T14287] should_fail_usercopy+0x1a/0x20 [ 1509.227596][T14287] _copy_from_user+0x1c/0xb0 [ 1509.227703][T14287] ___sys_sendmsg+0xc1/0x1d0 [ 1509.227739][T14287] __x64_sys_sendmsg+0xd4/0x160 [ 1509.227765][T14287] x64_sys_call+0x191e/0x3000 [ 1509.227801][T14287] do_syscall_64+0xd2/0x200 [ 1509.227830][T14287] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1509.227870][T14287] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1509.227971][T14287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.227995][T14287] RIP: 0033:0x7f4f4f2df749 [ 1509.228012][T14287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.228040][T14287] RSP: 002b:00007f4f4dd3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1509.228061][T14287] RAX: ffffffffffffffda RBX: 00007f4f4f535fa0 RCX: 00007f4f4f2df749 [ 1509.228076][T14287] RDX: 0000000000020054 RSI: 0000200000000140 RDI: 0000000000000008 [ 1509.228090][T14287] RBP: 00007f4f4dd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.228104][T14287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.228117][T14287] R13: 00007f4f4f536038 R14: 00007f4f4f535fa0 R15: 00007ffc4261a588 [ 1509.228183][T14287] [ 1509.435760][T14278] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1509.501187][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.516712][T14297] netlink: 'syz.9.23521': attribute type 1 has an invalid length. [ 1509.533401][T14297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1509.552976][T14300] netlink: 464 bytes leftover after parsing attributes in process `syz.8.23520'. [ 1509.733802][T14310] lo speed is unknown, defaulting to 1000 [ 1509.843347][T14310] lo speed is unknown, defaulting to 1000 [ 1510.050695][T14291] netlink: 'syz.7.23518': attribute type 10 has an invalid length. [ 1510.122890][T14291] team0: Port device dummy0 removed [ 1510.131366][T14291] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1510.250635][T14333] netlink: 134744 bytes leftover after parsing attributes in process `syz.9.23534'. [ 1510.260250][T14333] netlink: zone id is out of range [ 1510.265474][T14333] netlink: zone id is out of range [ 1510.270728][T14333] netlink: get zone limit has 4 unknown bytes [ 1510.402777][T14344] netlink: 'syz.2.23539': attribute type 1 has an invalid length. [ 1510.415390][T14344] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1510.428477][T14344] bond1: (slave geneve2): making interface the new active one [ 1510.436940][T14344] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1510.848875][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23550'. [ 1510.859526][T14370] 9pnet_fd: Insufficient options for proto=fd [ 1510.952747][T14379] netlink: 'syz.2.23554': attribute type 10 has an invalid length. [ 1510.962927][T14379] bond0: (slave dummy0): Releasing backup interface [ 1510.972584][T14379] team0: Port device dummy0 added [ 1511.013089][T14385] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.23557'. [ 1511.022570][T14385] netlink: zone id is out of range [ 1511.027810][T14385] netlink: zone id is out of range [ 1511.033106][T14385] netlink: get zone limit has 4 unknown bytes [ 1511.040386][T14385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1511.049217][T14385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1511.111213][T14394] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23561'. [ 1511.216448][T14401] netlink: 'syz.7.23564': attribute type 10 has an invalid length. [ 1511.241699][T14407] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23567'. [ 1511.357164][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 1511.357178][ T29] audit: type=1326 audit(2000000696.565:205193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14415 comm="syz.5.23571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1511.385620][T14410] netlink: 'syz.8.23568': attribute type 10 has an invalid length. [ 1511.433119][ T29] audit: type=1326 audit(2000000696.645:205194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.7.23573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1511.457267][ T29] audit: type=1326 audit(2000000696.645:205195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.7.23573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1511.469696][T14422] syzkaller0: entered allmulticast mode [ 1511.481534][ T29] audit: type=1326 audit(2000000696.645:205196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.7.23573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1511.511050][T14422] syzkaller0: entered promiscuous mode [ 1511.513658][ T29] audit: type=1326 audit(2000000696.725:205197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.8.23575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1511.519284][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23575'. [ 1511.540566][ T29] audit: type=1326 audit(2000000696.725:205198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.8.23575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1511.574803][ T29] audit: type=1326 audit(2000000696.735:205199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.8.23575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1511.599178][ T29] audit: type=1326 audit(2000000696.735:205200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.8.23575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1511.601022][T14422] syzkaller0 (unregistering): left promiscuous mode [ 1511.623296][ T29] audit: type=1326 audit(2000000696.735:205201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14423 comm="syz.8.23575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1511.629758][T14422] syzkaller0 (unregistering): left allmulticast mode [ 1511.661080][ T29] audit: type=1326 audit(2000000696.765:205202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14419 comm="syz.7.23573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1511.888578][T14458] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23591'. [ 1511.983160][T14464] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1512.304568][T14480] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23600'. [ 1512.314704][T14480] 9pnet_fd: Insufficient options for proto=fd [ 1512.335381][T14483] netlink: 'syz.8.23601': attribute type 1 has an invalid length. [ 1512.347906][T14483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1512.588594][T14510] netlink: 'syz.7.23613': attribute type 1 has an invalid length. [ 1512.603976][T14510] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1512.833693][T14541] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23625'. [ 1512.894479][T14525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1512.908654][T14525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1512.989572][T14548] lo speed is unknown, defaulting to 1000 [ 1513.057027][T14548] lo speed is unknown, defaulting to 1000 [ 1513.300340][T14578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1513.526835][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.23645'. [ 1513.558848][T14586] 9pnet_fd: Insufficient options for proto=fd [ 1514.055260][T14601] lo speed is unknown, defaulting to 1000 [ 1514.164312][T14601] lo speed is unknown, defaulting to 1000 [ 1514.237620][T14607] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1514.364316][T14625] loop5: detected capacity change from 0 to 512 [ 1514.374158][T14625] EXT4-fs: Ignoring removed oldalloc option [ 1514.395825][T14625] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1514.421181][T14625] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 1514.441622][T14625] System zones: 1-3, 19-19, 35-38 [ 1514.463874][T14625] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.480189][T14625] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1514.526504][T14625] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1514.587133][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.805394][T14660] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1514.957417][T14665] netlink: 260 bytes leftover after parsing attributes in process `syz.5.23676'. [ 1514.967274][T14666] FAULT_INJECTION: forcing a failure. [ 1514.967274][T14666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.980651][T14666] CPU: 1 UID: 0 PID: 14666 Comm: syz.2.23675 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1514.980694][T14666] Tainted: [W]=WARN [ 1514.980715][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1514.980727][T14666] Call Trace: [ 1514.980734][T14666] [ 1514.980742][T14666] __dump_stack+0x1d/0x30 [ 1514.980768][T14666] dump_stack_lvl+0xe8/0x140 [ 1514.980790][T14666] dump_stack+0x15/0x1b [ 1514.980819][T14666] should_fail_ex+0x265/0x280 [ 1514.980851][T14666] should_fail+0xb/0x20 [ 1514.980868][T14666] should_fail_usercopy+0x1a/0x20 [ 1514.980967][T14666] _copy_from_user+0x1c/0xb0 [ 1514.980994][T14666] ___sys_recvmsg+0xaa/0x370 [ 1514.981013][T14666] ? _parse_integer+0x27/0x40 [ 1514.981125][T14666] do_recvmmsg+0x1ef/0x540 [ 1514.981148][T14666] ? fput+0x8f/0xc0 [ 1514.981166][T14666] __x64_sys_recvmmsg+0xe5/0x170 [ 1514.981258][T14666] x64_sys_call+0x27aa/0x3000 [ 1514.981284][T14666] do_syscall_64+0xd2/0x200 [ 1514.981309][T14666] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1514.981360][T14666] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1514.981399][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.981424][T14666] RIP: 0033:0x7f4f4f2df749 [ 1514.981444][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.981464][T14666] RSP: 002b:00007f4f4dd1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1514.981533][T14666] RAX: ffffffffffffffda RBX: 00007f4f4f536090 RCX: 00007f4f4f2df749 [ 1514.981546][T14666] RDX: 0000000000000001 RSI: 00002000000043c0 RDI: 0000000000000003 [ 1514.981560][T14666] RBP: 00007f4f4dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.981575][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.981589][T14666] R13: 00007f4f4f536128 R14: 00007f4f4f536090 R15: 00007ffc4261a588 [ 1514.981613][T14666] [ 1515.008533][T14657] netlink: 'syz.7.23673': attribute type 10 has an invalid length. [ 1515.433993][T14678] lo speed is unknown, defaulting to 1000 [ 1515.539430][T14678] lo speed is unknown, defaulting to 1000 [ 1515.647096][T14672] loop5: detected capacity change from 0 to 8192 [ 1516.005122][T14690] lo speed is unknown, defaulting to 1000 [ 1516.019760][T14696] 9pnet_fd: Insufficient options for proto=fd [ 1516.185198][T14707] netlink: 'syz.9.23691': attribute type 1 has an invalid length. [ 1516.223184][T14707] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1516.381376][T14690] lo speed is unknown, defaulting to 1000 [ 1516.417930][ T29] kauditd_printk_skb: 418 callbacks suppressed [ 1516.417949][ T29] audit: type=1326 audit(2000000701.625:205621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.454248][ T29] audit: type=1326 audit(2000000701.665:205622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.478801][ T29] audit: type=1326 audit(2000000701.665:205623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.502801][ T29] audit: type=1326 audit(2000000701.665:205624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.527112][ T29] audit: type=1326 audit(2000000701.665:205625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.551169][ T29] audit: type=1326 audit(2000000701.665:205626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.574944][ T29] audit: type=1326 audit(2000000701.665:205627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.596392][T14721] netlink: 'syz.9.23695': attribute type 10 has an invalid length. [ 1516.598730][ T29] audit: type=1326 audit(2000000701.665:205628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.630651][ T29] audit: type=1326 audit(2000000701.665:205629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.654648][ T29] audit: type=1326 audit(2000000701.665:205630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14717 comm="syz.8.23694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1516.762139][T14732] netlink: 'syz.9.23700': attribute type 1 has an invalid length. [ 1516.787267][T14732] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1516.797511][T14730] __nla_validate_parse: 1 callbacks suppressed [ 1516.797531][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23699'. [ 1516.826997][T14730] 9pnet_fd: Insufficient options for proto=fd [ 1517.667812][T14752] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 1517.938177][T14782] loop5: detected capacity change from 0 to 512 [ 1517.950750][T14782] EXT4-fs: journaled quota format not specified [ 1517.973980][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23716'. [ 1517.994175][T14782] 9pnet_fd: Insufficient options for proto=fd [ 1518.041399][T14785] loop5: detected capacity change from 0 to 512 [ 1518.052940][T14785] EXT4-fs: journaled quota format not specified [ 1518.116871][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23721'. [ 1518.126401][T14795] netlink: 16 bytes leftover after parsing attributes in process `syz.5.23721'. [ 1518.136969][T14795] netlink: 'syz.5.23721': attribute type 1 has an invalid length. [ 1518.144883][T14795] netlink: 224 bytes leftover after parsing attributes in process `syz.5.23721'. [ 1518.179181][ T3371] hid-generic 0000:3000000:0000.0088: unknown main item tag 0x4 [ 1518.186934][ T3371] hid-generic 0000:3000000:0000.0088: unknown main item tag 0x2 [ 1518.195427][ T3371] hid-generic 0000:3000000:0000.0088: unknown main item tag 0x3 [ 1518.203723][ T3371] hid-generic 0000:3000000:0000.0088: hidraw0: HID v0.00 Device [sy] on syz0 [ 1518.248551][T14800] fido_id[14800]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1518.325475][T14806] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1518.405443][T14812] loop5: detected capacity change from 0 to 512 [ 1518.412114][T14812] EXT4-fs: Ignoring removed oldalloc option [ 1518.420587][T14812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1518.438876][T14812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 1518.447033][T14812] System zones: 1-3, 19-19, 35-38 [ 1518.453386][T14812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.466067][T14812] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.478256][T14812] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1518.493128][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.618155][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23734'. [ 1518.679522][T14825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23734'. [ 1518.744759][T14823] lo speed is unknown, defaulting to 1000 [ 1518.876589][T14823] lo speed is unknown, defaulting to 1000 [ 1518.897805][T14854] loop5: detected capacity change from 0 to 512 [ 1518.906930][T14854] EXT4-fs: Ignoring removed oldalloc option [ 1518.916211][T14854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1518.929994][T14854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 1518.950320][T14854] System zones: 1-3, 19-19, 35-38 [ 1518.958076][T14854] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.979520][T14854] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.999651][T14854] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 1519.028542][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.409979][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23747'. [ 1519.596762][T14909] netlink: 'syz.8.23748': attribute type 10 has an invalid length. [ 1519.765183][T14930] netlink: 'syz.2.23751': attribute type 10 has an invalid length. [ 1519.899086][ T3371] IPVS: starting estimator thread 0... [ 1520.008035][T14975] IPVS: using max 2496 ests per chain, 124800 per kthread [ 1520.487948][T15032] raw_sendmsg: syz.8.23765 forgot to set AF_INET. Fix it! [ 1520.601341][T15034] lo speed is unknown, defaulting to 1000 [ 1520.703091][T15034] lo speed is unknown, defaulting to 1000 [ 1521.522807][T15060] 9pnet_fd: Insufficient options for proto=fd [ 1521.522830][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 1521.522844][ T29] audit: type=1326 audit(2000000706.736:205997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.559791][ T29] audit: type=1326 audit(2000000706.736:205998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.612049][ T29] audit: type=1326 audit(2000000706.746:205999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.636061][ T29] audit: type=1326 audit(2000000706.746:206000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.660134][ T29] audit: type=1326 audit(2000000706.746:206001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.684072][ T29] audit: type=1326 audit(2000000706.746:206002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.708168][ T29] audit: type=1326 audit(2000000706.746:206003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.732129][ T29] audit: type=1326 audit(2000000706.746:206004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.756117][ T29] audit: type=1326 audit(2000000706.746:206005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1521.780072][ T29] audit: type=1326 audit(2000000706.746:206006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15062 comm="syz.9.23774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1522.145863][T15094] lo speed is unknown, defaulting to 1000 [ 1522.255318][T15094] lo speed is unknown, defaulting to 1000 [ 1522.648350][T15106] __nla_validate_parse: 2 callbacks suppressed [ 1522.648367][T15106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23790'. [ 1523.314988][T15130] netlink: 'syz.7.23799': attribute type 10 has an invalid length. [ 1523.325103][T15130] bond0: (slave dummy0): Releasing backup interface [ 1523.333826][T15130] team0: Port device dummy0 added [ 1523.542188][T15149] lo speed is unknown, defaulting to 1000 [ 1523.686410][T15156] lo speed is unknown, defaulting to 1000 [ 1523.843840][T15156] lo speed is unknown, defaulting to 1000 [ 1523.999701][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23810'. [ 1524.003488][T15149] lo speed is unknown, defaulting to 1000 [ 1524.036264][T15165] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23813'. [ 1524.171889][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23813'. [ 1524.181147][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.9.23813'. [ 1525.577084][T15225] netlink: 24 bytes leftover after parsing attributes in process `syz.9.23836'. [ 1525.683565][T15219] lo speed is unknown, defaulting to 1000 [ 1525.736302][T15225] netlink: 'syz.9.23836': attribute type 1 has an invalid length. [ 1525.779957][T15219] lo speed is unknown, defaulting to 1000 [ 1526.833631][T15253] loop5: detected capacity change from 0 to 512 [ 1526.849904][T15253] EXT4-fs: journaled quota format not specified [ 1526.858356][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23844'. [ 1526.868467][T15253] 9pnet_fd: Insufficient options for proto=fd [ 1527.021261][T15234] lo speed is unknown, defaulting to 1000 [ 1527.088340][T15234] lo speed is unknown, defaulting to 1000 [ 1527.219937][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 1527.219969][ T29] audit: type=1326 audit(2000000712.436:206465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.250354][ T29] audit: type=1326 audit(2000000712.436:206466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.327577][ T29] audit: type=1326 audit(2000000712.436:206467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.351423][ T29] audit: type=1326 audit(2000000712.436:206468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.375444][ T29] audit: type=1326 audit(2000000712.436:206469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.399649][ T29] audit: type=1326 audit(2000000712.496:206470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.423652][ T29] audit: type=1326 audit(2000000712.496:206471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.447634][ T29] audit: type=1326 audit(2000000712.496:206472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.471520][ T29] audit: type=1326 audit(2000000712.516:206473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.495435][ T29] audit: type=1326 audit(2000000712.516:206474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15268 comm="syz.8.23850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1527.760330][T15285] netlink: 12 bytes leftover after parsing attributes in process `syz.7.23855'. [ 1527.781218][T15285] 9pnet_fd: Insufficient options for proto=fd [ 1527.857225][T15288] netlink: 'syz.5.23856': attribute type 1 has an invalid length. [ 1527.872728][T15288] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1528.761649][T15327] netlink: 134744 bytes leftover after parsing attributes in process `syz.9.23870'. [ 1528.771371][T15327] netlink: zone id is out of range [ 1528.776533][T15327] netlink: zone id is out of range [ 1528.781734][T15327] netlink: get zone limit has 4 unknown bytes [ 1529.162244][T15351] netlink: 'syz.8.23882': attribute type 1 has an invalid length. [ 1529.180317][T15352] netlink: 'syz.2.23880': attribute type 10 has an invalid length. [ 1529.188779][T15352] FAULT_INJECTION: forcing a failure. [ 1529.188779][T15352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.202046][T15352] CPU: 0 UID: 0 PID: 15352 Comm: syz.2.23880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1529.202079][T15352] Tainted: [W]=WARN [ 1529.202085][T15352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1529.202096][T15352] Call Trace: [ 1529.202104][T15352] [ 1529.202113][T15352] __dump_stack+0x1d/0x30 [ 1529.202143][T15352] dump_stack_lvl+0xe8/0x140 [ 1529.202220][T15352] dump_stack+0x15/0x1b [ 1529.202237][T15352] should_fail_ex+0x265/0x280 [ 1529.202273][T15352] should_fail+0xb/0x20 [ 1529.202290][T15352] should_fail_usercopy+0x1a/0x20 [ 1529.202342][T15352] _copy_from_user+0x1c/0xb0 [ 1529.202367][T15352] ___sys_sendmsg+0xc1/0x1d0 [ 1529.202402][T15352] __x64_sys_sendmsg+0xd4/0x160 [ 1529.202500][T15352] x64_sys_call+0x191e/0x3000 [ 1529.202522][T15352] do_syscall_64+0xd2/0x200 [ 1529.202541][T15352] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1529.202567][T15352] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1529.202614][T15352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.202635][T15352] RIP: 0033:0x7f4f4f2df749 [ 1529.202651][T15352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1529.202677][T15352] RSP: 002b:00007f4f4dd1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1529.202698][T15352] RAX: ffffffffffffffda RBX: 00007f4f4f536090 RCX: 00007f4f4f2df749 [ 1529.202712][T15352] RDX: 0000000000008084 RSI: 0000200000000600 RDI: 000000000000000b [ 1529.202747][T15352] RBP: 00007f4f4dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.202759][T15352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.202771][T15352] R13: 00007f4f4f536128 R14: 00007f4f4f536090 R15: 00007ffc4261a588 [ 1529.202789][T15352] [ 1529.447072][T15360] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1529.469016][T15362] netlink: 32 bytes leftover after parsing attributes in process `wg1'. [ 1529.482685][T15364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23887'. [ 1529.677887][T15384] 9pnet_fd: Insufficient options for proto=fd [ 1530.163635][T15390] lo speed is unknown, defaulting to 1000 [ 1530.271824][T15390] lo speed is unknown, defaulting to 1000 [ 1531.157549][T15439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23918'. [ 1531.167355][T15439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1531.174840][T15439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1531.182719][T15439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1531.190179][T15439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.870707][T15471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=15471 comm=syz.9.23931 [ 1532.202008][T15483] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 1532.215347][T15486] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.23937'. [ 1532.238126][T15486] netlink: zone id is out of range [ 1532.243300][T15486] netlink: zone id is out of range [ 1532.248546][T15486] netlink: get zone limit has 4 unknown bytes [ 1532.257793][T15486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1532.266646][T15486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1532.609554][T15497] netlink: 'syz.2.23941': attribute type 10 has an invalid length. [ 1532.617637][T15497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23941'. [ 1532.699848][T15497] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1532.752207][T15497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1532.876905][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 1532.876921][ T29] audit: type=1326 audit(2000000718.086:206730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15498 comm="syz.8.23942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1532.907322][ T29] audit: type=1326 audit(2000000718.086:206731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15498 comm="syz.8.23942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eefd9f749 code=0x7ffc0000 [ 1532.980059][T15517] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1533.188807][ T29] audit: type=1326 audit(2000000718.406:206732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15529 comm="syz.7.23954" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb89b53f749 code=0x0 [ 1533.267499][T15532] netlink: 'syz.7.23954': attribute type 10 has an invalid length. [ 1533.278790][T15532] netlink: 'syz.7.23954': attribute type 10 has an invalid length. [ 1533.348002][T15532] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 1533.357146][T15532] team0: Port device dummy0 removed [ 1533.365906][T15532] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1533.681587][T15540] netlink: 'syz.8.23958': attribute type 10 has an invalid length. [ 1533.691921][T15540] bond0: (slave dummy0): Releasing backup interface [ 1533.712230][T15540] team0: Port device dummy0 added [ 1533.736657][T15538] lo speed is unknown, defaulting to 1000 [ 1533.944118][T15538] lo speed is unknown, defaulting to 1000 [ 1534.258129][ T29] audit: type=1326 audit(2000000719.466:206733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.297430][ T29] audit: type=1326 audit(2000000719.476:206734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.321682][ T29] audit: type=1326 audit(2000000719.496:206735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.345849][ T29] audit: type=1326 audit(2000000719.496:206736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.369909][ T29] audit: type=1326 audit(2000000719.496:206737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.393960][ T29] audit: type=1326 audit(2000000719.506:206738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.417710][ T29] audit: type=1326 audit(2000000719.506:206739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15553 comm="syz.7.23962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb89b53f749 code=0x7ffc0000 [ 1534.693871][T15571] netlink: 80 bytes leftover after parsing attributes in process `syz.8.23969'. [ 1534.970551][T15579] netlink: 300 bytes leftover after parsing attributes in process `syz.7.23966'. [ 1534.990077][T15579] lo speed is unknown, defaulting to 1000 [ 1535.053616][T15579] lo speed is unknown, defaulting to 1000 [ 1535.272907][ T1838] bridge_slave_1: left allmulticast mode [ 1535.278727][ T1838] bridge_slave_1: left promiscuous mode [ 1535.284458][ T1838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.313075][T15584] loop5: detected capacity change from 0 to 1024 [ 1535.372016][ T1838] bridge_slave_0: left allmulticast mode [ 1535.377758][ T1838] bridge_slave_0: left promiscuous mode [ 1535.383569][ T1838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.446585][T15584] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1535.485672][T15589] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23973'. [ 1535.511766][ T1838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.535977][ T1838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.565167][ T1838] bond0 (unregistering): Released all slaves [ 1535.581331][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.597047][ T1838] bond1 (unregistering): Released all slaves [ 1535.614319][ T1838] bond2 (unregistering): Released all slaves [ 1535.655780][ T1838] bond3 (unregistering): Released all slaves [ 1535.769951][ T1838] batman_adv: batadv0: Removing interface: dummy0 [ 1535.783332][ T1838] hsr_slave_0: left promiscuous mode [ 1535.800145][ T1838] hsr_slave_1: left promiscuous mode [ 1535.880119][ T1838] team0 (unregistering): Port device team_slave_1 removed [ 1535.910136][ T1838] team0 (unregistering): Port device team_slave_0 removed [ 1535.918218][T27038] smc: removing ib device syz! [ 1535.929116][T15616] VFS: Mount too revealing [ 1535.967577][T15623] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.025136][T15625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.23985'. [ 1536.049700][T15623] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.067512][T15625] loop5: detected capacity change from 0 to 736 [ 1536.141338][T15623] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.244701][T15623] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.365646][T15640] netlink: 32 bytes leftover after parsing attributes in process `syz.7.23990'. [ 1536.385914][ T1860] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.395771][ T1860] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.439155][ T1860] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.467801][ T1860] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.641067][T15651] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23994'. [ 1536.706107][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.9.23996'. [ 1536.715966][T15658] netlink: 24 bytes leftover after parsing attributes in process `syz.8.23997'. [ 1537.931322][T15689] lo speed is unknown, defaulting to 1000 [ 1537.966021][T15689] lo speed is unknown, defaulting to 1000 [ 1538.000497][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24008'. [ 1538.132579][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 1538.132596][ T29] audit: type=1326 audit(2000000723.346:207310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.160163][T15707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.24012'. [ 1538.173063][ T29] audit: type=1326 audit(2000000723.376:207311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.197421][ T29] audit: type=1326 audit(2000000723.376:207312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.221385][ T29] audit: type=1326 audit(2000000723.376:207313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.221729][T15707] loop5: detected capacity change from 0 to 736 [ 1538.245222][ T29] audit: type=1326 audit(2000000723.376:207314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.245380][ T29] audit: type=1326 audit(2000000723.406:207315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.300480][ T29] audit: type=1326 audit(2000000723.416:207316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1538.324366][ T29] audit: type=1326 audit(2000000723.416:207317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1b2c4f783 code=0x7ffc0000 [ 1538.348039][ T29] audit: type=1326 audit(2000000723.416:207318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe1b2c4e1ff code=0x7ffc0000 [ 1538.371778][ T29] audit: type=1326 audit(2000000723.416:207319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15706 comm="syz.5.24012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe1b2c4f7d7 code=0x7ffc0000 [ 1538.506808][T15722] netlink: 'syz.5.24018': attribute type 1 has an invalid length. [ 1539.180468][T15749] FAULT_INJECTION: forcing a failure. [ 1539.180468][T15749] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.193461][T15749] CPU: 0 UID: 0 PID: 15749 Comm: syz.2.24029 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1539.193496][T15749] Tainted: [W]=WARN [ 1539.193502][T15749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1539.193513][T15749] Call Trace: [ 1539.193521][T15749] [ 1539.193529][T15749] __dump_stack+0x1d/0x30 [ 1539.193574][T15749] dump_stack_lvl+0xe8/0x140 [ 1539.193631][T15749] dump_stack+0x15/0x1b [ 1539.193651][T15749] should_fail_ex+0x265/0x280 [ 1539.193690][T15749] should_failslab+0x8c/0xb0 [ 1539.193715][T15749] kmem_cache_alloc_noprof+0x50/0x480 [ 1539.193787][T15749] ? security_inode_alloc+0x37/0x100 [ 1539.193813][T15749] security_inode_alloc+0x37/0x100 [ 1539.193861][T15749] inode_init_always_gfp+0x4b7/0x500 [ 1539.193885][T15749] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1539.193981][T15749] alloc_inode+0x58/0x170 [ 1539.194005][T15749] new_inode+0x1d/0xe0 [ 1539.194029][T15749] shmem_get_inode+0x244/0x750 [ 1539.194051][T15749] __shmem_file_setup+0x113/0x210 [ 1539.194108][T15749] shmem_file_setup+0x3b/0x50 [ 1539.194125][T15749] __se_sys_memfd_create+0x2c3/0x590 [ 1539.194149][T15749] __x64_sys_memfd_create+0x31/0x40 [ 1539.194193][T15749] x64_sys_call+0x2ac2/0x3000 [ 1539.194213][T15749] do_syscall_64+0xd2/0x200 [ 1539.194287][T15749] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1539.194389][T15749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.194414][T15749] RIP: 0033:0x7f4f4f2df749 [ 1539.194433][T15749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1539.194498][T15749] RSP: 002b:00007f4f4dd3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1539.194522][T15749] RAX: ffffffffffffffda RBX: 000000000000052e RCX: 00007f4f4f2df749 [ 1539.194537][T15749] RDX: 00007f4f4dd3eef0 RSI: 0000000000000000 RDI: 00007f4f4f364960 [ 1539.194553][T15749] RBP: 0000200000000640 R08: 00007f4f4dd3ebb7 R09: 00007f4f4dd3ee40 [ 1539.194568][T15749] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 1539.194582][T15749] R13: 00007f4f4dd3eef0 R14: 00007f4f4dd3eeb0 R15: 00002000000001c0 [ 1539.194603][T15749] [ 1539.752950][T15758] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1539.826953][T15750] lo speed is unknown, defaulting to 1000 [ 1539.860607][T15750] lo speed is unknown, defaulting to 1000 [ 1540.321175][T15786] loop5: detected capacity change from 0 to 1024 [ 1540.361061][T15786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1540.402875][ T1838] bridge_slave_1: left allmulticast mode [ 1540.408659][ T1838] bridge_slave_1: left promiscuous mode [ 1540.414591][ T1838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.464088][ T1838] bridge_slave_0: left allmulticast mode [ 1540.469833][ T1838] bridge_slave_0: left promiscuous mode [ 1540.475928][ T1838] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.653407][T15801] netlink: 'syz.2.24047': attribute type 1 has an invalid length. [ 1540.730199][ T1838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1540.739879][ T1838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1540.749258][ T1838] bond0 (unregistering): Released all slaves [ 1540.757881][ T1838] bond1 (unregistering): Released all slaves [ 1540.773022][T15801] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1540.796942][ T1838] tipc: Left network mode [ 1540.802403][T15769] lo speed is unknown, defaulting to 1000 [ 1540.848115][T15769] lo speed is unknown, defaulting to 1000 [ 1540.902066][ T1838] hsr_slave_0: left promiscuous mode [ 1540.908191][ T1838] hsr_slave_1: left promiscuous mode [ 1540.914273][ T1838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.926355][ T1838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.989066][ T1838] team0 (unregistering): Port device team_slave_1 removed [ 1541.009858][ T1838] team0 (unregistering): Port device team_slave_0 removed [ 1541.061806][ T1838] team0 (unregistering): Port device dummy0 removed [ 1541.130152][T15825] netlink: 'syz.2.24055': attribute type 10 has an invalid length. [ 1541.244102][T15832] netlink: 300 bytes leftover after parsing attributes in process `syz.9.24058'. [ 1541.313115][T15839] IPv6: Can't replace route, no match found [ 1541.719465][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1541.895874][T15851] lo speed is unknown, defaulting to 1000 [ 1541.995043][T15865] lo speed is unknown, defaulting to 1000 [ 1542.034170][T15865] lo speed is unknown, defaulting to 1000 [ 1542.069969][T15851] lo speed is unknown, defaulting to 1000 [ 1542.238321][T15874] FAULT_INJECTION: forcing a failure. [ 1542.238321][T15874] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.250998][T15874] CPU: 0 UID: 0 PID: 15874 Comm: syz.2.24071 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1542.251034][T15874] Tainted: [W]=WARN [ 1542.251042][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1542.251069][T15874] Call Trace: [ 1542.251076][T15874] [ 1542.251083][T15874] __dump_stack+0x1d/0x30 [ 1542.251108][T15874] dump_stack_lvl+0xe8/0x140 [ 1542.251206][T15874] dump_stack+0x15/0x1b [ 1542.251223][T15874] should_fail_ex+0x265/0x280 [ 1542.251261][T15874] should_failslab+0x8c/0xb0 [ 1542.251334][T15874] kmem_cache_alloc_noprof+0x50/0x480 [ 1542.251360][T15874] ? fcntl_setlease+0x82/0x300 [ 1542.251385][T15874] fcntl_setlease+0x82/0x300 [ 1542.251472][T15874] ? kmem_cache_free+0xe4/0x3d0 [ 1542.251501][T15874] do_fcntl+0x524/0xdf0 [ 1542.251522][T15874] ? selinux_file_fcntl+0x1b4/0x1e0 [ 1542.251597][T15874] __se_sys_fcntl+0xb1/0x120 [ 1542.251688][T15874] __x64_sys_fcntl+0x43/0x50 [ 1542.251723][T15874] x64_sys_call+0x29a4/0x3000 [ 1542.251748][T15874] do_syscall_64+0xd2/0x200 [ 1542.251768][T15874] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1542.251827][T15874] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1542.251864][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.251887][T15874] RIP: 0033:0x7f4f4f2df749 [ 1542.251904][T15874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.251971][T15874] RSP: 002b:00007f4f4dd3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1542.251995][T15874] RAX: ffffffffffffffda RBX: 00007f4f4f535fa0 RCX: 00007f4f4f2df749 [ 1542.252009][T15874] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000005 [ 1542.252024][T15874] RBP: 00007f4f4dd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.252038][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.252049][T15874] R13: 00007f4f4f536038 R14: 00007f4f4f535fa0 R15: 00007ffc4261a588 [ 1542.252098][T15874] [ 1542.488282][T15851] chnl_net:caif_netlink_parms(): no params data found [ 1542.533683][T15884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24075'. [ 1542.553565][T15884] 9pnet_fd: Insufficient options for proto=fd [ 1542.566136][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.573509][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.588056][T15851] bridge_slave_0: entered allmulticast mode [ 1542.601048][T15851] bridge_slave_0: entered promiscuous mode [ 1542.611274][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.618505][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.685568][T15851] bridge_slave_1: entered allmulticast mode [ 1542.692870][T15851] bridge_slave_1: entered promiscuous mode [ 1542.733280][ T1860] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.760061][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.771075][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1542.812141][ T1860] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.831957][T15851] team0: Port device team_slave_0 added [ 1542.839172][T15851] team0: Port device team_slave_1 added [ 1542.856581][T15905] netlink: 44 bytes leftover after parsing attributes in process `syz.9.24082'. [ 1542.880225][ T1860] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.901206][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.908391][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.934593][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.948785][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.955791][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.982228][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.003826][ T1860] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.018022][T15909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24083'. [ 1543.052970][T15909] 9pnet_fd: Insufficient options for proto=fd [ 1543.085601][T15851] hsr_slave_0: entered promiscuous mode [ 1543.094052][T15851] hsr_slave_1: entered promiscuous mode [ 1543.100906][T15851] debugfs: 'hsr0' already exists in 'hsr' [ 1543.106666][T15851] Cannot create hsr debugfs directory [ 1543.123182][ T1860] bridge_slave_1: left allmulticast mode [ 1543.128908][ T1860] bridge_slave_1: left promiscuous mode [ 1543.134556][ T1860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.152464][ T1860] bridge_slave_0: left allmulticast mode [ 1543.158225][ T1860] bridge_slave_0: left promiscuous mode [ 1543.163952][ T1860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.224546][T15916] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15916 comm=syz.2.24085 [ 1543.256478][ T1860] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1543.349362][ T1860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1543.369980][ T1860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1543.389200][ T1860] bond0 (unregistering): Released all slaves [ 1543.398954][ T1860] bond1 (unregistering): Released all slaves [ 1543.407778][ T1860] bond2 (unregistering): Released all slaves [ 1543.417202][ T1860] bond3 (unregistering): Released all slaves [ 1543.426666][ T1860] bond4 (unregistering): Released all slaves [ 1543.486415][ T1860] IPVS: stopping master sync thread 11768 ... [ 1543.539081][ T1860] hsr_slave_0: left promiscuous mode [ 1543.545334][ T1860] hsr_slave_1: left promiscuous mode [ 1543.555981][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1543.563521][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1543.583526][ T1860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1543.591245][ T1860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1543.627765][ T1860] veth1_macvtap: left promiscuous mode [ 1543.633951][ T1860] veth0_macvtap: left promiscuous mode [ 1543.639883][ T1860] veth1_vlan: left promiscuous mode [ 1543.645765][ T1860] veth0_vlan: left promiscuous mode [ 1543.652955][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 1543.652979][ T29] audit: type=1326 audit(2000000728.866:207500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.679904][T15920] netlink: 'syz.7.24086': attribute type 10 has an invalid length. [ 1543.683031][ T29] audit: type=1326 audit(2000000728.866:207501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.714873][ T29] audit: type=1326 audit(2000000728.866:207502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.739195][ T29] audit: type=1326 audit(2000000728.866:207503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.763409][ T29] audit: type=1326 audit(2000000728.866:207504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.787426][ T29] audit: type=1326 audit(2000000728.906:207505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.811154][ T29] audit: type=1326 audit(2000000728.906:207506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.835066][ T29] audit: type=1326 audit(2000000728.906:207507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.859071][ T29] audit: type=1326 audit(2000000728.906:207508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.883274][ T29] audit: type=1326 audit(2000000728.906:207509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15921 comm="syz.5.24087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b2c4f749 code=0x7ffc0000 [ 1543.957374][T15925] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24088'. [ 1543.975432][ T1860] team0 (unregistering): Port device team_slave_1 removed [ 1543.999267][ T1860] team0 (unregistering): Port device team_slave_0 removed [ 1544.036309][ T1860] team0 (unregistering): Port device dummy0 removed [ 1544.072124][T15920] bond0: (slave dummy0): Releasing backup interface [ 1544.081856][T15929] SELinux: policydb string SE L does not match my string SE Linux [ 1544.091543][T15929] SELinux: failed to load policy [ 1544.108090][T15920] team0: Port device dummy0 added [ 1544.149096][T15933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24094'. [ 1544.252096][T15950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24100'. [ 1544.270680][T15952] loop5: detected capacity change from 0 to 512 [ 1544.278404][T15952] EXT4-fs: Ignoring removed oldalloc option [ 1544.286136][T15952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1544.312121][T15952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2856c018, mo2=0002] [ 1544.320757][T15952] System zones: 1-3, 19-19, 35-38 [ 1544.327204][T15952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1544.340315][T15952] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1544.373284][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.450506][T15851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1544.460487][T15851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1544.476679][T15851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1544.479830][T15962] netlink: 'syz.9.24103': attribute type 10 has an invalid length. [ 1544.493214][T15851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1544.535636][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.549397][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.559069][ T1860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.566359][ T1860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.577377][T15559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.584589][T15559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.638585][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24109'. [ 1544.653519][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1544.753583][T15851] veth0_vlan: entered promiscuous mode [ 1544.762020][T15851] veth1_vlan: entered promiscuous mode [ 1544.780183][T15851] veth0_macvtap: entered promiscuous mode [ 1544.788186][T15851] veth1_macvtap: entered promiscuous mode [ 1544.799657][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1544.812002][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1544.824113][T27038] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.833252][T27038] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.842146][T27038] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.853159][T27038] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.918272][T16015] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.960205][T16015] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.010277][T16015] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.035770][T16020] netlink: 24 bytes leftover after parsing attributes in process `syz.7.24115'. [ 1545.062706][T16015] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.124670][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24117'. [ 1545.135961][T16028] 9pnet_fd: Insufficient options for proto=fd [ 1545.422375][T16038] netlink: 'syz.7.24121': attribute type 10 has an invalid length. [ 1545.551178][T16046] xt_hashlimit: size too large, truncated to 1048576 [ 1545.814551][T16056] 9pnet_fd: Insufficient options for proto=fd [ 1545.960046][T16065] netlink: 'syz.2.24132': attribute type 1 has an invalid length. [ 1545.974820][T16065] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1546.444551][T16110] __nla_validate_parse: 4 callbacks suppressed [ 1546.444562][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24149'. [ 1546.460678][T16110] netlink: 32 bytes leftover after parsing attributes in process `syz.9.24149'. [ 1546.784583][T27030] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.796253][T27030] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.808565][ T1838] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.820004][ T1838] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.069823][T16235] netlink: 'syz.2.24157': attribute type 10 has an invalid length. [ 1547.081201][T16235] FAULT_INJECTION: forcing a failure. [ 1547.081201][T16235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1547.094424][T16235] CPU: 1 UID: 0 PID: 16235 Comm: syz.2.24157 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1547.094479][T16235] Tainted: [W]=WARN [ 1547.094485][T16235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1547.094495][T16235] Call Trace: [ 1547.094501][T16235] [ 1547.094508][T16235] __dump_stack+0x1d/0x30 [ 1547.094528][T16235] dump_stack_lvl+0xe8/0x140 [ 1547.094544][T16235] dump_stack+0x15/0x1b [ 1547.094560][T16235] should_fail_ex+0x265/0x280 [ 1547.094640][T16235] should_fail+0xb/0x20 [ 1547.094654][T16235] should_fail_usercopy+0x1a/0x20 [ 1547.094672][T16235] _copy_from_user+0x1c/0xb0 [ 1547.094693][T16235] ___sys_sendmsg+0xc1/0x1d0 [ 1547.094719][T16235] __x64_sys_sendmsg+0xd4/0x160 [ 1547.094798][T16235] x64_sys_call+0x191e/0x3000 [ 1547.094818][T16235] do_syscall_64+0xd2/0x200 [ 1547.094903][T16235] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1547.094935][T16235] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1547.094961][T16235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.095026][T16235] RIP: 0033:0x7f4f4f2df749 [ 1547.095043][T16235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.095065][T16235] RSP: 002b:00007f4f4dd1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.095089][T16235] RAX: ffffffffffffffda RBX: 00007f4f4f536090 RCX: 00007f4f4f2df749 [ 1547.095105][T16235] RDX: 0000000000008084 RSI: 0000200000000600 RDI: 000000000000000a [ 1547.095195][T16235] RBP: 00007f4f4dd1e090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.095211][T16235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.095226][T16235] R13: 00007f4f4f536128 R14: 00007f4f4f536090 R15: 00007ffc4261a588 [ 1547.095248][T16235] [ 1547.702699][T16268] loop8: detected capacity change from 0 to 1024 [ 1547.719217][T16268] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1547.741900][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.788237][T16273] loop8: detected capacity change from 0 to 8192 [ 1547.887522][T16275] loop5: detected capacity change from 0 to 8192 [ 1548.188359][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24173'. [ 1548.210691][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.24173'. [ 1548.529775][T16311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1548.539093][T16311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1548.974772][T16326] lo speed is unknown, defaulting to 1000 [ 1549.013748][T16326] lo speed is unknown, defaulting to 1000 [ 1549.029304][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 1549.029333][ T29] audit: type=1326 audit(2000000734.246:208063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.081885][ T29] audit: type=1326 audit(2000000734.246:208064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.104148][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24188'. [ 1549.105764][ T29] audit: type=1326 audit(2000000734.246:208065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.125871][T16338] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24188'. [ 1549.139002][ T29] audit: type=1326 audit(2000000734.246:208066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.172559][ T29] audit: type=1326 audit(2000000734.276:208067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.196581][ T29] audit: type=1326 audit(2000000734.276:208068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.220620][ T29] audit: type=1326 audit(2000000734.276:208069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.244535][ T29] audit: type=1326 audit(2000000734.276:208070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.268641][ T29] audit: type=1326 audit(2000000734.276:208071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.292809][ T29] audit: type=1326 audit(2000000734.276:208072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16331 comm="syz.8.24186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1549.562564][T16343] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 1549.739765][T16351] loop8: detected capacity change from 0 to 1024 [ 1549.760899][T16351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.808789][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1549.869880][T16361] netlink: 56 bytes leftover after parsing attributes in process `syz.8.24196'. [ 1550.089756][T16377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24202'. [ 1550.218901][T16389] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24206'. [ 1550.323667][T16397] FAULT_INJECTION: forcing a failure. [ 1550.323667][T16397] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.336544][T16397] CPU: 1 UID: 0 PID: 16397 Comm: syz.2.24210 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1550.336660][T16397] Tainted: [W]=WARN [ 1550.336667][T16397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1550.336678][T16397] Call Trace: [ 1550.336685][T16397] [ 1550.336760][T16397] __dump_stack+0x1d/0x30 [ 1550.336785][T16397] dump_stack_lvl+0xe8/0x140 [ 1550.336849][T16397] dump_stack+0x15/0x1b [ 1550.336869][T16397] should_fail_ex+0x265/0x280 [ 1550.336903][T16397] should_failslab+0x8c/0xb0 [ 1550.336963][T16397] __kvmalloc_node_noprof+0x12e/0x670 [ 1550.337000][T16397] ? __se_sys_add_key+0x1ee/0x350 [ 1550.337106][T16397] __se_sys_add_key+0x1ee/0x350 [ 1550.337140][T16397] __x64_sys_add_key+0x67/0x80 [ 1550.337168][T16397] x64_sys_call+0x28c8/0x3000 [ 1550.337206][T16397] do_syscall_64+0xd2/0x200 [ 1550.337230][T16397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1550.337255][T16397] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1550.337287][T16397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.337378][T16397] RIP: 0033:0x7f4f4f2df749 [ 1550.337396][T16397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.337417][T16397] RSP: 002b:00007f4f4dd3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1550.337441][T16397] RAX: ffffffffffffffda RBX: 00007f4f4f535fa0 RCX: 00007f4f4f2df749 [ 1550.337457][T16397] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000280 [ 1550.337469][T16397] RBP: 00007f4f4dd3f090 R08: ffffffffffffffff R09: 0000000000000000 [ 1550.337537][T16397] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1550.337549][T16397] R13: 00007f4f4f536038 R14: 00007f4f4f535fa0 R15: 00007ffc4261a588 [ 1550.337566][T16397] [ 1551.087705][T16437] loop8: detected capacity change from 0 to 8192 [ 1551.477111][T16472] lo speed is unknown, defaulting to 1000 [ 1551.512041][T16472] lo speed is unknown, defaulting to 1000 [ 1551.717186][T16478] __nla_validate_parse: 5 callbacks suppressed [ 1551.717206][T16478] netlink: 300 bytes leftover after parsing attributes in process `syz.2.24236'. [ 1551.737496][T16480] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24235'. [ 1551.753034][T16482] netlink: 'syz.2.24237': attribute type 1 has an invalid length. [ 1551.776233][T16482] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1551.837551][T16488] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.905699][T16488] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.962974][T16488] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.012562][T16488] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.047381][T16494] netlink: 24 bytes leftover after parsing attributes in process `syz.7.24241'. [ 1552.081187][T15559] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.150555][T15559] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.170700][T15559] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.188105][T15559] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1552.222655][T16496] netlink: 'syz.2.24242': attribute type 10 has an invalid length. [ 1552.224048][T16502] loop8: detected capacity change from 0 to 8192 [ 1552.660070][T16535] netlink: 'syz.7.24256': attribute type 10 has an invalid length. [ 1552.812027][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24261'. [ 1552.859874][T16546] netlink: 84 bytes leftover after parsing attributes in process `syz.7.24261'. [ 1552.882614][T16549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24262'. [ 1552.952891][T16558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24266'. [ 1553.218530][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24272'. [ 1553.310981][T16578] netlink: 444 bytes leftover after parsing attributes in process `syz.9.24276'. [ 1553.320474][T16578] netlink: 4 bytes leftover after parsing attributes in process `syz.9.24276'. [ 1553.417749][T16590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.490911][T16590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.544539][T16590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.604345][T16590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1553.622775][T16599] FAULT_INJECTION: forcing a failure. [ 1553.622775][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.636018][T16599] CPU: 0 UID: 0 PID: 16599 Comm: syz.8.24284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1553.636062][T16599] Tainted: [W]=WARN [ 1553.636071][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1553.636083][T16599] Call Trace: [ 1553.636124][T16599] [ 1553.636132][T16599] __dump_stack+0x1d/0x30 [ 1553.636160][T16599] dump_stack_lvl+0xe8/0x140 [ 1553.636184][T16599] dump_stack+0x15/0x1b [ 1553.636205][T16599] should_fail_ex+0x265/0x280 [ 1553.636277][T16599] should_fail+0xb/0x20 [ 1553.636295][T16599] should_fail_usercopy+0x1a/0x20 [ 1553.636381][T16599] _copy_from_user+0x1c/0xb0 [ 1553.636409][T16599] ___sys_sendmsg+0xc1/0x1d0 [ 1553.636475][T16599] __sys_sendmmsg+0x178/0x300 [ 1553.636509][T16599] __x64_sys_sendmmsg+0x57/0x70 [ 1553.636530][T16599] x64_sys_call+0x1c4a/0x3000 [ 1553.636693][T16599] do_syscall_64+0xd2/0x200 [ 1553.636717][T16599] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1553.636888][T16599] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1553.636917][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.636956][T16599] RIP: 0033:0x7f3d7663f749 [ 1553.636974][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.636995][T16599] RSP: 002b:00007f3d750a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1553.637074][T16599] RAX: ffffffffffffffda RBX: 00007f3d76895fa0 RCX: 00007f3d7663f749 [ 1553.637087][T16599] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1553.637102][T16599] RBP: 00007f3d750a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.637117][T16599] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.637132][T16599] R13: 00007f3d76896038 R14: 00007f3d76895fa0 R15: 00007ffee88e9e08 [ 1553.637230][T16599] [ 1553.887000][ T1825] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.899872][ T1825] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.925384][ T1825] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1553.985998][ T1825] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1554.076194][ T29] kauditd_printk_skb: 826 callbacks suppressed [ 1554.076209][ T29] audit: type=1326 audit(2000000739.286:208899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.085881][T16603] netlink: 'syz.2.24286': attribute type 10 has an invalid length. [ 1554.114781][ T29] audit: type=1326 audit(2000000739.326:208900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.117456][T16618] FAULT_INJECTION: forcing a failure. [ 1554.117456][T16618] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.138693][ T29] audit: type=1326 audit(2000000739.326:208901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.151602][T16618] CPU: 1 UID: 0 PID: 16618 Comm: syz.5.24291 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1554.151635][T16618] Tainted: [W]=WARN [ 1554.151642][T16618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1554.151654][T16618] Call Trace: [ 1554.151661][T16618] [ 1554.151670][T16618] __dump_stack+0x1d/0x30 [ 1554.151693][T16618] dump_stack_lvl+0xe8/0x140 [ 1554.151713][T16618] dump_stack+0x15/0x1b [ 1554.151734][T16618] should_fail_ex+0x265/0x280 [ 1554.151766][T16618] should_failslab+0x8c/0xb0 [ 1554.151810][T16618] kmem_cache_alloc_noprof+0x50/0x480 [ 1554.151883][T16618] ? skb_clone+0x151/0x1f0 [ 1554.151904][T16618] skb_clone+0x151/0x1f0 [ 1554.151923][T16618] __netlink_deliver_tap+0x2c9/0x500 [ 1554.151947][T16618] netlink_unicast+0x66b/0x690 [ 1554.152005][T16618] netlink_sendmsg+0x58b/0x6b0 [ 1554.152027][T16618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.152047][T16618] __sock_sendmsg+0x145/0x180 [ 1554.152071][T16618] sock_write_iter+0x1a7/0x1f0 [ 1554.152108][T16618] do_iter_readv_writev+0x4a1/0x540 [ 1554.152138][T16618] vfs_writev+0x2df/0x8b0 [ 1554.152175][T16618] do_writev+0xe7/0x210 [ 1554.152229][T16618] __x64_sys_writev+0x45/0x50 [ 1554.152255][T16618] x64_sys_call+0x1e9a/0x3000 [ 1554.152276][T16618] do_syscall_64+0xd2/0x200 [ 1554.152319][T16618] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1554.152355][T16618] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1554.152407][T16618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.152478][T16618] RIP: 0033:0x7fe1b2c4f749 [ 1554.152495][T16618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1554.152529][T16618] RSP: 002b:00007fe1b16b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1554.152564][T16618] RAX: ffffffffffffffda RBX: 00007fe1b2ea5fa0 RCX: 00007fe1b2c4f749 [ 1554.152578][T16618] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1554.152591][T16618] RBP: 00007fe1b16b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.152604][T16618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.152616][T16618] R13: 00007fe1b2ea6038 R14: 00007fe1b2ea5fa0 R15: 00007ffe6bdb6c18 [ 1554.152647][T16618] [ 1554.396369][ T29] audit: type=1326 audit(2000000739.326:208902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.420948][ T29] audit: type=1326 audit(2000000739.406:208903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.445194][ T29] audit: type=1326 audit(2000000739.406:208904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.469157][ T29] audit: type=1326 audit(2000000739.406:208905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.493240][ T29] audit: type=1326 audit(2000000739.436:208906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.515507][T16625] loop5: detected capacity change from 0 to 8192 [ 1554.517266][ T29] audit: type=1326 audit(2000000739.446:208907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.547671][ T29] audit: type=1326 audit(2000000739.446:208908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16614 comm="syz.8.24290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d7663f749 code=0x7ffc0000 [ 1554.959679][T16658] loop8: detected capacity change from 0 to 512 [ 1554.972972][T16658] EXT4-fs: journaled quota format not specified [ 1554.988474][T16658] 9pnet_fd: Insufficient options for proto=fd [ 1555.099748][T16673] loop8: detected capacity change from 0 to 736 [ 1555.444392][T16703] loop5: detected capacity change from 0 to 736 [ 1555.545924][T16715] netlink: 'syz.7.24328': attribute type 1 has an invalid length. [ 1555.569511][T16715] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1555.899232][T16735] netlink: 'syz.7.24336': attribute type 10 has an invalid length. [ 1556.076319][T16759] netlink: 'syz.5.24346': attribute type 1 has an invalid length. [ 1556.091471][T16759] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1556.153651][T16766] netlink: 'syz.7.24348': attribute type 21 has an invalid length. [ 1556.232906][T16772] netlink: 'syz.7.24351': attribute type 10 has an invalid length. [ 1556.296915][T16780] loop5: detected capacity change from 0 to 512 [ 1556.304418][T16780] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1556.738782][T16797] netlink: 'syz.2.24364': attribute type 10 has an invalid length. [ 1556.769218][T16813] __nla_validate_parse: 15 callbacks suppressed [ 1556.769238][T16813] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24370'. [ 1556.834756][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.24372'. [ 1556.844445][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24373'. [ 1556.940134][T16826] loop5: detected capacity change from 0 to 512 [ 1556.964188][T16828] FAULT_INJECTION: forcing a failure. [ 1556.964188][T16828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1556.977720][T16828] CPU: 0 UID: 0 PID: 16828 Comm: syz.2.24374 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1556.977753][T16828] Tainted: [W]=WARN [ 1556.977759][T16828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1556.977770][T16828] Call Trace: [ 1556.977777][T16828] [ 1556.977786][T16828] __dump_stack+0x1d/0x30 [ 1556.977817][T16828] dump_stack_lvl+0xe8/0x140 [ 1556.977873][T16828] dump_stack+0x15/0x1b [ 1556.977959][T16828] should_fail_ex+0x265/0x280 [ 1556.977996][T16828] should_fail+0xb/0x20 [ 1556.978047][T16828] should_fail_usercopy+0x1a/0x20 [ 1556.978114][T16828] _copy_from_iter+0xd2/0xe80 [ 1556.978138][T16828] ? ref_tracker_alloc+0x1f2/0x2f0 [ 1556.978169][T16828] ? skb_set_owner_w+0x16a/0x1c0 [ 1556.978190][T16828] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 1556.978214][T16828] skb_copy_datagram_from_iter+0xb1/0x490 [ 1556.978278][T16828] ? __rcu_read_unlock+0x4f/0x70 [ 1556.978376][T16828] ? skb_put+0xa9/0xf0 [ 1556.978401][T16828] packet_sendmsg+0x25bf/0x31f0 [ 1556.978485][T16828] ? avc_has_perm+0xf7/0x180 [ 1556.978510][T16828] ? selinux_socket_sendmsg+0x175/0x1b0 [ 1556.978538][T16828] ? __pfx_packet_sendmsg+0x10/0x10 [ 1556.978644][T16828] __sock_sendmsg+0x145/0x180 [ 1556.978672][T16828] __sys_sendto+0x268/0x330 [ 1556.978741][T16826] EXT4-fs: journaled quota format not specified [ 1556.978709][T16828] __x64_sys_sendto+0x76/0x90 [ 1556.978773][T16828] x64_sys_call+0x2d14/0x3000 [ 1556.978797][T16828] do_syscall_64+0xd2/0x200 [ 1556.978820][T16828] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1556.978913][T16828] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1556.978944][T16828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.978967][T16828] RIP: 0033:0x7f4f4f2df749 [ 1556.979032][T16828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.979051][T16828] RSP: 002b:00007f4f4dd1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1556.979072][T16828] RAX: ffffffffffffffda RBX: 00007f4f4f536090 RCX: 00007f4f4f2df749 [ 1556.979086][T16828] RDX: 0000000000000029 RSI: 0000200000000440 RDI: 0000000000000004 [ 1556.979099][T16828] RBP: 00007f4f4dd1e090 R08: 0000200000000200 R09: 0000000000000014 [ 1556.979127][T16828] R10: 000000002400d011 R11: 0000000000000246 R12: 0000000000000001 [ 1556.979140][T16828] R13: 00007f4f4f536128 R14: 00007f4f4f536090 R15: 00007ffc4261a588 [ 1556.979159][T16828] [ 1557.235862][T16826] 9pnet_fd: Insufficient options for proto=fd [ 1557.348900][T16849] loop8: detected capacity change from 0 to 8192 [ 1557.388245][T16850] lo speed is unknown, defaulting to 1000 [ 1557.415902][T16853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24385'. [ 1557.422756][T16850] lo speed is unknown, defaulting to 1000 [ 1557.584619][T16859] netlink: 'syz.8.24387': attribute type 1 has an invalid length. [ 1557.598754][T16859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1557.614210][T16859] bond1: (slave geneve2): making interface the new active one [ 1557.623210][T16859] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1558.209686][T16956] loop5: detected capacity change from 0 to 512 [ 1558.217929][T16956] EXT4-fs: Mount option(s) incompatible with ext2 [ 1558.849856][T17038] loop8: detected capacity change from 0 to 1024 [ 1558.879489][T17038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1558.903665][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1558.931615][T17044] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24404'. [ 1559.000660][T17049] loop8: detected capacity change from 0 to 512 [ 1559.015517][T17049] EXT4-fs: journaled quota format not specified [ 1559.037211][T17049] 9pnet_fd: Insufficient options for proto=fd [ 1559.154696][T17062] netlink: 32 bytes leftover after parsing attributes in process `syz.9.24411'. [ 1559.251364][T17067] netlink: 'syz.8.24413': attribute type 1 has an invalid length. [ 1559.259347][T17067] netlink: 224 bytes leftover after parsing attributes in process `syz.8.24413'. [ 1559.371994][T17081] 9pnet_fd: Insufficient options for proto=fd [ 1559.397250][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 1559.397268][ T29] audit: type=1326 audit(2000000744.606:209318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.436391][ T29] audit: type=1326 audit(2000000744.646:209319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.440532][T17079] netlink: 'syz.8.24418': attribute type 10 has an invalid length. [ 1559.460492][ T29] audit: type=1326 audit(2000000744.646:209320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.492688][ T29] audit: type=1326 audit(2000000744.646:209321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.516908][ T29] audit: type=1326 audit(2000000744.646:209322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.520601][T17079] team0: Port device dummy0 added [ 1559.541524][ T29] audit: type=1326 audit(2000000744.646:209323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.570510][ T29] audit: type=1326 audit(2000000744.646:209324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.595212][ T29] audit: type=1326 audit(2000000744.646:209325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.619170][ T29] audit: type=1326 audit(2000000744.646:209326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.643541][ T29] audit: type=1326 audit(2000000744.646:209327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17085 comm="syz.9.24421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1559.835369][T17108] lo speed is unknown, defaulting to 1000 [ 1559.871222][T17108] lo speed is unknown, defaulting to 1000 [ 1560.030431][T17113] 9pnet_fd: Insufficient options for proto=fd [ 1560.125850][T17126] lo speed is unknown, defaulting to 1000 [ 1560.160094][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24438'. [ 1560.211098][T17126] lo speed is unknown, defaulting to 1000 [ 1560.484641][T17144] loop5: detected capacity change from 0 to 8192 [ 1561.192869][T17173] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1561.310815][T17180] 9pnet_fd: Insufficient options for proto=fd [ 1561.379879][T17179] netlink: 'syz.7.24457': attribute type 10 has an invalid length. [ 1561.466532][T17199] netlink: 32 bytes leftover after parsing attributes in process `syz.9.24463'. [ 1561.759490][T17213] loop8: detected capacity change from 0 to 8192 [ 1561.787720][T17217] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24470'. [ 1561.796164][T17215] lo speed is unknown, defaulting to 1000 [ 1561.909775][T17215] lo speed is unknown, defaulting to 1000 [ 1562.021831][T17225] netlink: 'syz.5.24473': attribute type 1 has an invalid length. [ 1562.084023][T17225] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1562.111218][T17227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24474'. [ 1562.587339][T17254] netlink: 'syz.5.24483': attribute type 1 has an invalid length. [ 1562.595271][T17254] netlink: 224 bytes leftover after parsing attributes in process `syz.5.24483'. [ 1562.721849][T17265] netlink: 32 bytes leftover after parsing attributes in process `syz.5.24486'. [ 1562.780176][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.787440][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.799495][T17261] loop8: detected capacity change from 0 to 512 [ 1562.806438][T17261] EXT4-fs: Ignoring removed nobh option [ 1562.835002][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.24485: corrupted inode contents [ 1562.849228][T17261] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.24485: mark_inode_dirty error [ 1562.861524][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.24485: corrupted inode contents [ 1562.874119][T17261] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.24485: mark_inode_dirty error [ 1562.887369][T17261] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.24485: Failed to acquire dquot type 0 [ 1562.899538][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.24485: corrupted inode contents [ 1562.900817][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.912536][T17261] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.24485: mark_inode_dirty error [ 1562.921750][T17266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.931374][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.24485: corrupted inode contents [ 1562.952974][T17261] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.24485: mark_inode_dirty error [ 1562.970120][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.24485: corrupted inode contents [ 1562.983988][T17261] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 1562.993061][T17261] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.24485: corrupted inode contents [ 1563.008416][T17261] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.24485: mark_inode_dirty error [ 1563.020397][T15559] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.029232][T15559] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.037782][T15559] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.046427][T15559] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.055145][T17261] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 1563.065729][T17261] EXT4-fs (loop8): 1 truncate cleaned up [ 1563.071948][T17261] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1563.089278][T17261] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1563.102586][T17275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24489'. [ 1563.125944][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.173787][T17277] tipc: Started in network mode [ 1563.178932][T17277] tipc: Node identity 3a66290fa87d, cluster identity 4711 [ 1563.186201][T17277] tipc: Enabled bearer , priority 0 [ 1563.343760][T17287] netlink: 96 bytes leftover after parsing attributes in process `syz.9.24492'. [ 1563.398754][T17276] tipc: Resetting bearer [ 1563.417790][T17276] tipc: Disabling bearer [ 1563.533179][T17299] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24497'. [ 1563.542842][T17296] lo speed is unknown, defaulting to 1000 [ 1563.590885][T17302] netlink: 56 bytes leftover after parsing attributes in process `syz.2.24500'. [ 1563.607263][T17296] lo speed is unknown, defaulting to 1000 [ 1564.492905][T17341] netlink: 'syz.5.24516': attribute type 1 has an invalid length. [ 1564.500945][T17341] netlink: 224 bytes leftover after parsing attributes in process `syz.5.24516'. [ 1564.526889][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 1564.526904][ T29] audit: type=1326 audit(2000000749.736:209875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.557545][ T29] audit: type=1326 audit(2000000749.736:209876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.581501][ T29] audit: type=1326 audit(2000000749.746:209877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.581795][T17345] FAULT_INJECTION: forcing a failure. [ 1564.581795][T17345] name failslab, interval 1, probability 0, space 0, times 0 [ 1564.605456][ T29] audit: type=1326 audit(2000000749.746:209878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.618288][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.2.24517 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1564.618334][T17345] Tainted: [W]=WARN [ 1564.618341][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1564.618354][T17345] Call Trace: [ 1564.618362][T17345] [ 1564.618371][T17345] __dump_stack+0x1d/0x30 [ 1564.618417][T17345] dump_stack_lvl+0xe8/0x140 [ 1564.618439][T17345] dump_stack+0x15/0x1b [ 1564.618516][T17345] should_fail_ex+0x265/0x280 [ 1564.618548][T17345] should_failslab+0x8c/0xb0 [ 1564.618577][T17345] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 1564.618623][T17345] ? __alloc_skb+0x101/0x320 [ 1564.618653][T17345] __alloc_skb+0x101/0x320 [ 1564.618678][T17345] ? audit_log_start+0x342/0x720 [ 1564.618740][T17345] audit_log_start+0x3a0/0x720 [ 1564.618760][T17345] ? kstrtouint+0x76/0xc0 [ 1564.618790][T17345] audit_seccomp+0x48/0x100 [ 1564.618833][T17345] ? __seccomp_filter+0x82d/0x1250 [ 1564.618860][T17345] __seccomp_filter+0x83e/0x1250 [ 1564.618938][T17345] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1564.618968][T17345] ? vfs_write+0x7e8/0x960 [ 1564.618992][T17345] ? __rcu_read_unlock+0x4f/0x70 [ 1564.619137][T17345] ? __fget_files+0x184/0x1c0 [ 1564.619166][T17345] __secure_computing+0x82/0x150 [ 1564.619207][T17345] syscall_trace_enter+0xcf/0x1e0 [ 1564.619234][T17345] do_syscall_64+0xac/0x200 [ 1564.619256][T17345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1564.619343][T17345] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1564.619374][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.619462][T17345] RIP: 0033:0x7f4f4f2df749 [ 1564.619478][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.619520][T17345] RSP: 002b:00007f4f4dd3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1564.619542][T17345] RAX: ffffffffffffffda RBX: 00007f4f4f535fa0 RCX: 00007f4f4f2df749 [ 1564.619555][T17345] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 1564.619568][T17345] RBP: 00007f4f4dd3f090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.619581][T17345] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 1564.619594][T17345] R13: 00007f4f4f536038 R14: 00007f4f4f535fa0 R15: 00007ffc4261a588 [ 1564.619626][T17345] [ 1564.619669][T17345] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 1564.641936][ T29] audit: type=1326 audit(2000000749.746:209879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.641995][ T29] audit: type=1326 audit(2000000749.746:209880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.653759][T17345] audit: out of memory in audit_log_start [ 1564.658057][ T29] audit: type=1326 audit(2000000749.746:209881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1564.956335][ T29] audit: type=1326 audit(2000000749.746:209882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17344 comm="syz.2.24517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4f2df749 code=0x7ffc0000 [ 1565.254889][T17369] loop8: detected capacity change from 0 to 1024 [ 1565.280025][T17369] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1565.286582][T17376] netlink: 32 bytes leftover after parsing attributes in process `syz.7.24528'. [ 1565.304314][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.338152][T17378] netlink: 'syz.8.24529': attribute type 1 has an invalid length. [ 1565.368795][T17378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1565.852362][T17406] loop5: detected capacity change from 0 to 1024 [ 1565.872150][T17406] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1565.903752][ T9668] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.977045][T17423] netlink: 'syz.2.24544': attribute type 1 has an invalid length. [ 1565.991203][T17423] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1566.340437][T17492] netlink: 'syz.7.24549': attribute type 18 has an invalid length. [ 1566.368044][T17492] netlink: 'syz.7.24549': attribute type 21 has an invalid length. [ 1566.834168][T17566] netdevsim netdevsim7: Direct firmware load for ..€ failed with error -2 [ 1566.878950][T17574] __nla_validate_parse: 7 callbacks suppressed [ 1566.878968][T17574] netlink: 56 bytes leftover after parsing attributes in process `syz.7.24565'. [ 1566.940964][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.9.24567'. [ 1566.951459][T17583] 9pnet_fd: Insufficient options for proto=fd [ 1567.335394][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24573'. [ 1567.441595][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24574'. [ 1567.596781][T17628] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1567.719992][T17637] netlink: 300 bytes leftover after parsing attributes in process `syz.5.24579'. [ 1567.759920][T17641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1567.768759][T17641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1567.955883][T17644] netlink: 24 bytes leftover after parsing attributes in process `syz.9.24582'. [ 1568.249312][T17662] lo speed is unknown, defaulting to 1000 [ 1568.274333][T17662] lo speed is unknown, defaulting to 1000 [ 1568.920731][T17711] lo speed is unknown, defaulting to 1000 [ 1568.965442][T17711] lo speed is unknown, defaulting to 1000 [ 1569.089124][T17731] netlink: 56 bytes leftover after parsing attributes in process `syz.9.24595'. [ 1569.300669][T17748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.308033][T17748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.346362][T17748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.358677][T17748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.427138][ T1862] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.437565][ T1862] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.456725][ T1862] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.475265][ T1862] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.609585][T17776] netlink: 'syz.8.24601': attribute type 1 has an invalid length. [ 1569.637697][T17776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1569.826914][ T29] kauditd_printk_skb: 612 callbacks suppressed [ 1569.826932][ T29] audit: type=1326 audit(2000000755.036:210495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.858369][ T29] audit: type=1326 audit(2000000755.036:210496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.882727][ T29] audit: type=1326 audit(2000000755.036:210497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.906842][ T29] audit: type=1326 audit(2000000755.036:210498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.930785][ T29] audit: type=1326 audit(2000000755.036:210499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.954830][ T29] audit: type=1326 audit(2000000755.036:210500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1569.978721][ T29] audit: type=1326 audit(2000000755.036:210501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1570.002713][ T29] audit: type=1326 audit(2000000755.036:210502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1570.026683][ T29] audit: type=1326 audit(2000000755.036:210503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f18c299df90 code=0x7ffc0000 [ 1570.050639][ T29] audit: type=1326 audit(2000000755.036:210504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.9.24604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18c299f749 code=0x7ffc0000 [ 1570.755581][T17859] lo speed is unknown, defaulting to 1000 [ 1570.788127][T17859] lo speed is unknown, defaulting to 1000 [ 1570.790363][T17856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24611'. [ 1570.812562][T17856] 9pnet_fd: Insufficient options for proto=fd [ 1570.840456][T17862] netlink: 'syz.2.24613': attribute type 1 has an invalid length. [ 1570.856029][T17862] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1571.126148][T27030] bridge_slave_1: left allmulticast mode [ 1571.132034][T27030] bridge_slave_1: left promiscuous mode [ 1571.137838][T27030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.154138][T17888] loop8: detected capacity change from 0 to 1024 [ 1571.194747][T17898] netlink: 'syz.5.24622': attribute type 1 has an invalid length. [ 1571.194817][T17888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.202824][T17898] netlink: 224 bytes leftover after parsing attributes in process `syz.5.24622'. [ 1571.225122][T27030] bridge_slave_0: left allmulticast mode [ 1571.230998][T27030] bridge_slave_0: left promiscuous mode [ 1571.236836][T27030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.245814][T15851] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.450331][T27030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.459914][T27030] bond0 (unregistering): Released all slaves [ 1571.469133][T27030] bond1 (unregistering): Released all slaves [ 1571.479882][T27030] bond2 (unregistering): Released all slaves [ 1571.554946][T27030] hsr_slave_0: left promiscuous mode [ 1571.570952][T27030] hsr_slave_1: left promiscuous mode [ 1571.578377][T27030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.589793][T17951] loop5: detected capacity change from 0 to 8192 [ 1571.596817][T27030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.608359][T27030] batman_adv: batadv0: Removing interface: dummy0 [ 1571.707673][T27030] team0 (unregistering): Port device team_slave_1 removed [ 1571.733647][T27030] team0 (unregistering): Port device team_slave_0 removed [ 1571.743425][T17976] netlink: 'syz.2.24627': attribute type 1 has an invalid length. [ 1571.811470][T17976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1571.826923][T17971] ================================================================== [ 1571.835058][T17971] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 1571.842288][T17971] [ 1571.844677][T17971] write to 0xffff88817be6c0ee of 2 bytes by task 17951 on cpu 1: [ 1571.852392][T17971] fat16_ent_put+0x28/0x60 [ 1571.856814][T17971] fat_ent_write+0x6c/0xe0 [ 1571.861234][T17971] fat_chain_add+0x15d/0x440 [ 1571.865842][T17971] fat_get_block+0x46c/0x5e0 [ 1571.870444][T17971] __block_write_begin_int+0x400/0xf90 [ 1571.875920][T17971] cont_write_begin+0x5fc/0x970 [ 1571.880885][T17971] fat_write_begin+0x4f/0xe0 [ 1571.885484][T17971] cont_write_begin+0x1b0/0x970 [ 1571.890352][T17971] fat_write_begin+0x4f/0xe0 [ 1571.894949][T17971] generic_cont_expand_simple+0xb0/0x150 [ 1571.900603][T17971] fat_cont_expand+0x3e/0x170 [ 1571.905281][T17971] fat_fallocate+0x177/0x1c0 [ 1571.909875][T17971] vfs_fallocate+0x3b6/0x400 [ 1571.914476][T17971] __x64_sys_fallocate+0x7a/0xd0 [ 1571.919431][T17971] x64_sys_call+0x2518/0x3000 [ 1571.924114][T17971] do_syscall_64+0xd2/0x200 [ 1571.928624][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.934525][T17971] [ 1571.936856][T17971] read to 0xffff88817be6c000 of 512 bytes by task 17971 on cpu 0: [ 1571.944661][T17971] fat_mirror_bhs+0x1df/0x320 [ 1571.949347][T17971] fat_alloc_clusters+0x98b/0xa80 [ 1571.954473][T17971] fat_get_block+0x258/0x5e0 [ 1571.959446][T17971] __block_write_begin_int+0x400/0xf90 [ 1571.965012][T17971] cont_write_begin+0x5fc/0x970 [ 1571.969967][T17971] fat_write_begin+0x4f/0xe0 [ 1571.974573][T17971] generic_perform_write+0x184/0x490 [ 1571.979860][T17971] __generic_file_write_iter+0x9e/0x120 [ 1571.985414][T17971] generic_file_write_iter+0x8d/0x2f0 [ 1571.990794][T17971] vfs_write+0x52a/0x960 [ 1571.995136][T17971] ksys_write+0xda/0x1a0 [ 1571.999388][T17971] __x64_sys_write+0x40/0x50 [ 1572.004071][T17971] x64_sys_call+0x2802/0x3000 [ 1572.008757][T17971] do_syscall_64+0xd2/0x200 [ 1572.013272][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.019185][T17971] [ 1572.021513][T17971] Reported by Kernel Concurrency Sanitizer on: [ 1572.027663][T17971] CPU: 0 UID: 0 PID: 17971 Comm: syz.5.24624 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1572.039128][T17971] Tainted: [W]=WARN [ 1572.043364][T17971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1572.053428][T17971] ==================================================================