last executing test programs: 15m42.790020367s ago: executing program 0 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005001000001000"], 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffb}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000005b4df2ff0000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff068609000200737962320000000008004100736977001400330062726964676530"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x1, 0x0, &(0x7f0000000600), 0x1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 15m40.308022248s ago: executing program 0 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15m40.235510687s ago: executing program 0 (id=1079): syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) unshare(0x22020400) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 15m39.874110674s ago: executing program 0 (id=1086): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xc) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f00000001c0)=""/21, 0x15}, {&(0x7f0000000200)=""/175, 0xaf}, {&(0x7f00000002c0)=""/59, 0x3b}], 0x4, &(0x7f0000000340)=""/67, 0x43}, 0x10000}, {{&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/141, 0x8d}], 0x2}}], 0x2, 0x0, &(0x7f00000006c0)={r1, r2+60000000}) 15m38.8999541s ago: executing program 0 (id=1092): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x1000009, 0x8, 0x0, 0x6, 0x4, 0x1, 0x200, {0x0, @in6={{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xc}}, 0x1, 0x3, 0x0, 0x970, 0x2}}, &(0x7f0000000440)=0xb0) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000002c0)={r3, 0x200001ff}, 0x8) writev(r1, &(0x7f0000000280), 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4cd, &(0x7f0000000540)="$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") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x2}}, './file1\x00'}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r5, 0x0) 15m38.615923197s ago: executing program 0 (id=1098): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x821, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4048850) 15m38.472050125s ago: executing program 32 (id=1098): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r4, 0x821, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4094}, 0x4048850) 12m10.216502148s ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000980)='i2c_result\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448df, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0xe) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 12m8.291935736s ago: executing program 1 (id=3171): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r1, 0x0, 0x4}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) close_range(r0, r0, 0x0) 12m8.168955933s ago: executing program 1 (id=3172): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000600)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8583}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000001e00)={&(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x16}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001d80)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x6}}, 0x20) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7GtwjAYBOB7eQlJCsRKsAENm7APFQ1TULEGJWMEQWyYACGk7yvs8y+dLYev+nul4bn+l9M26zk0ZbC8DJmmsdbGdG3OSRbHW/rHpN60X5Vw7ZPNWPvtvB2m7v1wszt97mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DvuAQAA//8yUgpN") 12m7.808952699s ago: executing program 1 (id=3176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095", @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8040480) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000200)="ffbe2f33db441d046902d5e7311bc2c6af5ac71ae1191f96353d91142d0c12eb11850523a247127cdf4e42c3c4665c078158ef49c6005b6ce5cfa185e13f12a521bd318b093b14ad365edf4c684000e3cc8b59b183cc02b84314765055ef88030727fb5c3ec354f901fe5e32a742f2c96f05291fc47ee413b59b5529462c55d663f8a8b18b00f7e9ff8922c56f7d8c030931a297b792b4139e5fe4e077b75c3d9fb8ef0998503ea644874b05d70c26db2521c5788d5f88839edafd8955a04f3d0e7be203f43b8e6ae459ce5a1eb9e95506e4a6efcc0e000000f6655336f904c440eb236b4ceddba1a22eb60c", 0xe9}], 0x1, 0x5405, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000074891f1e04000000185a000008000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001846000005000000000000000000000018000000ffffff7f0000000009000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x1200, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) 12m7.449423795s ago: executing program 1 (id=3180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="b6561daa7015fa5d562daccd6d4aa28231fce4b67c7569f9dd151ecc85e1036e13dfe28e33e9bd8b20028579798d1fc4830cc5d41993e9382548e0574258eb45c239e4c893618fa7b834198548922aaad89ec8527ee294200aaf64899522449061b12c4b8f617ed6a328613080b928d9e180f5038f01e9e3647259", @ANYBLOB="3415d117a61a1817c330298efeaaf7d76c98f6b9da20bd09193adb433010f4470d792956df2afd108eea4f9cf087e7b7fc78f9f68595f06102dfcbfc24ab8c8eede693954b2d3b065a66985ece91528e50deea2eb210e931357dca2156ccbe5efed727cc6788813b1496b8ba7f75c3ec313c32d3e14e844207249e9312b7eb7222079c96adaf4de1a0eefb2156988b693341bf57e96304279dc01a319f7c10c9a4e8818e1c92ce448063f5e44f03a829680af14c86eb"], 0xff2e) r1 = gettid() r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x4b, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r2, 0x5, 0x4, 0x1}, 0x50) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600)={[{@fat=@errors_continue}, {}, {@fat=@dmask={'dmask', 0x3d, 0x32}}, {@fat=@flush}]}, 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = io_uring_setup(0x5ba8, &(0x7f0000000000)={0x0, 0xfca0, 0x10, 0x1, 0x4}) exit(0x1ff) io_uring_register$IORING_REGISTER_RING_FDS(r7, 0x13, &(0x7f0000001bc0), 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r8}, 0x10) setitimer(0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000140)="ffbe", 0x2}], 0x1, 0x810001, 0x0, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900"], 0x64}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12m7.150264544s ago: executing program 1 (id=3185): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0x2a7}) 12m7.114363169s ago: executing program 33 (id=3185): socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x1, 0x4001}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0x2a7}) 3.662594608s ago: executing program 3 (id=15803): r0 = open(0x0, 0x181000, 0x18a) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x7, 0x0, 0x4021, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x3}, 0x50) socket(0x2b, 0x1, 0x1) prctl$PR_SET_NAME(0xf, 0x0) 2.215322955s ago: executing program 4 (id=15829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc0000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xac, 0x9, 0x6, 0x402, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xa000000000000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvtap0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0xac}}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x101}, 0x18) r3 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x2, 0x2000000, 0x287, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xe03, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xffff, 0x4}, {0x5, 0xf}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@abort}, {@nogrpid}, {@auto_da_alloc}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) 2.16718834s ago: executing program 4 (id=15831): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x40000}, 0x20) 1.588817326s ago: executing program 5 (id=15840): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) socket$inet6(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0", 0x0, 0x86, 0x0, 0x7, 0x0, &(0x7f0000000000)="daf9e846ab156e", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) 1.420906937s ago: executing program 5 (id=15842): unshare(0x2020400) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) 1.325420949s ago: executing program 6 (id=15843): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68ac, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="1400000052004f030e78", 0xa) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$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") ptrace(0x10, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x4804}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x0, 0x45, 0x0, 0x1}, 0x28) 1.291588734s ago: executing program 4 (id=15844): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4044090) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) sendto$inet6(r0, &(0x7f0000000800)="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", 0x123, 0x880, 0x0, 0x0) 1.189555797s ago: executing program 3 (id=15846): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.189097047s ago: executing program 4 (id=15847): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_io_uring_setup(0x2f90, &(0x7f00000002c0)={0x0, 0x204dd8, 0x3850, 0x2, 0x200004}, 0x0, &(0x7f0000000140)) r3 = epoll_create(0xaf2) epoll_pwait2(r3, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000200f}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) getpid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206030000000000000000000700000705000100070000000900020073797a31000000000c0007800800064000000328050005000200000005000400c3dee6737aa3fa4d010000161126123e377c27ac6769702c706f7274000000006f9a69f8"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x3}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.144774863s ago: executing program 2 (id=15848): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1.143206893s ago: executing program 5 (id=15849): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c4343a34f95b39a9a3bfa7fb94e5494fb8ce1e37a65fc24a466bb37366fb162e71bc141f02f566d720cd7d0343dcf617bebc4458cf88acfe989ffe0750f364818ab947367", 0x50}, {&(0x7f0000000b00)="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", 0x569}], 0x3) 1.119346206s ago: executing program 3 (id=15850): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.104380138s ago: executing program 2 (id=15851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0xc0000) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0xac, 0x9, 0x6, 0x402, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xa000000000000}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x2}, @IPSET_ATTR_IFACE={0x14, 0x17, 'macvtap0\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}]}]}, 0xac}}, 0x800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x101}, 0x18) r3 = syz_io_uring_setup(0x1da9, &(0x7f0000005b80)={0x0, 0xe874, 0x2, 0x2000000, 0x287, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xe03, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xffff, 0x4}, {0x5, 0xf}}}, 0x24}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@abort}, {@nogrpid}, {@auto_da_alloc}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0xfffc, 0x2fd, 0x1, 0x101}}) 1.095868549s ago: executing program 5 (id=15852): unshare(0x68040200) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140a2fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = fsopen(0x0, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='wg\xc1\xd31\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00'}, 0x10) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1}, 0xc) writev(r7, &(0x7f0000000c40)=[{0x0, 0x32}, {&(0x7f00000039c0)="00000000e144f7b54973e6fcd39d9972adffcaaf4d8bbd1ce67cf99c2b47bac94c3e8b8a834ff78cee0aa7880fdc7dcf0b9f6af1eacb51224b53fe08985ddaa29ae6ed6b4c86e2c189c09ce192eb875f173842f713ced7b084cfc511c22b06083ca3b054a94e0e5b37de7c79d6ad594264059bac5cfe49696e9183666b54053e97f7ab4ab316fe52d2160c8f905238805df0f7c5f57c86b9a7545bee88ddc968b4597d575c857d93b9c8fdee01a579631202370df0a9cc6fd7f1680dddee", 0xbe}], 0x2) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r8 = dup3(0xffffffffffffffff, r6, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000001540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f0000001600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="02002abd7000ffdbdf24630000000c009900ff779da40b76ff000033000000"], 0x20}}, 0x40000) sendmmsg(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}], 0x1, 0x41) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) 1.079522741s ago: executing program 3 (id=15853): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) socket$inet6(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0", 0x0, 0x86, 0x0, 0x7, 0x0, &(0x7f0000000000)="daf9e846ab156e", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) 1.007594541s ago: executing program 2 (id=15854): r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586839) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x40000}, 0x20) 793.632548ms ago: executing program 3 (id=15855): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x42) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRESDEC=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r6, 0x0, 0x80000001}, 0x18) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc0) r7 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r3, 0x0, 0x400000}, 0x18) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20400, 0x4c3524dedc3b6717) fcntl$notify(r9, 0x402, 0x30) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) 533.453652ms ago: executing program 3 (id=15856): r0 = open(0x0, 0x181000, 0x18a) fcntl$notify(r0, 0x402, 0x8000003d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x7, 0x0, 0x4021, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x3}, 0x50) socket(0x2b, 0x1, 0x1) prctl$PR_SET_NAME(0xf, 0x0) 399.161329ms ago: executing program 5 (id=15857): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4044090) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) sendto$inet6(r0, &(0x7f0000000800)="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", 0x123, 0x880, 0x0, 0x0) 368.679543ms ago: executing program 5 (id=15858): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00602000000590000a2bc5603ca00000f7f89000000200000000101ff000000030909000000000000005e00000000000000", 0x48}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES16, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d78"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r9, 0x0, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x224064, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r11 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)=ANY=[@ANYRES32=r11, @ANYRES32=r7, @ANYBLOB="2e0000143300000000000f8ebf1beb625c86db5a89431db0e5fc00000000", @ANYRES32=r11, @ANYBLOB, @ANYRES64=r10, @ANYRESHEX=r5, @ANYRES16=r8, @ANYRES16, @ANYRESHEX=r7, @ANYRES16=r2], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r12, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x5, r13, 0x0, 0x1, 0x4}}, 0x20) 368.409403ms ago: executing program 4 (id=15859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$inet6(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e2731c83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 346.810535ms ago: executing program 6 (id=15860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 331.158028ms ago: executing program 4 (id=15861): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x42) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x81, 0x80000000, 0x6, 0x8004, r0, 0x200000, '\x00', 0x0, r0, 0x1, 0x5, 0x4, 0x0, @value=r0}, 0x50) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYBLOB="69e04de0a1c446065c935217295dfcdcd4481255b1540f71fb2c23e254984fdd74e9de00130ec50970ac62b9863da458593b6f951d0a9f2e4f322e37739bbd966d92eca654ac4a976f6d2bebf41560654fd130785eb635845e2a2d27ba34661f912d2bf23d28b396607264b5357f0df32527f9c23fda95898854bcc81287bf59efa49e51b96fff44c1de9509b8bcbae8ed8edd7985ae67c923", @ANYRESDEC=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r7, 0x0, 0x80000001}, 0x18) r8 = io_uring_setup(0x68ac, &(0x7f0000000480)={0x0, 0x10000000, 0x1880, 0x2}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) close_range(r8, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r5, 0x0, 0x400000}, 0x18) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20400, 0x4c3524dedc3b6717) fcntl$notify(r10, 0x402, 0x30) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x3, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x1, 0x100, 0x6, 0x2, 0x5, 0x3, 0x34, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xe, 0x2, 0x9, 0x4, 0x5, 0x8000000000000000, 0xc, 0x4, 0x7, 0x9, 0x8, 0x3, 0x8, 0x80000000, 0xffffffffffbffffa, 0x5, 0x7, 0x7, 0x3, 0x6}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x2, [0x0, 0x0]}, &(0x7f0000000300)=0xc) 304.737821ms ago: executing program 6 (id=15862): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f0000000240)="aa6a7fbfbf49dfac9272525c4343a34f95b39a9a3bfa7fb94e5494fb8ce1e37a65fc24a466bb37366fb162e71bc141f02f566d720cd7d0343dcf617bebc4458cf88acfe989ffe0750f364818ab947367", 0x50}, {&(0x7f0000000b00)="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", 0x569}], 0x3) 279.891264ms ago: executing program 6 (id=15863): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="83040500000000001800128008000100"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 227.402891ms ago: executing program 6 (id=15864): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 198.292425ms ago: executing program 6 (id=15865): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) socket$inet6(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x13, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0", 0x0, 0x86, 0x0, 0x7, 0x0, &(0x7f0000000000)="daf9e846ab156e", 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000a00)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="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", @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) 158.47374ms ago: executing program 2 (id=15866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x2000005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mknod(&(0x7f0000000240)='./bus\x00', 0x1000, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_allocate_blocks\x00', r4, 0x0, 0x7ff}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 74.136881ms ago: executing program 2 (id=15867): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) 0s ago: executing program 2 (id=15868): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd27}, 0x14}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) kernel console output (not intermixed with test programs): `syz.3.14893'. [ 1048.507611][T16204] bond1: option mode: unable to set because the bond device is up [ 1048.520467][T16204] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14893'. [ 1048.531143][T16204] netlink: 'syz.3.14893': attribute type 10 has an invalid length. [ 1048.545842][T16204] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1048.815600][T16229] tipc: Enabling of bearer rejected, already enabled [ 1048.841724][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14899'. [ 1048.850967][T16230] netlink: 'syz.3.14899': attribute type 5 has an invalid length. [ 1048.858896][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14899'. [ 1048.898761][T16236] 9pnet_fd: Insufficient options for proto=fd [ 1048.905595][T16237] SELinux: security_context_str_to_sid (1li03_(ٍVp,X5FI5zAMS\,=͓H̵67ӑ0bS`Uw#H-K"Fl6 \Z5t7KXunia"hL$) failed with errno=-22 [ 1048.926721][T16236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14903'. [ 1048.935885][T16236] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14903'. [ 1049.123665][T16252] loop5: detected capacity change from 0 to 512 [ 1049.135013][T16252] EXT4-fs: Ignoring removed oldalloc option [ 1049.167095][T16252] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.14907: Parent and EA inode have the same ino 15 [ 1049.190739][T16252] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.14907: Parent and EA inode have the same ino 15 [ 1049.204613][T16252] EXT4-fs (loop5): 1 orphan inode deleted [ 1049.220820][T16252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.251376][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.336058][T16274] 9pnet_fd: Insufficient options for proto=fd [ 1049.443240][T31036] tipc: Node number set to 1 [ 1050.256863][T16325] 9pnet_fd: Insufficient options for proto=fd [ 1050.342540][T16330] loop5: detected capacity change from 0 to 128 [ 1050.437803][T30308] bio_check_eod: 102 callbacks suppressed [ 1050.437820][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.437820][T30308] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1050.458671][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.458671][T30308] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1050.472633][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.472633][T30308] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1050.486412][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.486412][T30308] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1050.502163][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.502163][T30308] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1050.516160][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.516160][T30308] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1050.529964][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.529964][T30308] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1050.544124][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.544124][T30308] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1050.557677][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.557677][T30308] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1050.571323][T30308] kworker/u8:42: attempt to access beyond end of device [ 1050.571323][T30308] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1050.656981][T16349] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1051.223929][T16384] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1051.310671][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 1051.310710][ T29] audit: type=1326 audit(2000000000.272:259360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.341148][ T29] audit: type=1326 audit(2000000000.272:259361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.365499][ T29] audit: type=1326 audit(2000000000.272:259362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.389506][ T29] audit: type=1326 audit(2000000000.283:259363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.413751][ T29] audit: type=1326 audit(2000000000.283:259364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.437576][ T29] audit: type=1326 audit(2000000000.283:259365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.461348][ T29] audit: type=1326 audit(2000000000.283:259366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.485185][ T29] audit: type=1326 audit(2000000000.283:259367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.508975][ T29] audit: type=1326 audit(2000000000.283:259368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.532936][ T29] audit: type=1326 audit(2000000000.283:259369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16402 comm="syz.2.14960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1051.922140][T16418] loop5: detected capacity change from 0 to 512 [ 1051.947153][T16418] EXT4-fs: Ignoring removed oldalloc option [ 1051.980145][T16418] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.14964: Parent and EA inode have the same ino 15 [ 1052.029122][T16418] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.14964: Parent and EA inode have the same ino 15 [ 1052.141851][T16418] EXT4-fs (loop5): 1 orphan inode deleted [ 1052.167415][T16418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.302077][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.314615][ T44] Bluetooth: hci0: sending frame failed (-49) [ 1052.320903][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1053.101371][ T1037] page_pool_release_retry() stalled pool shutdown: id 383, 1 inflight 61 sec [ 1053.175792][T16466] __nla_validate_parse: 23 callbacks suppressed [ 1053.175824][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1053.204960][T16466] bond1: option mode: unable to set because the bond device has slaves [ 1053.231540][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1053.240753][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14981'. [ 1053.260901][T16466] netlink: 'syz.6.14981': attribute type 10 has an invalid length. [ 1053.298600][T16466] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1053.365656][T16483] netlink: 'syz.6.14988': attribute type 12 has an invalid length. [ 1053.466992][T16496] netlink: 48 bytes leftover after parsing attributes in process `syz.6.14993'. [ 1053.512927][T30310] Bluetooth: hci0: Frame reassembly failed (-84) [ 1053.541399][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14999'. [ 1053.550612][T16511] bond1: option mode: unable to set because the bond device has slaves [ 1053.559596][T16511] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14999'. [ 1053.568901][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14999'. [ 1053.586187][T16511] netlink: 'syz.6.14999': attribute type 10 has an invalid length. [ 1053.595457][T16511] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1053.638205][T16516] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15000'. [ 1053.788854][T16536] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15007'. [ 1053.892206][T16544] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15011'. [ 1053.923389][T16548] bond1: option mode: unable to set because the bond device is up [ 1053.942762][T16548] netlink: 'syz.2.15012': attribute type 10 has an invalid length. [ 1053.951675][T16548] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1054.085687][T16565] netlink: 'syz.6.15019': attribute type 5 has an invalid length. [ 1054.096717][T16565] SELinux: security_context_str_to_sid (b8k(;/t[aLd,2ы({8~F5# &%o%/O9~ӥEXZؙw8Y@af=t80c^{CEIG# [ 1054.096717][T16565] Ov*3AC8`F~/NwTƌ{<) failed with errno=-22 [ 1054.237596][T16581] bond1: option mode: unable to set because the bond device has slaves [ 1054.267840][T16581] netlink: 'syz.6.15026': attribute type 10 has an invalid length. [ 1054.277966][T16581] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1054.409149][T16599] netlink: 'syz.3.15031': attribute type 5 has an invalid length. [ 1054.418185][T16599] SELinux: security_context_str_to_sid (BhId]%_X5RM"ms4JP,v 5k0쭏FU9< [ 1054.418185][T16599] \SjVL^t#ONN{ڎsղ^as܀|bDns"-NfG }p:f4П-yu/]AcO9R [ 1054.418185][T16599] =reCh7 (ҧMF3C?t8#1N) failed with errno=-22 [ 1055.047103][T16640] SELinux: security_context_str_to_sid (c>ӵ !FDՠDKaA3Z^2w*n< [ 1055.047103][T16640] uCLٝy5 @KS9Ħ"*6v,8^Z) failed with errno=-22 [ 1055.195355][T16627] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1055.195355][T16627] program syz.2.15042 not setting count and/or reply_len properly [ 1055.463676][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1056.094593][ T29] kauditd_printk_skb: 393 callbacks suppressed [ 1056.094611][ T29] audit: type=1326 audit(2000000002.446:259763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.124673][ T29] audit: type=1326 audit(2000000002.446:259764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.191588][T16678] loop5: detected capacity change from 0 to 512 [ 1056.197898][ T29] audit: type=1326 audit(2000000002.530:259765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.212865][T16678] EXT4-fs: Ignoring removed oldalloc option [ 1056.222013][ T29] audit: type=1326 audit(2000000002.530:259766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.251974][ T29] audit: type=1326 audit(2000000002.530:259767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.275826][ T29] audit: type=1326 audit(2000000002.530:259768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.299532][ T29] audit: type=1326 audit(2000000002.530:259769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.323619][ T29] audit: type=1326 audit(2000000002.530:259770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1056.347912][ T29] audit: type=1326 audit(2000000002.530:259771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1456ef783 code=0x7ffc0000 [ 1056.371538][ T29] audit: type=1326 audit(2000000002.540:259772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16677 comm="syz.5.15060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1456ee1ff code=0x7ffc0000 [ 1056.402035][T16688] bond1: option mode: unable to set because the bond device has slaves [ 1056.415069][T16678] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15060: Parent and EA inode have the same ino 15 [ 1056.428386][T16688] netlink: 'syz.6.15062': attribute type 10 has an invalid length. [ 1056.437384][T16688] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1056.457062][T16678] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15060: Parent and EA inode have the same ino 15 [ 1056.476537][T16678] EXT4-fs (loop5): 1 orphan inode deleted [ 1056.483009][T16678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.570550][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.748060][T16691] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1056.748060][T16691] program syz.6.15063 not setting count and/or reply_len properly [ 1056.771616][T16703] loop5: detected capacity change from 0 to 512 [ 1056.796136][T16703] EXT4-fs: Ignoring removed oldalloc option [ 1056.831315][T16703] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15068: Parent and EA inode have the same ino 15 [ 1056.864622][T16703] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15068: Parent and EA inode have the same ino 15 [ 1056.877503][T16703] EXT4-fs (loop5): 1 orphan inode deleted [ 1056.883761][T16703] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.931396][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.958962][T16721] netlink: 'syz.4.15073': attribute type 12 has an invalid length. [ 1056.981853][T16723] loop5: detected capacity change from 0 to 512 [ 1057.004698][T16723] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.017643][T16723] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1057.044644][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.052260][T16729] netlink: 'syz.4.15074': attribute type 5 has an invalid length. [ 1057.073730][T16729] SELinux: security_context_str_to_sid (Q)@,Pޒͺ7ޥud'Qsj_d83sol= kXOygFXX󶺤JQCN){vdmVpAŨGܚ:w1_R "+{ [ 1057.073730][T16729] Zm(_ ޗeݚ8#yaM_IFg?v"N0ozeO&5S}+|WX\*ʀ|j2__*A=kQ7*KRҌ) failed with errno=-22 [ 1057.118221][T16731] loop5: detected capacity change from 0 to 128 [ 1057.292788][T30310] bio_check_eod: 102 callbacks suppressed [ 1057.292803][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.292803][T30310] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1057.318552][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.318552][T30310] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1057.333434][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.333434][T30310] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1057.347158][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.347158][T30310] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1057.362141][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.362141][T30310] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1057.378470][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.378470][T30310] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1057.392277][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.392277][T30310] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1057.406023][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.406023][T30310] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1057.436690][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.436690][T30310] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1057.450426][T30310] kworker/u8:44: attempt to access beyond end of device [ 1057.450426][T30310] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1057.549435][T16747] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1057.863338][T16768] loop5: detected capacity change from 0 to 256 [ 1058.179066][T16770] __nla_validate_parse: 18 callbacks suppressed [ 1058.179089][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15088'. [ 1058.215837][T16770] bond1: option mode: unable to set because the bond device is up [ 1058.224561][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15088'. [ 1058.234057][T16770] netlink: 'syz.3.15088': attribute type 10 has an invalid length. [ 1058.290598][T16770] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1058.775066][T16797] loop5: detected capacity change from 0 to 512 [ 1058.923307][T16797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.938340][T16807] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15099'. [ 1058.948478][T16797] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1059.040205][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1059.068417][T16809] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15100'. [ 1059.450631][T16818] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15105'. [ 1059.927731][T16847] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15112'. [ 1060.135635][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15115'. [ 1060.173036][T16854] bond1: option mode: unable to set because the bond device is up [ 1060.201422][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15115'. [ 1060.286853][T16859] netlink: 'syz.3.15115': attribute type 10 has an invalid length. [ 1060.329873][T16864] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1060.340827][T16864] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1060.361695][T16854] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1060.552532][T16887] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15125'. [ 1060.678294][T16908] bond1: option mode: unable to set because the bond device has slaves [ 1060.687850][T16908] netlink: 'syz.6.15131': attribute type 10 has an invalid length. [ 1060.698963][T16908] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1060.727500][T16911] bond1: option mode: unable to set because the bond device has slaves [ 1060.736755][T16911] netlink: 'syz.6.15132': attribute type 10 has an invalid length. [ 1060.745537][T16911] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1061.037366][ T29] kauditd_printk_skb: 417 callbacks suppressed [ 1061.037383][ T29] audit: type=1326 audit(2000000000.745:260190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.166681][T16922] loop5: detected capacity change from 0 to 1024 [ 1061.194381][ T29] audit: type=1326 audit(2000000000.776:260191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.218253][ T29] audit: type=1326 audit(2000000000.776:260192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.242216][ T29] audit: type=1326 audit(2000000000.776:260193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f68a289f783 code=0x7ffc0000 [ 1061.265863][ T29] audit: type=1326 audit(2000000000.787:260194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.289661][ T29] audit: type=1326 audit(2000000000.787:260195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.313532][ T29] audit: type=1326 audit(2000000000.787:260196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.337488][ T29] audit: type=1326 audit(2000000000.787:260197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.361432][ T29] audit: type=1326 audit(2000000000.787:260198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.385312][ T29] audit: type=1326 audit(2000000000.787:260199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16926 comm="syz.6.15138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1061.600563][T16922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1061.624502][T16919] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1061.624502][T16919] program syz.5.15135 not setting count and/or reply_len properly [ 1062.167830][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1062.183747][T16959] netlink: 'syz.6.15147': attribute type 5 has an invalid length. [ 1062.322094][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1062.328157][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1062.422777][T16962] 9pnet_fd: Insufficient options for proto=fd [ 1062.682206][T16977] netlink: 'syz.5.15152': attribute type 12 has an invalid length. [ 1062.820785][T30286] Bluetooth: hci0: Frame reassembly failed (-84) [ 1062.956841][T16997] __nla_validate_parse: 20 callbacks suppressed [ 1062.956858][T16997] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15161'. [ 1062.981514][T16999] 9pnet_fd: Insufficient options for proto=fd [ 1062.988268][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1062.997558][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.019984][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.029167][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.042897][T17005] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.065823][T17008] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15164'. [ 1063.078705][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.087858][T16999] netlink: 60 bytes leftover after parsing attributes in process `syz.6.15162'. [ 1063.131990][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15166'. [ 1063.141160][T17015] bond1: option mode: unable to set because the bond device is up [ 1063.149808][T17015] netlink: 'syz.2.15166': attribute type 10 has an invalid length. [ 1063.160968][T17015] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1063.213052][T17027] tipc: Enabling of bearer rejected, already enabled [ 1063.634008][T17050] loop5: detected capacity change from 0 to 128 [ 1063.678765][T17056] tipc: Enabling of bearer rejected, already enabled [ 1063.727137][T17062] bond1: option mode: unable to set because the bond device is up [ 1063.736281][T17062] netlink: 'syz.2.15186': attribute type 10 has an invalid length. [ 1063.761044][T17062] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1063.771772][T30297] Bluetooth: hci1: Frame reassembly failed (-84) [ 1063.814095][T30297] bio_check_eod: 102 callbacks suppressed [ 1063.814114][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.814114][T30297] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1063.833975][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.833975][T30297] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1063.849042][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.849042][T30297] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1063.862963][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.862963][T30297] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1063.876705][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.876705][T30297] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1063.890586][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.890586][T30297] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1063.904303][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.904303][T30297] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1063.918184][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.918184][T30297] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1063.932834][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.932834][T30297] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1063.953803][T30297] kworker/u8:31: attempt to access beyond end of device [ 1063.953803][T30297] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1064.288857][T17075] loop5: detected capacity change from 0 to 1024 [ 1064.307705][T17075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1064.321641][T17075] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1064.321641][T17075] program syz.5.15192 not setting count and/or reply_len properly [ 1064.571741][T17093] tipc: Enabling of bearer rejected, already enabled [ 1064.760217][ T3511] Bluetooth: hci0: command 0x1003 tx timeout [ 1064.760220][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1064.832057][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1064.852905][T17101] bond1: option mode: unable to set because the bond device is up [ 1064.862099][T17101] netlink: 'syz.5.15199': attribute type 10 has an invalid length. [ 1064.871124][T17101] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1065.751345][T10929] Bluetooth: hci1: command 0x1003 tx timeout [ 1065.757456][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1065.903528][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 1065.903610][ T29] audit: type=1326 audit(2000000001.700:260665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.5.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1065.933651][ T29] audit: type=1326 audit(2000000001.700:260666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.5.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1065.957946][ T29] audit: type=1326 audit(2000000001.700:260667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.5.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1066.025456][ T29] audit: type=1326 audit(2000000001.889:260668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.5.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1066.049540][ T29] audit: type=1326 audit(2000000001.889:260669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17120 comm="syz.5.15206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1456ef749 code=0x7ffc0000 [ 1066.189626][ T29] audit: type=1326 audit(2000000002.110:260670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.6.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1066.215279][T17132] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1066.228633][ T29] audit: type=1326 audit(2000000002.110:260672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.6.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1066.252494][ T29] audit: type=1326 audit(2000000002.110:260673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.6.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1066.276482][ T29] audit: type=1326 audit(2000000002.110:260674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.6.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1066.300481][ T29] audit: type=1326 audit(2000000002.110:260671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17137 comm="syz.6.15211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1066.884166][T17185] loop5: detected capacity change from 0 to 512 [ 1066.896504][T17185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.909273][T17185] ext4 filesystem being mounted at /396/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.945690][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.398694][T17224] SELinux: security_context_str_to_sid (smn$ts?p@72zMfB(gAI'd8) failed with errno=-22 [ 1068.373785][T17249] SELinux: security_context_str_to_sid (ڙ{]ÀXDsES)p,׳e? [ 1068.373785][T17249] DxBLorׅy%^++,t%,њ 7ڭ Lj.*3hvBԣhԟW15ཱི#pNDR3^:iR) failed with errno=-22 [ 1069.104321][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1069.104581][T10929] Bluetooth: hci0: command 0x1003 tx timeout [ 1069.152910][T17254] __nla_validate_parse: 10 callbacks suppressed [ 1069.152925][T17254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15243'. [ 1070.242481][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15260'. [ 1070.253027][T17311] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1070.299546][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15263'. [ 1070.371455][T17324] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15266'. [ 1070.820016][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 1070.820041][ T29] audit: type=1326 audit(2000000000.188:261046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1070.860207][ T29] audit: type=1326 audit(2000000000.220:261047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f945a91f783 code=0x7ffc0000 [ 1070.883896][ T29] audit: type=1326 audit(2000000000.220:261048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f945a91f807 code=0x7ffc0000 [ 1070.907667][ T29] audit: type=1326 audit(2000000000.220:261049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f945a8d6bdd code=0x7ffc0000 [ 1070.931539][ T29] audit: type=1326 audit(2000000000.220:261050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f945a953e89 code=0x7ffc0000 [ 1070.955359][ T29] audit: type=1326 audit(2000000000.220:261051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f945a8d6357 code=0x7ffc0000 [ 1070.979426][ T29] audit: type=1326 audit(2000000000.220:261052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f945a8d63b6 code=0x7ffc0000 [ 1071.003150][ T29] audit: type=1326 audit(2000000000.220:261053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1071.027009][ T29] audit: type=1326 audit(2000000000.220:261054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1071.051615][ T29] audit: type=1326 audit(2000000000.220:261055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17345 comm="syz.4.15274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1071.158698][T17354] loop5: detected capacity change from 0 to 1024 [ 1071.178282][T17360] smc: net device bond0 applied user defined pnetid SYZ0 [ 1071.188814][T17360] smc: net device bond0 erased user defined pnetid SYZ0 [ 1071.210486][T17354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.241445][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.330511][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15281'. [ 1071.347706][T17370] bond1: option mode: unable to set because the bond device is up [ 1071.357961][T17370] netlink: 36 bytes leftover after parsing attributes in process `syz.5.15281'. [ 1071.367429][T17370] netlink: 'syz.5.15281': attribute type 10 has an invalid length. [ 1071.381418][T17370] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1071.417705][T17377] loop5: detected capacity change from 0 to 512 [ 1071.440741][T17374] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15283'. [ 1071.453737][T17377] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.467922][T17377] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1071.495852][T30302] Bluetooth: hci1: Frame reassembly failed (-84) [ 1071.521612][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.691736][T17399] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1071.773326][T17399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1071.830494][T17404] FAULT_INJECTION: forcing a failure. [ 1071.830494][T17404] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1071.843941][T17404] CPU: 1 UID: 0 PID: 17404 Comm: syz.3.15291 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1071.844076][T17404] Tainted: [W]=WARN [ 1071.844083][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1071.844095][T17404] Call Trace: [ 1071.844104][T17404] [ 1071.844111][T17404] __dump_stack+0x1d/0x30 [ 1071.844144][T17404] dump_stack_lvl+0x95/0xd0 [ 1071.844173][T17404] dump_stack+0x15/0x1b [ 1071.844199][T17404] should_fail_ex+0x265/0x280 [ 1071.844230][T17404] should_fail_alloc_page+0xf2/0x100 [ 1071.844278][T17404] __alloc_frozen_pages_noprof+0x109/0x360 [ 1071.844320][T17404] alloc_pages_mpol+0xb3/0x260 [ 1071.844390][T17404] alloc_pages_noprof+0x90/0x130 [ 1071.844418][T17404] pte_alloc_one+0x1e/0xd0 [ 1071.844454][T17404] handle_mm_fault+0x1316/0x2c60 [ 1071.844508][T17404] ? _raw_spin_unlock+0x26/0x50 [ 1071.844548][T17404] __get_user_pages+0x1024/0x1ed0 [ 1071.844607][T17404] __mm_populate+0x243/0x3a0 [ 1071.844719][T17404] vm_mmap_pgoff+0x232/0x2e0 [ 1071.844746][T17404] ksys_mmap_pgoff+0x268/0x310 [ 1071.844899][T17404] x64_sys_call+0x16bb/0x3000 [ 1071.844924][T17404] do_syscall_64+0xca/0x2b0 [ 1071.845030][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.845054][T17404] RIP: 0033:0x7f12fb58f749 [ 1071.845122][T17404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1071.845145][T17404] RSP: 002b:00007f12f9ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1071.845171][T17404] RAX: ffffffffffffffda RBX: 00007f12fb7e5fa0 RCX: 00007f12fb58f749 [ 1071.845184][T17404] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1071.845197][T17404] RBP: 00007f12f9ff7090 R08: 0000000000000003 R09: 0000000000000000 [ 1071.845229][T17404] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000001 [ 1071.845246][T17404] R13: 00007f12fb7e6038 R14: 00007f12fb7e5fa0 R15: 00007ffe4cc252e8 [ 1071.845272][T17404] [ 1072.204426][T17410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15294'. [ 1072.213847][T17410] bond1: option mode: unable to set because the bond device is up [ 1072.223065][T17410] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15294'. [ 1072.233293][T17410] netlink: 'syz.3.15294': attribute type 10 has an invalid length. [ 1072.242903][T17410] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1073.232501][ T3511] Bluetooth: hci0: command 0x1003 tx timeout [ 1073.286227][T10929] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1073.448003][T10929] Bluetooth: hci1: command 0x1003 tx timeout [ 1073.454499][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1073.595742][T17443] bond1: option mode: unable to set because the bond device is up [ 1073.629763][T17443] netlink: 'syz.5.15305': attribute type 10 has an invalid length. [ 1073.638487][T17443] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1073.825733][T17448] loop5: detected capacity change from 0 to 256 [ 1073.925363][T17465] __nla_validate_parse: 5 callbacks suppressed [ 1073.925384][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15312'. [ 1074.005757][T17474] loop5: detected capacity change from 0 to 512 [ 1074.013036][T17474] EXT4-fs: Ignoring removed oldalloc option [ 1074.024799][T17474] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15313: Parent and EA inode have the same ino 15 [ 1074.066120][T17474] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15313: Parent and EA inode have the same ino 15 [ 1074.079079][T17474] EXT4-fs (loop5): 1 orphan inode deleted [ 1074.098873][T17478] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15315'. [ 1074.109414][T17475] SELinux: security_context_str_to_sid (ƒ[~Œ,#8Tn [ 1074.109414][T17475] [ 1074.109414][T17475] YkmG~lH r-`pm&, lX"2L\V&h ~dLcwO [ 1074.109414][T17475] hjFړFL9dƉ3U4}V,<8؅?HYvn) failed with errno=-22 [ 1074.138375][T17474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.216201][T17482] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1074.238295][T17482] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1074.252492][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.310873][T17491] loop5: detected capacity change from 0 to 512 [ 1074.332985][T17496] FAULT_INJECTION: forcing a failure. [ 1074.332985][T17496] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.345690][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.2.15321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1074.345741][T17496] Tainted: [W]=WARN [ 1074.345748][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.345761][T17496] Call Trace: [ 1074.345768][T17496] [ 1074.345777][T17496] __dump_stack+0x1d/0x30 [ 1074.345941][T17496] dump_stack_lvl+0x95/0xd0 [ 1074.345975][T17496] dump_stack+0x15/0x1b [ 1074.346003][T17496] should_fail_ex+0x265/0x280 [ 1074.346033][T17496] should_failslab+0x8c/0xb0 [ 1074.346059][T17496] __kmalloc_cache_noprof+0x65/0x4c0 [ 1074.346119][T17496] ? __request_region+0x55/0x420 [ 1074.346151][T17496] ? __rcu_read_unlock+0x34/0x70 [ 1074.346179][T17496] __request_region+0x55/0x420 [ 1074.346236][T17496] ? bpf_trace_run2+0x124/0x1d0 [ 1074.346292][T17496] ? serial_do_unlink+0x1a4/0x1c0 [ 1074.346314][T17496] ? free_resource+0xe6/0x1a0 [ 1074.346344][T17496] serial8250_request_std_resource+0x11d/0x260 [ 1074.346439][T17496] serial8250_config_port+0x38/0x2b70 [ 1074.346555][T17496] ? free_resource+0xe6/0x1a0 [ 1074.346578][T17496] ? __release_region+0x1e1/0x240 [ 1074.346629][T17496] univ8250_config_port+0x299/0x370 [ 1074.346700][T17496] uart_ioctl+0xb4b/0xea0 [ 1074.346726][T17496] ? ioctl_has_perm+0x255/0x2a0 [ 1074.346765][T17496] ? do_vfs_ioctl+0x866/0xe10 [ 1074.346803][T17496] ? tty_jobctrl_ioctl+0x29e/0x810 [ 1074.346872][T17496] tty_ioctl+0x7d8/0xb80 [ 1074.346907][T17496] ? __pfx_tty_ioctl+0x10/0x10 [ 1074.346963][T17496] __se_sys_ioctl+0xce/0x140 [ 1074.346998][T17496] __x64_sys_ioctl+0x43/0x50 [ 1074.347027][T17496] x64_sys_call+0x14b0/0x3000 [ 1074.347125][T17496] do_syscall_64+0xca/0x2b0 [ 1074.347170][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.347256][T17496] RIP: 0033:0x7fb8e01bf749 [ 1074.347275][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.347355][T17496] RSP: 002b:00007fb8dec27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1074.347378][T17496] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e01bf749 [ 1074.347420][T17496] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 1074.347438][T17496] RBP: 00007fb8dec27090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.347455][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.347469][T17496] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffd9f66cff8 [ 1074.347489][T17496] [ 1074.642486][T17491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.714668][T17491] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.742071][T17506] FAULT_INJECTION: forcing a failure. [ 1074.742071][T17506] name failslab, interval 1, probability 0, space 0, times 0 [ 1074.754804][T17506] CPU: 1 UID: 0 PID: 17506 Comm: syz.2.15325 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1074.754839][T17506] Tainted: [W]=WARN [ 1074.754846][T17506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1074.754859][T17506] Call Trace: [ 1074.754880][T17506] [ 1074.754891][T17506] __dump_stack+0x1d/0x30 [ 1074.754940][T17506] dump_stack_lvl+0x95/0xd0 [ 1074.754962][T17506] dump_stack+0x15/0x1b [ 1074.755039][T17506] should_fail_ex+0x265/0x280 [ 1074.755064][T17506] should_failslab+0x8c/0xb0 [ 1074.755095][T17506] __kmalloc_noprof+0xb9/0x5a0 [ 1074.755124][T17506] ? alloc_pipe_info+0x1c9/0x340 [ 1074.755149][T17506] ? alloc_pipe_info+0xae/0x340 [ 1074.755248][T17506] alloc_pipe_info+0x1c9/0x340 [ 1074.755272][T17506] splice_direct_to_actor+0x592/0x680 [ 1074.755298][T17506] ? kstrtouint_from_user+0x9f/0xf0 [ 1074.755328][T17506] ? __pfx_direct_splice_actor+0x10/0x10 [ 1074.755477][T17506] ? __rcu_read_unlock+0x4f/0x70 [ 1074.755504][T17506] ? get_pid_task+0x96/0xd0 [ 1074.755544][T17506] ? avc_policy_seqno+0x15/0x30 [ 1074.755586][T17506] ? selinux_file_permission+0x1e2/0x320 [ 1074.755620][T17506] do_splice_direct+0xda/0x150 [ 1074.755646][T17506] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1074.755701][T17506] do_sendfile+0x380/0x650 [ 1074.755797][T17506] __x64_sys_sendfile64+0x105/0x150 [ 1074.755857][T17506] x64_sys_call+0x2db1/0x3000 [ 1074.755891][T17506] do_syscall_64+0xca/0x2b0 [ 1074.755926][T17506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.756000][T17506] RIP: 0033:0x7fb8e01bf749 [ 1074.756016][T17506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1074.756034][T17506] RSP: 002b:00007fb8dec27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1074.756053][T17506] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e01bf749 [ 1074.756071][T17506] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000005 [ 1074.756087][T17506] RBP: 00007fb8dec27090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.756137][T17506] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 1074.756149][T17506] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffd9f66cff8 [ 1074.756168][T17506] [ 1075.060314][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.115860][T17524] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15328'. [ 1075.208728][T17530] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15331'. [ 1075.218049][T17530] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15331'. [ 1075.322710][T17527] loop5: detected capacity change from 0 to 512 [ 1075.330489][T17527] EXT4-fs: Ignoring removed oldalloc option [ 1075.356651][T17527] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15330: Parent and EA inode have the same ino 15 [ 1075.382915][T17527] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15330: Parent and EA inode have the same ino 15 [ 1075.404547][T17527] EXT4-fs (loop5): 1 orphan inode deleted [ 1075.458188][T17527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.984934][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 1075.984952][ T29] audit: type=1326 audit(2000000001.406:261501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.033389][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.069122][T17562] SELinux: security_context_str_to_sid (ՉQ:0N He=>-: Iw [ 1076.069122][T17562] ?1KX£d<*wvBo'#Hwt#J&K+%1q0oۀ822}ލQ*6`{l鿺3/CkuΝ8geYQĖ}fp40@ |6#d14DIAŽIס][ݠ/Hk,g) failed with errno=-22 [ 1076.109715][T17566] pimreg: entered allmulticast mode [ 1076.117523][T17565] pimreg: left allmulticast mode [ 1076.122625][ T29] audit: type=1326 audit(2000000001.438:261502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.146573][ T29] audit: type=1326 audit(2000000001.448:261503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.170515][ T29] audit: type=1326 audit(2000000001.448:261504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.194315][ T29] audit: type=1326 audit(2000000001.448:261505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.218137][ T29] audit: type=1326 audit(2000000001.448:261506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.242044][ T29] audit: type=1326 audit(2000000001.448:261507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.265913][ T29] audit: type=1326 audit(2000000001.448:261508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.289800][ T29] audit: type=1326 audit(2000000001.448:261509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.313832][ T29] audit: type=1326 audit(2000000001.459:261510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17560 comm="syz.2.15338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1076.562368][T17570] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15341'. [ 1076.632442][T17574] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15342'. [ 1077.707969][T17623] : renamed from wg2 (while UP) [ 1077.850516][T17626] netlink: 44 bytes leftover after parsing attributes in process `syz.6.15355'. [ 1077.883308][T17634] netlink: 'syz.6.15359': attribute type 12 has an invalid length. [ 1078.280489][T17656] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15364'. [ 1078.794939][T17669] loop5: detected capacity change from 0 to 256 [ 1078.827259][T17668] __nla_validate_parse: 1 callbacks suppressed [ 1078.827274][T17668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15369'. [ 1078.906304][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15370'. [ 1078.919404][T17676] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1079.497605][T17705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1079.525525][T17705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1079.543520][T17703] syz_tun: left allmulticast mode [ 1079.548666][T17703] syz_tun: left promiscuous mode [ 1079.553848][T17703] bridge0: port 3(syz_tun) entered disabled state [ 1079.609592][T17703] bond0: (slave bridge0): Releasing backup interface [ 1079.628860][T17703] bond1: (slave bond0): Releasing active interface [ 1079.661802][T17703] bridge_slave_0: left allmulticast mode [ 1079.667568][T17703] bridge_slave_0: left promiscuous mode [ 1079.673424][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.708707][T17703] bridge_slave_1: left allmulticast mode [ 1079.714463][T17703] bridge_slave_1: left promiscuous mode [ 1079.720261][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.764678][T17703] bond0: (slave bond_slave_0): Releasing backup interface [ 1079.775324][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15382'. [ 1079.789676][T17703] bond0: (slave bond_slave_1): Releasing backup interface [ 1079.823505][T17703] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1079.843365][ T3942] syb2: Port: 1 Link DOWN [ 1079.855095][T17710] tipc: New replicast peer: 255.255.255.255 [ 1079.861470][T17710] tipc: Enabled bearer , priority 10 [ 1079.935854][T17715] FAULT_INJECTION: forcing a failure. [ 1079.935854][T17715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1079.949181][T17715] CPU: 0 UID: 0 PID: 17715 Comm: syz.2.15384 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1079.949221][T17715] Tainted: [W]=WARN [ 1079.949231][T17715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1079.949264][T17715] Call Trace: [ 1079.949272][T17715] [ 1079.949282][T17715] __dump_stack+0x1d/0x30 [ 1079.949312][T17715] dump_stack_lvl+0x95/0xd0 [ 1079.949339][T17715] dump_stack+0x15/0x1b [ 1079.949445][T17715] should_fail_ex+0x265/0x280 [ 1079.949476][T17715] should_fail+0xb/0x20 [ 1079.949496][T17715] should_fail_usercopy+0x1a/0x20 [ 1079.949597][T17715] _copy_from_user+0x1c/0xb0 [ 1079.949624][T17715] ___sys_sendmsg+0xc1/0x1d0 [ 1079.949672][T17715] __x64_sys_sendmsg+0xd4/0x160 [ 1079.949715][T17715] x64_sys_call+0x17ba/0x3000 [ 1079.949824][T17715] do_syscall_64+0xca/0x2b0 [ 1079.949863][T17715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.949907][T17715] RIP: 0033:0x7fb8e01bf749 [ 1079.949927][T17715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.950065][T17715] RSP: 002b:00007fb8dec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1079.950132][T17715] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e01bf749 [ 1079.950161][T17715] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1079.950177][T17715] RBP: 00007fb8dec27090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.950194][T17715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.950281][T17715] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffd9f66cff8 [ 1079.950363][T17715] [ 1080.142837][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15387'. [ 1080.152413][T17722] bond1: option mode: unable to set because the bond device is up [ 1080.162732][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15387'. [ 1080.171813][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15387'. [ 1080.174807][T17725] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15388'. [ 1080.196612][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.200545][T17726] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15386'. [ 1080.209182][T17722] bond1: (slave bond0): making interface the new active one [ 1080.222575][T17722] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1080.235839][T17719] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1080.263822][T17722] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1080.325867][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15389'. [ 1080.618009][T17743] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15392'. [ 1080.627257][T17743] bond1: option mode: unable to set because the bond device has slaves [ 1080.637051][T17743] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1080.665333][T17745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1080.674971][T17745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1080.734990][ T4148] usb usb6-port1: attempt power cycle [ 1081.089231][T17754] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.138046][T17754] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.168346][T17762] netlink: 'syz.5.15397': attribute type 3 has an invalid length. [ 1081.184746][T17754] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.219553][T17773] bond1: option mode: unable to set because the bond device is up [ 1081.230321][T17754] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.243513][T17773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.253028][T17773] bond1: (slave bond0): Enslaving as an active interface with a down link [ 1081.263650][T17773] bridge0: port 1(syz_tun) entered blocking state [ 1081.270227][T17773] bridge0: port 1(syz_tun) entered disabled state [ 1081.277166][T17773] syz_tun: entered allmulticast mode [ 1081.284084][T17773] syz_tun: entered promiscuous mode [ 1081.291595][T17773] syz1: rxe_newlink: already configured on syz_tun [ 1081.304550][T30308] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.320582][T30308] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.333682][T30308] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.353146][T30308] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.426639][T17787] netlink: 'syz.2.15409': attribute type 1 has an invalid length. [ 1081.459244][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 1081.459265][ T29] audit: type=1400 audit(2000000004.671:261753): avc: denied { write } for pid=17784 comm="syz.6.15408" lport=56099 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1081.492018][ T29] audit: type=1400 audit(2000000004.713:261754): avc: denied { getopt } for pid=17784 comm="syz.6.15408" lport=56099 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1081.516816][ T29] audit: type=1400 audit(2000000004.713:261755): avc: denied { setopt } for pid=17784 comm="syz.6.15408" lport=56099 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1081.566717][T17785] tipc: New replicast peer: 255.255.255.255 [ 1081.567459][ T29] audit: type=1326 audit(2000000004.766:261756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.573688][T17785] tipc: Enabled bearer , priority 10 [ 1081.596567][ T29] audit: type=1326 audit(2000000004.766:261757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.627043][ T29] audit: type=1326 audit(2000000004.766:261758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.650929][ T29] audit: type=1326 audit(2000000004.766:261759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.674720][ T29] audit: type=1326 audit(2000000004.766:261760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.698622][ T29] audit: type=1326 audit(2000000004.766:261761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68a289f749 code=0x7ffc0000 [ 1081.722467][ T29] audit: type=1326 audit(2000000004.766:261762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.6.15408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68a28a1667 code=0x7ffc0000 [ 1081.820213][T17806] loop5: detected capacity change from 0 to 512 [ 1081.830388][T17806] EXT4-fs: Ignoring removed oldalloc option [ 1081.836362][T17806] EXT4-fs: test_dummy_encryption option not supported [ 1081.864782][T17809] bond1: option mode: unable to set because the bond device is up [ 1081.874669][T17809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.883474][T17809] bond1: (slave bond0): making interface the new active one [ 1081.892318][T17809] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1081.904434][T17809] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1081.948985][T17799] cgroup: fork rejected by pids controller in /syz6 [ 1082.084914][T17838] netlink: 'syz.2.15419': attribute type 10 has an invalid length. [ 1082.118279][T17810] Set syz1 is full, maxelem 65536 reached [ 1082.124465][T17838] bond1: (slave bond0): Releasing active interface [ 1082.156234][T17845] FAULT_INJECTION: forcing a failure. [ 1082.156234][T17845] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.169167][T17845] CPU: 1 UID: 0 PID: 17845 Comm: syz.4.15420 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1082.169209][T17845] Tainted: [W]=WARN [ 1082.169219][T17845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.169287][T17845] Call Trace: [ 1082.169295][T17845] [ 1082.169303][T17845] __dump_stack+0x1d/0x30 [ 1082.169328][T17845] dump_stack_lvl+0x95/0xd0 [ 1082.169350][T17845] dump_stack+0x15/0x1b [ 1082.169440][T17845] should_fail_ex+0x265/0x280 [ 1082.169463][T17845] should_failslab+0x8c/0xb0 [ 1082.169491][T17845] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 1082.169522][T17845] ? __alloc_skb+0x2ff/0x4b0 [ 1082.169599][T17845] __alloc_skb+0x2ff/0x4b0 [ 1082.169628][T17845] ? __alloc_skb+0x228/0x4b0 [ 1082.169660][T17845] __ip6_append_data+0x190f/0x2390 [ 1082.169697][T17845] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1082.169741][T17845] ip6_append_data+0x138/0x240 [ 1082.169770][T17845] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1082.169806][T17845] udpv6_sendmsg+0x8a8/0x15b0 [ 1082.169853][T17845] ? avc_has_perm_noaudit+0xab/0x130 [ 1082.169896][T17845] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1082.169947][T17845] ? __rcu_read_unlock+0x4f/0x70 [ 1082.169986][T17845] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1082.170091][T17845] inet6_sendmsg+0xac/0xd0 [ 1082.170128][T17845] __sock_sendmsg+0x8b/0x180 [ 1082.170154][T17845] sock_write_iter+0x1a7/0x1f0 [ 1082.170229][T17845] do_iter_readv_writev+0x4a1/0x540 [ 1082.170356][T17845] vfs_writev+0x2df/0x8b0 [ 1082.170461][T17845] do_writev+0xe7/0x210 [ 1082.170494][T17845] __x64_sys_writev+0x45/0x50 [ 1082.170573][T17845] x64_sys_call+0x1ba5/0x3000 [ 1082.170605][T17845] do_syscall_64+0xca/0x2b0 [ 1082.170651][T17845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.170679][T17845] RIP: 0033:0x7f945a91f749 [ 1082.170707][T17845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.170732][T17845] RSP: 002b:00007f9459387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1082.170758][T17845] RAX: ffffffffffffffda RBX: 00007f945ab75fa0 RCX: 00007f945a91f749 [ 1082.170775][T17845] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1082.170792][T17845] RBP: 00007f9459387090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.170809][T17845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.170825][T17845] R13: 00007f945ab76038 R14: 00007f945ab75fa0 R15: 00007ffc8b348678 [ 1082.170880][T17845] [ 1082.821147][ T4148] usb usb6-port1: unable to enumerate USB device [ 1082.861506][T17875] loop5: detected capacity change from 0 to 512 [ 1083.205460][T17875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.219831][T17875] ext4 filesystem being mounted at /435/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1083.417086][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.600033][T17896] Falling back ldisc for ptm0. [ 1083.634214][T17903] __nla_validate_parse: 16 callbacks suppressed [ 1083.634233][T17903] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15440'. [ 1083.702430][T17900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15439'. [ 1083.795618][T17913] loop5: detected capacity change from 0 to 512 [ 1083.807307][T17916] : renamed from wg2 (while UP) [ 1084.071434][T17913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1084.084757][T17913] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1084.171611][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1084.317379][T17929] FAULT_INJECTION: forcing a failure. [ 1084.317379][T17929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.330610][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.3.15449 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1084.330651][T17929] Tainted: [W]=WARN [ 1084.330658][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.330670][T17929] Call Trace: [ 1084.330677][T17929] [ 1084.330685][T17929] __dump_stack+0x1d/0x30 [ 1084.330736][T17929] dump_stack_lvl+0x95/0xd0 [ 1084.330765][T17929] dump_stack+0x15/0x1b [ 1084.330790][T17929] should_fail_ex+0x265/0x280 [ 1084.330812][T17929] should_fail+0xb/0x20 [ 1084.330889][T17929] should_fail_usercopy+0x1a/0x20 [ 1084.330915][T17929] _copy_from_iter+0xcf/0xe70 [ 1084.330970][T17929] ? __build_skb_around+0x164/0x1c0 [ 1084.331005][T17929] ? __alloc_skb+0x396/0x4b0 [ 1084.331035][T17929] ? __alloc_skb+0x228/0x4b0 [ 1084.331060][T17929] pfkey_sendmsg+0x126/0x900 [ 1084.331100][T17929] ? avc_has_perm+0xf7/0x180 [ 1084.331185][T17929] ? selinux_socket_sendmsg+0x175/0x1b0 [ 1084.331222][T17929] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1084.331321][T17929] __sock_sendmsg+0x145/0x180 [ 1084.331347][T17929] ____sys_sendmsg+0x31e/0x4a0 [ 1084.331460][T17929] ___sys_sendmsg+0x17b/0x1d0 [ 1084.331506][T17929] __x64_sys_sendmsg+0xd4/0x160 [ 1084.331605][T17929] x64_sys_call+0x17ba/0x3000 [ 1084.331634][T17929] do_syscall_64+0xca/0x2b0 [ 1084.331747][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.331776][T17929] RIP: 0033:0x7f12fb58f749 [ 1084.331796][T17929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.331815][T17929] RSP: 002b:00007f12f9ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1084.331836][T17929] RAX: ffffffffffffffda RBX: 00007f12fb7e5fa0 RCX: 00007f12fb58f749 [ 1084.331926][T17929] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1084.332020][T17929] RBP: 00007f12f9ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.332033][T17929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.332093][T17929] R13: 00007f12fb7e6038 R14: 00007f12fb7e5fa0 R15: 00007ffe4cc252e8 [ 1084.332119][T17929] [ 1084.561947][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15450'. [ 1084.648610][T17940] netlink: 16 bytes leftover after parsing attributes in process `syz.6.15454'. [ 1084.678758][T17945] netlink: 'syz.4.15457': attribute type 12 has an invalid length. [ 1084.727288][T17953] FAULT_INJECTION: forcing a failure. [ 1084.727288][T17953] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.740081][T17953] CPU: 1 UID: 0 PID: 17953 Comm: syz.4.15461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1084.740128][T17953] Tainted: [W]=WARN [ 1084.740135][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.740151][T17953] Call Trace: [ 1084.740160][T17953] [ 1084.740171][T17953] __dump_stack+0x1d/0x30 [ 1084.740226][T17953] dump_stack_lvl+0x95/0xd0 [ 1084.740311][T17953] dump_stack+0x15/0x1b [ 1084.740337][T17953] should_fail_ex+0x265/0x280 [ 1084.740367][T17953] should_failslab+0x8c/0xb0 [ 1084.740418][T17953] __kmalloc_node_noprof+0xbe/0x5c0 [ 1084.740441][T17953] ? __vmalloc_node_range_noprof+0x433/0x1310 [ 1084.740537][T17953] __vmalloc_node_range_noprof+0x433/0x1310 [ 1084.740564][T17953] ? path_openat+0x1e82/0x23b0 [ 1084.740657][T17953] ? _parse_integer+0x27/0x40 [ 1084.740681][T17953] ? __rcu_read_unlock+0x4f/0x70 [ 1084.740712][T17953] ? sel_write_load+0x157/0x380 [ 1084.740789][T17953] vmalloc_noprof+0x82/0xc0 [ 1084.740830][T17953] ? sel_write_load+0x157/0x380 [ 1084.740861][T17953] sel_write_load+0x157/0x380 [ 1084.740981][T17953] ? __pfx_sel_write_load+0x10/0x10 [ 1084.741051][T17953] vfs_write+0x269/0x960 [ 1084.741073][T17953] ? __rcu_read_unlock+0x4f/0x70 [ 1084.741098][T17953] ? __fget_files+0x184/0x1c0 [ 1084.741206][T17953] ? mutex_lock+0x58/0x90 [ 1084.741317][T17953] ksys_write+0xda/0x1a0 [ 1084.741336][T17953] __x64_sys_write+0x40/0x50 [ 1084.741360][T17953] x64_sys_call+0x2847/0x3000 [ 1084.741414][T17953] do_syscall_64+0xca/0x2b0 [ 1084.741456][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.741533][T17953] RIP: 0033:0x7f945a91f749 [ 1084.741551][T17953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.741575][T17953] RSP: 002b:00007f9459387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.741670][T17953] RAX: ffffffffffffffda RBX: 00007f945ab75fa0 RCX: 00007f945a91f749 [ 1084.741685][T17953] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 1084.741765][T17953] RBP: 00007f9459387090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.741778][T17953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.741791][T17953] R13: 00007f945ab76038 R14: 00007f945ab75fa0 R15: 00007ffc8b348678 [ 1084.741810][T17953] [ 1084.741820][T17953] syz.4.15461: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0 [ 1084.987641][T17953] CPU: 1 UID: 0 PID: 17953 Comm: syz.4.15461 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1084.987683][T17953] Tainted: [W]=WARN [ 1084.987734][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1084.987752][T17953] Call Trace: [ 1084.987760][T17953] [ 1084.987849][T17953] __dump_stack+0x1d/0x30 [ 1084.987904][T17953] dump_stack_lvl+0x95/0xd0 [ 1084.987932][T17953] dump_stack+0x15/0x1b [ 1084.987955][T17953] warn_alloc+0x12b/0x1a0 [ 1084.987988][T17953] __vmalloc_node_range_noprof+0x7fc/0x1310 [ 1084.988046][T17953] ? path_openat+0x1e82/0x23b0 [ 1084.988091][T17953] ? _parse_integer+0x27/0x40 [ 1084.988111][T17953] ? __rcu_read_unlock+0x4f/0x70 [ 1084.988168][T17953] ? sel_write_load+0x157/0x380 [ 1084.988225][T17953] vmalloc_noprof+0x82/0xc0 [ 1084.988249][T17953] ? sel_write_load+0x157/0x380 [ 1084.988327][T17953] sel_write_load+0x157/0x380 [ 1084.988371][T17953] ? __pfx_sel_write_load+0x10/0x10 [ 1084.988476][T17953] vfs_write+0x269/0x960 [ 1084.988500][T17953] ? __rcu_read_unlock+0x4f/0x70 [ 1084.988527][T17953] ? __fget_files+0x184/0x1c0 [ 1084.988557][T17953] ? mutex_lock+0x58/0x90 [ 1084.988591][T17953] ksys_write+0xda/0x1a0 [ 1084.988667][T17953] __x64_sys_write+0x40/0x50 [ 1084.988692][T17953] x64_sys_call+0x2847/0x3000 [ 1084.988720][T17953] do_syscall_64+0xca/0x2b0 [ 1084.988815][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.988856][T17953] RIP: 0033:0x7f945a91f749 [ 1084.988875][T17953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1084.988900][T17953] RSP: 002b:00007f9459387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1084.988925][T17953] RAX: ffffffffffffffda RBX: 00007f945ab75fa0 RCX: 00007f945a91f749 [ 1084.989029][T17953] RDX: 0000000000000010 RSI: 0000200000000640 RDI: 0000000000000006 [ 1084.989044][T17953] RBP: 00007f9459387090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.989127][T17953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.989144][T17953] R13: 00007f945ab76038 R14: 00007f945ab75fa0 R15: 00007ffc8b348678 [ 1084.989246][T17953] [ 1084.989256][T17953] Mem-Info: [ 1085.148337][T17960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15464'. [ 1085.149924][T17953] active_anon:9294 inactive_anon:74 isolated_anon:0 [ 1085.149924][T17953] active_file:28013 inactive_file:3201 isolated_file:0 [ 1085.149924][T17953] unevictable:0 dirty:225 writeback:0 [ 1085.149924][T17953] slab_reclaimable:3746 slab_unreclaimable:23811 [ 1085.149924][T17953] mapped:32682 shmem:2641 pagetables:3119 [ 1085.149924][T17953] sec_pagetables:0 bounce:0 [ 1085.149924][T17953] kernel_misc_reclaimable:0 [ 1085.149924][T17953] free:1854103 free_pcp:8556 free_cma:0 [ 1085.260845][T17953] Node 0 active_anon:38452kB inactive_anon:296kB active_file:112052kB inactive_file:12804kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:131656kB dirty:900kB writeback:0kB shmem:11492kB kernel_stack:6736kB pagetables:12592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1085.288716][T17953] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1085.318505][T17953] lowmem_reserve[]: 0 2880 7859 7859 [ 1085.323848][T17953] Node 0 DMA32 free:2945992kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949520kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 1085.355055][T17953] lowmem_reserve[]: 0 0 4978 4978 [ 1085.360520][T17953] Node 0 Normal free:4454596kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39960kB inactive_anon:296kB active_file:112052kB inactive_file:12804kB unevictable:0kB writepending:900kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:28276kB local_pcp:15520kB free_cma:0kB [ 1085.394128][T17953] lowmem_reserve[]: 0 0 0 0 [ 1085.398822][T17953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1085.411937][T17953] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945992kB [ 1085.428297][T17953] Node 0 Normal: 2430*4kB (UME) 3676*8kB (UME) 1789*16kB (UME) 2012*32kB (UME) 1614*64kB (UME) 934*128kB (UM) 617*256kB (UME) 415*512kB (UME) 317*1024kB (UME) 260*2048kB (UME) 701*4096kB (UM) = 4453800kB [ 1085.448846][T17953] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1085.458273][T17953] 34225 total pagecache pages [ 1085.463001][T17953] 74 pages in swap cache [ 1085.467262][T17953] Free swap = 124692kB [ 1085.471449][T17953] Total swap = 124996kB [ 1085.475620][T17953] 2097051 pages RAM [ 1085.479467][T17953] 0 pages HighMem/MovableOnly [ 1085.484159][T17953] 81271 pages reserved [ 1085.691695][T17980] loop5: detected capacity change from 0 to 512 [ 1085.908371][T17980] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1085.940011][T17980] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1086.011744][T17994] loop5: detected capacity change from 0 to 512 [ 1086.024128][T17994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.060856][T17994] ext4 filesystem being mounted at /445/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1086.174959][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1086.236460][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 1086.236479][ T29] audit: type=1326 audit(2000000003.558:262010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.274499][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15478'. [ 1086.305770][T18008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15477'. [ 1086.315072][ T29] audit: type=1326 audit(2000000003.590:262011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.339193][ T29] audit: type=1326 audit(2000000003.590:262012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.363518][ T29] audit: type=1326 audit(2000000003.590:262013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.387492][ T29] audit: type=1326 audit(2000000003.590:262014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.411571][ T29] audit: type=1326 audit(2000000003.590:262015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.420279][T18011] SELinux: security_context_str_to_sid (& 01R=;'w c^>_0ZT>IJg<ݣǣeMx} obMY'm %UylW)2fD[k6gǽօL"<$4TǾԐvp$P:#)PCW*;m&vխzU)0NB_(Pd}LisK) failed with errno=-22 [ 1086.435606][ T29] audit: type=1326 audit(2000000003.590:262016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.489379][ T29] audit: type=1326 audit(2000000003.590:262017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.513184][ T29] audit: type=1326 audit(2000000003.590:262018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.536981][ T29] audit: type=1326 audit(2000000003.590:262019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18000 comm="syz.4.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f945a91f749 code=0x7ffc0000 [ 1086.671537][T17981] chnl_net:caif_netlink_parms(): no params data found [ 1086.682732][T18023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15484'. [ 1086.791498][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15487'. [ 1086.832315][T16888] syz_tun (unregistering): left allmulticast mode [ 1086.838826][T16888] syz_tun (unregistering): left promiscuous mode [ 1086.845361][T16888] bridge0: port 3(syz_tun) entered disabled state [ 1086.894911][T17981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.902255][T17981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.910113][T17981] bridge_slave_0: entered allmulticast mode [ 1086.916722][T17981] bridge_slave_0: entered promiscuous mode [ 1086.931260][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15488'. [ 1086.951340][T17981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.958672][T17981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.966025][T17981] bridge_slave_1: entered allmulticast mode [ 1086.972704][T17981] bridge_slave_1: entered promiscuous mode [ 1087.018626][T17981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.034260][T17981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.045717][T30286] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.120420][T17981] team0: Port device team_slave_0 added [ 1087.130655][T30286] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.149970][T17981] team0: Port device team_slave_1 added [ 1087.190619][T30286] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.217830][T17981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.225056][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.251551][T17981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.266696][T17981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.273746][T17981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1087.299744][T17981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1087.362552][T30286] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.395490][T17981] hsr_slave_0: entered promiscuous mode [ 1087.408971][T17981] hsr_slave_1: entered promiscuous mode [ 1087.427796][T17981] debugfs: 'hsr0' already exists in 'hsr' [ 1087.433688][T17981] Cannot create hsr debugfs directory [ 1087.560031][T30286] batadv0: left allmulticast mode [ 1087.565203][T30286] batadv0: left promiscuous mode [ 1087.570367][T30286] bridge0: port 4(batadv0) entered disabled state [ 1087.611428][T30286] bridge_slave_1: left allmulticast mode [ 1087.612082][T18056] loop5: detected capacity change from 0 to 512 [ 1087.617328][T30286] bridge_slave_1: left promiscuous mode [ 1087.629248][T30286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.639951][T18056] EXT4-fs: Ignoring removed oldalloc option [ 1087.646184][T30286] bridge_slave_0: left allmulticast mode [ 1087.651911][T30286] bridge_slave_0: left promiscuous mode [ 1087.657626][T30286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1087.688419][T18056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15496: Parent and EA inode have the same ino 15 [ 1087.726518][T30286] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1087.738429][T18056] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.15496: Parent and EA inode have the same ino 15 [ 1087.771969][T18056] EXT4-fs (loop5): 1 orphan inode deleted [ 1087.788271][T18056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.802713][T30286] bond1 (unregistering): (slave bond0): Releasing active interface [ 1087.821151][T30286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1087.833067][T30286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1087.880828][T30286] bond0 (unregistering): Released all slaves [ 1087.892646][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.902827][T30286] bond1 (unregistering): Released all slaves [ 1087.912172][T30286] bond2 (unregistering): Released all slaves [ 1087.959871][T30286] tipc: Disabling bearer [ 1087.965215][T30286] tipc: Disabling bearer [ 1087.970467][T30286] tipc: Left network mode [ 1088.036227][T30286] hsr_slave_0: left promiscuous mode [ 1088.044568][T30286] hsr_slave_1: left promiscuous mode [ 1088.055765][T30286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.063286][T30286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1088.090131][T30286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1088.098047][T30286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1088.108516][T30286] veth1_macvtap: left promiscuous mode [ 1088.115287][T30286] veth0_macvtap: left promiscuous mode [ 1088.123348][T30286] veth1_vlan: left promiscuous mode [ 1088.128891][T30286] veth0_vlan: left promiscuous mode [ 1088.429583][T18079] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1088.429583][T18079] program syz.2.15500 not setting count and/or reply_len properly [ 1088.466807][T17981] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1088.482942][T17981] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1088.492399][T17981] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1088.506492][T18083] __nla_validate_parse: 1 callbacks suppressed [ 1088.506526][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15501'. [ 1088.525313][T17981] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1088.575665][T17981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.598029][T17981] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.608353][ T2135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.615495][ T2135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.625971][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15502'. [ 1088.662170][ T2135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.669328][ T2135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.694114][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15503'. [ 1088.754109][T17981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.764739][T10929] Bluetooth: hci0: sending frame failed (-49) [ 1088.771076][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 1088.853262][T18113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15506'. [ 1088.969184][T17981] veth0_vlan: entered promiscuous mode [ 1088.991034][T17981] veth1_vlan: entered promiscuous mode [ 1089.014980][T17981] veth0_macvtap: entered promiscuous mode [ 1089.026988][T17981] veth1_macvtap: entered promiscuous mode [ 1089.058552][T17981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.068120][T17981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.084301][ T2135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.138575][ T2135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.175071][ T2135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.240973][ T2135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.313182][T18144] netlink: 'syz.6.15471': attribute type 12 has an invalid length. [ 1089.436822][T18150] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1089.461541][T18150] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1089.514283][T18154] bridge0: port 3(batadv0) entered blocking state [ 1089.520986][T18154] bridge0: port 3(batadv0) entered disabled state [ 1089.528829][T18154] batadv0: entered allmulticast mode [ 1089.534769][T18154] batadv0: entered promiscuous mode [ 1089.540572][T18154] bridge0: port 3(batadv0) entered blocking state [ 1089.547110][T18154] bridge0: port 3(batadv0) entered forwarding state [ 1089.603364][T30310] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1089.612693][T30310] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1089.646190][T18160] team0 (unregistering): Port device team_slave_0 removed [ 1089.655696][T18160] team0 (unregistering): Port device team_slave_1 removed [ 1090.458795][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15526'. [ 1090.489660][T18180] netlink: 312 bytes leftover after parsing attributes in process `syz.4.15526'. [ 1090.499053][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15526'. [ 1090.545098][T18184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15527'. [ 1090.584579][T18180] atomic_op ffff8881049d8d28 conn xmit_atomic 0000000000000000 [ 1090.752669][T18207] loop5: detected capacity change from 0 to 512 [ 1090.760106][T18207] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1090.763920][T18209] netlink: 'syz.4.15535': attribute type 3 has an invalid length. [ 1090.771227][T18207] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1091.038564][T18224] loop5: detected capacity change from 0 to 256 [ 1092.008928][T18232] netlink: 'syz.2.15543': attribute type 12 has an invalid length. [ 1092.099482][T18244] Cannot find add_set index 0 as target [ 1092.164976][T18253] FAULT_INJECTION: forcing a failure. [ 1092.164976][T18253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1092.178467][T18253] CPU: 1 UID: 0 PID: 18253 Comm: syz.6.15550 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1092.178555][T18253] Tainted: [W]=WARN [ 1092.178562][T18253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1092.178575][T18253] Call Trace: [ 1092.178581][T18253] [ 1092.178591][T18253] __dump_stack+0x1d/0x30 [ 1092.178682][T18253] dump_stack_lvl+0x95/0xd0 [ 1092.178704][T18253] dump_stack+0x15/0x1b [ 1092.178729][T18253] should_fail_ex+0x265/0x280 [ 1092.178759][T18253] should_fail+0xb/0x20 [ 1092.178786][T18253] should_fail_usercopy+0x1a/0x20 [ 1092.178936][T18253] _copy_from_user+0x1c/0xb0 [ 1092.178972][T18253] core_sys_select+0x1d3/0x6e0 [ 1092.179078][T18253] ? set_user_sigmask+0x84/0x190 [ 1092.179116][T18253] __se_sys_pselect6+0x213/0x280 [ 1092.179144][T18253] ? mutex_unlock+0x4f/0x90 [ 1092.179183][T18253] __x64_sys_pselect6+0x78/0x90 [ 1092.179270][T18253] x64_sys_call+0x2e98/0x3000 [ 1092.179303][T18253] do_syscall_64+0xca/0x2b0 [ 1092.179403][T18253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.179432][T18253] RIP: 0033:0x7f164154f749 [ 1092.179500][T18253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.179518][T18253] RSP: 002b:00007f163ff8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1092.179572][T18253] RAX: ffffffffffffffda RBX: 00007f16417a6090 RCX: 00007f164154f749 [ 1092.179590][T18253] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 1092.179606][T18253] RBP: 00007f163ff8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.179624][T18253] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1092.179640][T18253] R13: 00007f16417a6128 R14: 00007f16417a6090 R15: 00007ffcbda85db8 [ 1092.179660][T18253] [ 1092.375022][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15550'. [ 1092.441347][T18252] : renamed from wg2 (while UP) [ 1092.598339][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 1092.598357][ T29] audit: type=1326 audit(2000000002.183:262350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.629223][ T29] audit: type=1326 audit(2000000002.183:262351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.673619][T18270] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1092.704607][ T29] audit: type=1326 audit(2000000002.183:262352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.729270][ T29] audit: type=1326 audit(2000000002.183:262353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.753075][ T29] audit: type=1326 audit(2000000002.183:262354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.777151][ T29] audit: type=1326 audit(2000000002.183:262355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1092.801099][ T29] audit: type=1326 audit(2000000002.183:262356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb8e01bf783 code=0x7ffc0000 [ 1092.825126][ T29] audit: type=1326 audit(2000000002.246:262357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8e01be1ff code=0x7ffc0000 [ 1092.848924][ T29] audit: type=1326 audit(2000000002.257:262358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb8e01bf7d7 code=0x7ffc0000 [ 1092.872739][ T29] audit: type=1326 audit(2000000002.257:262359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.2.15557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8e01bdf90 code=0x7ffc0000 [ 1093.367874][T18298] : renamed from wg2 (while UP) [ 1093.404198][T18303] __nla_validate_parse: 1 callbacks suppressed [ 1093.404218][T18303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15569'. [ 1093.420253][T18303] IPVS: Error connecting to the multicast addr [ 1093.426552][T18302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15569'. [ 1093.436668][T18302] IPVS: Error connecting to the multicast addr [ 1093.458063][T18305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15570'. [ 1093.506238][T18293] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1093.506238][T18293] program syz.3.15566 not setting count and/or reply_len properly [ 1093.651902][T18311] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 1093.789950][T18317] FAULT_INJECTION: forcing a failure. [ 1093.789950][T18317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.803936][T18317] CPU: 0 UID: 0 PID: 18317 Comm: syz.6.15573 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1093.804035][T18317] Tainted: [W]=WARN [ 1093.804042][T18317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.804057][T18317] Call Trace: [ 1093.804063][T18317] [ 1093.804071][T18317] __dump_stack+0x1d/0x30 [ 1093.804098][T18317] dump_stack_lvl+0x95/0xd0 [ 1093.804163][T18317] dump_stack+0x15/0x1b [ 1093.804184][T18317] should_fail_ex+0x265/0x280 [ 1093.804300][T18317] should_fail+0xb/0x20 [ 1093.804321][T18317] should_fail_usercopy+0x1a/0x20 [ 1093.804347][T18317] _copy_from_user+0x1c/0xb0 [ 1093.804435][T18317] ___sys_sendmsg+0xc1/0x1d0 [ 1093.804530][T18317] __sys_sendmmsg+0x178/0x300 [ 1093.804572][T18317] __x64_sys_sendmmsg+0x57/0x70 [ 1093.804603][T18317] x64_sys_call+0x1e28/0x3000 [ 1093.804668][T18317] do_syscall_64+0xca/0x2b0 [ 1093.804705][T18317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.804734][T18317] RIP: 0033:0x7f164154f749 [ 1093.804828][T18317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.804847][T18317] RSP: 002b:00007f163ffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1093.804867][T18317] RAX: ffffffffffffffda RBX: 00007f16417a5fa0 RCX: 00007f164154f749 [ 1093.804881][T18317] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000008 [ 1093.804894][T18317] RBP: 00007f163ffaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.804906][T18317] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1093.804919][T18317] R13: 00007f16417a6038 R14: 00007f16417a5fa0 R15: 00007ffcbda85db8 [ 1093.804943][T18317] [ 1094.059249][T18325] netlink: 'syz.6.15578': attribute type 12 has an invalid length. [ 1094.249980][T18339] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15582'. [ 1094.341047][T18347] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15585'. [ 1094.440606][T18358] netlink: 'syz.4.15589': attribute type 12 has an invalid length. [ 1094.833589][T18379] FAULT_INJECTION: forcing a failure. [ 1094.833589][T18379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.846996][T18379] CPU: 1 UID: 0 PID: 18379 Comm: syz.5.15595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1094.847029][T18379] Tainted: [W]=WARN [ 1094.847071][T18379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1094.847096][T18379] Call Trace: [ 1094.847105][T18379] [ 1094.847115][T18379] __dump_stack+0x1d/0x30 [ 1094.847141][T18379] dump_stack_lvl+0x95/0xd0 [ 1094.847193][T18379] dump_stack+0x15/0x1b [ 1094.847215][T18379] should_fail_ex+0x265/0x280 [ 1094.847239][T18379] should_fail+0xb/0x20 [ 1094.847262][T18379] should_fail_usercopy+0x1a/0x20 [ 1094.847298][T18379] _copy_from_user+0x1c/0xb0 [ 1094.847332][T18379] ___sys_sendmsg+0xc1/0x1d0 [ 1094.847435][T18379] __sys_sendmmsg+0x178/0x300 [ 1094.847487][T18379] __x64_sys_sendmmsg+0x57/0x70 [ 1094.847558][T18379] x64_sys_call+0x1e28/0x3000 [ 1094.847586][T18379] do_syscall_64+0xca/0x2b0 [ 1094.847642][T18379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.847664][T18379] RIP: 0033:0x7fd1456ef749 [ 1094.847680][T18379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.847740][T18379] RSP: 002b:00007fd14414f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1094.847766][T18379] RAX: ffffffffffffffda RBX: 00007fd145945fa0 RCX: 00007fd1456ef749 [ 1094.847783][T18379] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000006 [ 1094.847797][T18379] RBP: 00007fd14414f090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.847810][T18379] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 1094.847822][T18379] R13: 00007fd145946038 R14: 00007fd145945fa0 R15: 00007ffde3c00d58 [ 1094.847866][T18379] [ 1095.089167][T18395] netlink: 'syz.4.15601': attribute type 12 has an invalid length. [ 1095.117321][T18397] erspan0: entered promiscuous mode [ 1095.126216][T18399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15603'. [ 1095.147686][ T5584] kernel write not supported for file bpf-prog (pid: 5584 comm: kworker/0:14) [ 1095.220248][T18406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15604'. [ 1095.446312][T18420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=18420 comm=syz.6.15610 [ 1095.628699][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15619'. [ 1095.882932][T18462] FAULT_INJECTION: forcing a failure. [ 1095.882932][T18462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1095.896187][T18462] CPU: 1 UID: 0 PID: 18462 Comm: syz.6.15623 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1095.896228][T18462] Tainted: [W]=WARN [ 1095.896238][T18462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1095.896280][T18462] Call Trace: [ 1095.896290][T18462] [ 1095.896301][T18462] __dump_stack+0x1d/0x30 [ 1095.896327][T18462] dump_stack_lvl+0x95/0xd0 [ 1095.896348][T18462] dump_stack+0x15/0x1b [ 1095.896369][T18462] should_fail_ex+0x265/0x280 [ 1095.896543][T18462] should_fail+0xb/0x20 [ 1095.896566][T18462] should_fail_usercopy+0x1a/0x20 [ 1095.896597][T18462] _copy_from_user+0x1c/0xb0 [ 1095.896628][T18462] __sys_bpf+0x183/0x7c0 [ 1095.896707][T18462] __x64_sys_bpf+0x41/0x50 [ 1095.896745][T18462] x64_sys_call+0x28e1/0x3000 [ 1095.896769][T18462] do_syscall_64+0xca/0x2b0 [ 1095.896815][T18462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.896837][T18462] RIP: 0033:0x7f164154f749 [ 1095.896917][T18462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.896998][T18462] RSP: 002b:00007f163ffaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1095.897020][T18462] RAX: ffffffffffffffda RBX: 00007f16417a5fa0 RCX: 00007f164154f749 [ 1095.897058][T18462] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1095.897071][T18462] RBP: 00007f163ffaf090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.897137][T18462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.897149][T18462] R13: 00007f16417a6038 R14: 00007f16417a5fa0 R15: 00007ffcbda85db8 [ 1095.897211][T18462] [ 1096.359119][T18472] serio: Serial port ttyS3 [ 1096.514295][T18476] 9p: Unknown access argument 18446744073709551615: -34 [ 1096.637347][T18480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15630'. [ 1096.757231][T18484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15631'. [ 1097.281672][T18508] bridge1: entered promiscuous mode [ 1097.287110][T18508] bridge1: entered allmulticast mode [ 1097.665488][T18523] tmpfs: Bad value for 'mpol' [ 1097.731402][ T29] kauditd_printk_skb: 1294 callbacks suppressed [ 1097.731417][ T29] audit: type=1326 audit(2000000000.199:263654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.831124][ T29] audit: type=1326 audit(2000000000.230:263655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.855176][ T29] audit: type=1326 audit(2000000000.230:263656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.879810][ T29] audit: type=1326 audit(2000000000.241:263657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.903757][ T29] audit: type=1326 audit(2000000000.241:263658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.928792][ T29] audit: type=1326 audit(2000000000.241:263659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.952901][ T29] audit: type=1326 audit(2000000000.241:263660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1097.976966][ T29] audit: type=1326 audit(2000000000.241:263661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1098.001299][ T29] audit: type=1326 audit(2000000000.241:263662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1098.025347][ T29] audit: type=1326 audit(2000000000.241:263663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18528 comm="syz.3.15646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1098.091655][T18550] Cannot find add_set index 0 as target [ 1098.244334][T18553] __nla_validate_parse: 1 callbacks suppressed [ 1098.244350][T18553] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15652'. [ 1098.329228][T18541] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1098.329228][T18541] program syz.6.15651 not setting count and/or reply_len properly [ 1098.441705][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15657'. [ 1099.752564][T18579] netlink: 'syz.2.15662': attribute type 1 has an invalid length. [ 1099.775597][T18579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1099.955084][T18600] loop5: detected capacity change from 0 to 512 [ 1100.005803][T18600] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 1100.039630][T18600] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1100.984850][T18636] Cannot find add_set index 0 as target [ 1101.053368][T18641] netlink: 'syz.3.15684': attribute type 12 has an invalid length. [ 1101.298984][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15687'. [ 1101.339412][T18653] bond1: option mode: unable to set because the bond device has slaves [ 1101.348255][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15687'. [ 1101.357333][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15687'. [ 1101.370015][T18654] netlink: 'syz.5.15687': attribute type 10 has an invalid length. [ 1101.380505][T18654] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1101.388821][T30304] bond1: (slave bond0): link status definitely down, disabling slave [ 1101.398206][T30304] bond1: now running without any active interface! [ 1101.464891][T18656] serio: Serial port ttyS3 [ 1101.633486][T18664] netlink: 20 bytes leftover after parsing attributes in process `syz.5.15691'. [ 1102.450376][T18692] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15703'. [ 1102.504297][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 1102.504316][ T29] audit: type=1326 audit(2000000000.104:264336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.535430][ T29] audit: type=1326 audit(2000000000.146:264337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.560396][ T29] audit: type=1326 audit(2000000000.167:264338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.584373][ T29] audit: type=1326 audit(2000000000.167:264339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.618622][ T29] audit: type=1326 audit(2000000000.167:264340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.624769][T18699] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15706'. [ 1102.642464][ T29] audit: type=1326 audit(2000000000.199:264341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.642510][ T29] audit: type=1326 audit(2000000000.199:264342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18700 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1641582005 code=0x7ffc0000 [ 1102.685168][T18694] FAULT_INJECTION: forcing a failure. [ 1102.685168][T18694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1102.699349][ T29] audit: type=1326 audit(2000000000.199:264343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.712533][T18694] CPU: 0 UID: 0 PID: 18694 Comm: syz.4.15704 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1102.712571][T18694] Tainted: [W]=WARN [ 1102.712580][T18694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1102.712594][T18694] Call Trace: [ 1102.712602][T18694] [ 1102.712686][T18694] __dump_stack+0x1d/0x30 [ 1102.712756][T18694] dump_stack_lvl+0x95/0xd0 [ 1102.712874][T18694] dump_stack+0x15/0x1b [ 1102.712948][T18694] should_fail_ex+0x265/0x280 [ 1102.713044][T18694] should_fail+0xb/0x20 [ 1102.713116][T18694] should_fail_usercopy+0x1a/0x20 [ 1102.713193][T18694] _copy_from_user+0x1c/0xb0 [ 1102.713286][T18694] __sys_bpf+0x183/0x7c0 [ 1102.713446][T18694] __x64_sys_bpf+0x41/0x50 [ 1102.713543][T18694] x64_sys_call+0x28e1/0x3000 [ 1102.713621][T18694] do_syscall_64+0xca/0x2b0 [ 1102.713805][T18694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.713878][T18694] RIP: 0033:0x7f945a91f749 [ 1102.713925][T18694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.713988][T18694] RSP: 002b:00007f9459387038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1102.714126][T18694] RAX: ffffffffffffffda RBX: 00007f945ab75fa0 RCX: 00007f945a91f749 [ 1102.714170][T18694] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1102.714219][T18694] RBP: 00007f9459387090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.714280][T18694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.714330][T18694] R13: 00007f945ab76038 R14: 00007f945ab75fa0 R15: 00007ffc8b348678 [ 1102.714401][T18694] [ 1102.901308][ T29] audit: type=1326 audit(2000000000.199:264344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1102.925187][ T29] audit: type=1326 audit(2000000000.199:264345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18698 comm="syz.6.15706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164154f749 code=0x7ffc0000 [ 1103.162655][T18724] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15715'. [ 1103.319019][T18730] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15718'. [ 1103.401391][T18736] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15719'. [ 1103.512383][T18746] loop5: detected capacity change from 0 to 512 [ 1103.530295][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15720'. [ 1103.568702][T18751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1103.579083][T18746] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.611318][T18746] ext4 filesystem being mounted at /492/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.659887][T18751] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15720'. [ 1103.668934][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15720'. [ 1103.706535][T18751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.711780][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.721186][T18751] bond1: (slave bond0): making interface the new active one [ 1103.731399][T18751] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1103.755485][T18751] netlink: 'syz.6.15720': attribute type 10 has an invalid length. [ 1103.764525][T18751] bridge0: port 3(batadv0) entered disabled state [ 1103.771094][T18751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.778374][T18751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.787242][T18766] Cannot find add_set index 0 as target [ 1103.822195][T18751] bridge0: port 3(batadv0) entered blocking state [ 1103.828744][T18751] bridge0: port 3(batadv0) entered forwarding state [ 1103.835547][T18751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.842688][T18751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.850018][T18751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.857206][T18751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.867862][T18751] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1103.877137][T18775] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1103.921346][T18779] netlink: 48 bytes leftover after parsing attributes in process `syz.4.15731'. [ 1103.963289][T18783] FAULT_INJECTION: forcing a failure. [ 1103.963289][T18783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.976529][T18783] CPU: 0 UID: 0 PID: 18783 Comm: syz.2.15735 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1103.976652][T18783] Tainted: [W]=WARN [ 1103.976661][T18783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1103.976678][T18783] Call Trace: [ 1103.976684][T18783] [ 1103.976731][T18783] __dump_stack+0x1d/0x30 [ 1103.976763][T18783] dump_stack_lvl+0x95/0xd0 [ 1103.976865][T18783] dump_stack+0x15/0x1b [ 1103.976907][T18783] should_fail_ex+0x265/0x280 [ 1103.976936][T18783] should_fail+0xb/0x20 [ 1103.976959][T18783] should_fail_usercopy+0x1a/0x20 [ 1103.977046][T18783] _copy_from_user+0x1c/0xb0 [ 1103.977083][T18783] ___sys_sendmsg+0xc1/0x1d0 [ 1103.977266][T18783] __x64_sys_sendmsg+0xd4/0x160 [ 1103.977309][T18783] x64_sys_call+0x17ba/0x3000 [ 1103.977339][T18783] do_syscall_64+0xca/0x2b0 [ 1103.977507][T18783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.977668][T18783] RIP: 0033:0x7fb8e01bf749 [ 1103.977689][T18783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.977714][T18783] RSP: 002b:00007fb8dec27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.977740][T18783] RAX: ffffffffffffffda RBX: 00007fb8e0415fa0 RCX: 00007fb8e01bf749 [ 1103.977757][T18783] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1103.977774][T18783] RBP: 00007fb8dec27090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.977806][T18783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.977818][T18783] R13: 00007fb8e0416038 R14: 00007fb8e0415fa0 R15: 00007ffd9f66cff8 [ 1103.977837][T18783] [ 1104.231192][T18801] netlink: 88 bytes leftover after parsing attributes in process `syz.2.15741'. [ 1104.282310][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15742'. [ 1104.293395][T18806] bond1: option mode: unable to set because the bond device has slaves [ 1104.306768][T18713] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.318682][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15742'. [ 1104.367061][T18806] netlink: 'syz.4.15742': attribute type 10 has an invalid length. [ 1104.386251][T18806] bridge0: port 1(syz_tun) entered blocking state [ 1104.393129][T18806] bridge0: port 1(syz_tun) entered forwarding state [ 1104.420010][T30326] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:ccde:98ff:fe51:8b56 error=-28 [ 1104.434175][T18806] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1104.443046][ T4148] syb2: Port: 1 Link ACTIVE [ 1104.468768][T18814] syz1: rxe_newlink: already configured on syz_tun [ 1104.586975][ T2135] Bluetooth: hci0: Frame reassembly failed (-84) [ 1104.653593][T18819] SELinux: failed to load policy [ 1104.939073][T30333] Bluetooth: hci2: Frame reassembly failed (-84) [ 1105.426551][T18864] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1105.426551][T18864] program syz.3.15761 not setting count and/or reply_len properly [ 1106.520598][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1106.520619][T23608] Bluetooth: hci0: command 0x1003 tx timeout [ 1106.568881][T18907] : renamed from wg2 (while UP) [ 1106.672977][T10929] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1106.740919][T18934] bond1: option mode: unable to set because the bond device is up [ 1106.751993][T18934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.761321][T18934] bond1: (slave bond0): making interface the new active one [ 1106.770799][T18934] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1106.784725][T18934] netlink: 'syz.2.15788': attribute type 10 has an invalid length. [ 1106.794487][T18934] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1106.901833][ T3511] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1106.902341][ T44] Bluetooth: hci2: command 0x1003 tx timeout [ 1107.233583][T18960] bond1: option mode: unable to set because the bond device has slaves [ 1107.243114][T18960] netlink: 'syz.5.15797': attribute type 10 has an invalid length. [ 1107.252495][T18960] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1107.273063][ T29] kauditd_printk_skb: 2138 callbacks suppressed [ 1107.273080][ T29] audit: type=1326 audit(2000000003.128:266484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.2.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8e01f2005 code=0x7ffc0000 [ 1107.303488][ T29] audit: type=1326 audit(2000000003.138:266485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.3.15787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1107.327540][ T29] audit: type=1326 audit(2000000003.149:266486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.3.15787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1107.351729][ T29] audit: type=1326 audit(2000000003.159:266487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.3.15787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f12fb58f749 code=0x7ffc0000 [ 1107.376011][ T29] audit: type=1326 audit(2000000003.170:266488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.3.15787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb5c2005 code=0x7ffc0000 [ 1107.399989][ T29] audit: type=1326 audit(2000000003.170:266489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.2.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb8e01f2005 code=0x7ffc0000 [ 1107.434528][ T29] audit: type=1326 audit(2000000003.170:266490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.2.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb8e01b65e7 code=0x7ffc0000 [ 1107.458584][ T29] audit: type=1326 audit(2000000003.170:266491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.2.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8e015b829 code=0x7ffc0000 [ 1107.483009][ T29] audit: type=1326 audit(2000000003.170:266492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18943 comm="syz.2.15791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fb8e01bf749 code=0x7ffc0000 [ 1107.507125][ T29] audit: type=1326 audit(2000000003.170:266493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18931 comm="syz.3.15787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f12fb5c2005 code=0x7ffc0000 [ 1107.635023][T30296] Bluetooth: hci0: Frame reassembly failed (-84) [ 1107.942715][T19002] __nla_validate_parse: 12 callbacks suppressed [ 1107.942739][T19002] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15811'. [ 1108.021340][T18997] : renamed from wg2 (while UP) [ 1108.092128][T19010] netlink: 44 bytes leftover after parsing attributes in process `syz.5.15814'. [ 1108.427749][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15819'. [ 1108.777484][T19029] loop5: detected capacity change from 0 to 1024 [ 1108.813156][T19029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 1108.844572][T19026] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 1108.844572][T19026] program syz.5.15820 not setting count and/or reply_len properly [ 1109.069961][T19067] netlink: 'syz.4.15827': attribute type 12 has an invalid length. [ 1109.096435][T19069] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1109.106128][T19069] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1109.145223][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15830'. [ 1109.271538][T19089] netlink: 48 bytes leftover after parsing attributes in process `syz.6.15835'. [ 1109.409218][T11481] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1109.569295][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 1109.575675][ T3511] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1109.744324][T19103] loop5: detected capacity change from 0 to 128 [ 1109.755871][T19105] uprobe: syz.6.15839:19105 failed to unregister, leaking uprobe [ 1109.884419][T30308] bio_check_eod: 102 callbacks suppressed [ 1109.884434][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.884434][T30308] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 1109.904364][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.904364][T30308] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 1109.919074][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.919074][T30308] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1109.932872][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.932872][T30308] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1109.964860][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.964860][T30308] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1109.981678][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.981678][T30308] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1109.996989][T30308] kworker/u8:42: attempt to access beyond end of device [ 1109.996989][T30308] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1110.014735][T30308] kworker/u8:42: attempt to access beyond end of device [ 1110.014735][T30308] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1110.032542][T30308] kworker/u8:42: attempt to access beyond end of device [ 1110.032542][T30308] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1110.046520][T30308] kworker/u8:42: attempt to access beyond end of device [ 1110.046520][T30308] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1110.132814][T19124] netlink: 'syz.2.15845': attribute type 12 has an invalid length. [ 1110.201314][T19133] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15850'. [ 1110.824616][T19142] Set syz1 is full, maxelem 65536 reached [ 1110.950281][T19161] netlink: 'syz.4.15859': attribute type 12 has an invalid length. [ 1111.032617][T19172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15863'. [ 1111.165106][T19183] Cannot find add_set index 0 as target [ 1111.313312][T19180] ================================================================== [ 1111.321561][T19180] BUG: KCSAN: data-race in bcmp / stack_map_get_build_id_offset [ 1111.329684][T19180] [ 1111.332039][T19180] read to 0xffff88811b1db4e0 of 8 bytes by task 19188 on cpu 0: [ 1111.339707][T19180] bcmp+0x23/0x90 [ 1111.343387][T19180] __bpf_get_stackid+0x648/0x7d0 [ 1111.348376][T19180] bpf_get_stackid+0xf3/0x130 [ 1111.353275][T19180] bpf_get_stackid_raw_tp+0xf6/0x120 [ 1111.358619][T19180] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 1111.364114][T19180] bpf_trace_run4+0x117/0x1e0 [ 1111.368861][T19180] __alloc_frozen_pages_noprof+0x336/0x360 [ 1111.374727][T19180] __alloc_pages_noprof+0x9/0x20 [ 1111.379789][T19180] bpf_ringbuf_alloc+0x1ef/0x400 [ 1111.384805][T19180] ringbuf_map_alloc+0x1ca/0x230 [ 1111.389893][T19180] map_create+0x862/0xda0 [ 1111.394255][T19180] __sys_bpf+0x54e/0x7c0 [ 1111.398535][T19180] __x64_sys_bpf+0x41/0x50 [ 1111.403007][T19180] x64_sys_call+0x28e1/0x3000 [ 1111.407754][T19180] do_syscall_64+0xca/0x2b0 [ 1111.412313][T19180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.418247][T19180] [ 1111.420614][T19180] write to 0xffff88811b1db4e4 of 20 bytes by task 19180 on cpu 1: [ 1111.428451][T19180] stack_map_get_build_id_offset+0x260/0x530 [ 1111.434776][T19180] __bpf_get_stackid+0x60b/0x7d0 [ 1111.439770][T19180] bpf_get_stackid+0xf3/0x130 [ 1111.444504][T19180] bpf_get_stackid_raw_tp+0xf6/0x120 [ 1111.449852][T19180] bpf_prog_ff69ba342f4eb966+0x2a/0x32 [ 1111.455369][T19180] bpf_trace_run4+0x117/0x1e0 [ 1111.460113][T19180] __alloc_frozen_pages_noprof+0x336/0x360 [ 1111.465977][T19180] alloc_pages_mpol+0xb3/0x260 [ 1111.470794][T19180] folio_alloc_mpol_noprof+0x39/0x80 [ 1111.476139][T19180] shmem_get_folio_gfp+0x3cf/0xd50 [ 1111.481306][T19180] shmem_write_begin+0xfc/0x1f0 [ 1111.486207][T19180] generic_perform_write+0x184/0x490 [ 1111.491541][T19180] shmem_file_write_iter+0xc5/0xf0 [ 1111.496734][T19180] vfs_write+0x52a/0x960 [ 1111.501019][T19180] ksys_write+0xda/0x1a0 [ 1111.505315][T19180] __x64_sys_write+0x40/0x50 [ 1111.510000][T19180] x64_sys_call+0x2847/0x3000 [ 1111.514737][T19180] do_syscall_64+0xca/0x2b0 [ 1111.519310][T19180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.525346][T19180] [ 1111.527708][T19180] Reported by Kernel Concurrency Sanitizer on: [ 1111.533894][T19180] CPU: 1 UID: 0 PID: 19180 Comm: syz.6.15865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1111.545380][T19180] Tainted: [W]=WARN [ 1111.549226][T19180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1111.559304][T19180] ================================================================== [ 1112.693183][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1112.693216][ T3511] Bluetooth: hci0: command 0x1003 tx timeout