last executing test programs: 6m5.927116634s ago: executing program 4 (id=3172): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt(r0, 0x1, 0x54, &(0x7f00000001c0)="37cb2e49", 0x4) 6m5.881121478s ago: executing program 4 (id=3175): syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x3014485, &(0x7f0000000040)=ANY=[], 0x21, 0x63f, &(0x7f00000007c0)="$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") 6m5.73120109s ago: executing program 4 (id=3180): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 6m5.7238407s ago: executing program 4 (id=3183): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) 6m5.387302988s ago: executing program 4 (id=3190): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000300)={0x5, 0xfffffffd, 0x1f, 0x215, 0x1c3, 0x0}) 6m5.076129863s ago: executing program 4 (id=3199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3}, 0x1c, 0x0}}], 0x1, 0x24041085) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/82, 0x52}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 6m5.066352634s ago: executing program 32 (id=3199): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, 0x3}, 0x1c, 0x0}}], 0x1, 0x24041085) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000cc0)=""/82, 0x52}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 5m12.110904964s ago: executing program 5 (id=5196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m12.102920295s ago: executing program 5 (id=5197): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_cache\x00') close_range(r1, 0xffffffffffffffff, 0x0) 5m12.086857646s ago: executing program 5 (id=5198): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 5m12.069945957s ago: executing program 5 (id=5199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x1, r1, 'id1\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick, {0x0, 0x1}, {}, @result}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r9, 0x0, 0x0) write$binfmt_register(r8, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 5m11.968881495s ago: executing program 5 (id=5200): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x2, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 5m11.741325674s ago: executing program 5 (id=5210): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsm_set_self_attr(0x67, &(0x7f0000000400)=ANY=[@ANYBLOB="65000000000000000a00000000000000e000000000000000c0000000000000007aa9f51e2bb78e67796de40ca0a315f12e587af925a843fed3ea506ebc7eedf22ddaca46903115a86755248f51a6398461244384592711def85279faaa95bc287fff8c64b8f83cc3e65a3910622ea62570e235223bd56630f0b532ba2a7f1c6b7768ae8a54b37dafa6b4ab2daac938791f1dc5472711532cb32e970210b3ea70fa5c0362520d32346d983484dec8686aafb5f9a805fe8339d8f0226ce3cd3404f7aeebe623deb2b92572808f67b08af6b5784e648c392e999e11fdf162f6d23ab6173ff8346f62cea5ec1361f53f5de7471a38ce"], 0xe0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x0, 0x473, &(0x7f0000000640)="$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") r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 5m11.741014124s ago: executing program 33 (id=5210): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsm_set_self_attr(0x67, &(0x7f0000000400)=ANY=[@ANYBLOB="65000000000000000a00000000000000e000000000000000c0000000000000007aa9f51e2bb78e67796de40ca0a315f12e587af925a843fed3ea506ebc7eedf22ddaca46903115a86755248f51a6398461244384592711def85279faaa95bc287fff8c64b8f83cc3e65a3910622ea62570e235223bd56630f0b532ba2a7f1c6b7768ae8a54b37dafa6b4ab2daac938791f1dc5472711532cb32e970210b3ea70fa5c0362520d32346d983484dec8686aafb5f9a805fe8339d8f0226ce3cd3404f7aeebe623deb2b92572808f67b08af6b5784e648c392e999e11fdf162f6d23ab6173ff8346f62cea5ec1361f53f5de7471a38ce"], 0xe0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x0, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedebwz9uxM7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnLYOtoJp106gt9f/BqMbKxRuMVz4ptXLApqrX6/X9y7la6+HFOnAfS6LsGgDlKD7o0/vfYuvi8KN0N17MboDSuG/nW3akb3k+o9Zyf9tJwxFxevGfr9ItNmceAgCgyffp+OeZduO/SuxvOG9PvoYyFBH/i4i9EXEyIvZFxP8jls59ICIevMvyWxdJsvIHGvZUrm80tvVIx38v5GtbzeO/SnHKUDXP7V6Kv5acOTczfSx/TY5EbVuaH1ujjB9e/vXz1Y41jv/SLS2/GAvm9bjet635OVMT8xP3EnOjGx9HHOxrF3+yvBKQjoMPRMTBDZZx7ug3h1c7duf419CBdab61xFPZtd/MVriLyRrr0+Obo+Z6WOjRato45erb6xW/j3F3wHp9d/Rtv0vxz+UNK7Xzt3N//7lU+nj1T8+W/WeZqPtvz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Xv/3tj5ZU4FBFpI34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5R+/afWf/3rgxFFQ1jojzyxvKd9onr+x++aCh1aSTZe/z2rXv8TS6kj+Z71vP+tp15325oBAABgq6pExK5IKiPL6UplZCT7G/59saMyMzs3//SZ2fcvTmXfERiKWqWY6RpsmA8dy2/ri/x4S/54Pm/8RXVgKT8yOTszVXbw0ON2rtL/U39ms5Tbyq0hsKl8Xwt6l/4PvUv/h9713/6/vTlb6V5dgO5q8/k/UEY9gO5r7v/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3mf+D3rWR/u89A+4PfWv9ZHN/V6sCdM/cQNz5S/ISWylRrNZuRhG1tLUcjYiFy1EpPVKJTUyU/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8GAAD//7NI4OY=") r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) 1.063272083s ago: executing program 2 (id=11438): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000004c0)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='qrtr_ns_service_announce_del\x00', r2, 0x0, 0x200000000000}, 0x18) 968.331241ms ago: executing program 2 (id=11442): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000900000000000102000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffffffffffff, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) shutdown(r4, 0x1) recvfrom(r4, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) getpgrp(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$key(r6, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020509000e00000026bd70000000008f05000600000000000a004e23e7ff0003fc000000000000000000000000000001c4bb00000000000002000100ffffff7db00001000000000005000500000000000a00000000000000fe8000000000000000000000000000aa0000000012000000"], 0x70}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', 0x0, &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x1) 862.58528ms ago: executing program 2 (id=11447): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x2000000) 813.819663ms ago: executing program 2 (id=11450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sched_rr_get_interval(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x23}}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x403}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") 787.772636ms ago: executing program 2 (id=11452): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000004c0)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='qrtr_ns_service_announce_del\x00', r2, 0x0, 0x200000000000}, 0x18) 751.050819ms ago: executing program 2 (id=11454): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000180)='./file1\x00', 0x1004001, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000000d00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bind$rds(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 656.741906ms ago: executing program 0 (id=11459): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 647.983147ms ago: executing program 0 (id=11461): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) 596.746921ms ago: executing program 0 (id=11462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb70200"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fchmod(0xffffffffffffffff, 0x80) 596.231881ms ago: executing program 0 (id=11463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) sched_rr_get_interval(0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000600)={[{@init_itable_val={'init_itable', 0x3d, 0x23}}, {@stripe={'stripe', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x403}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") 586.821062ms ago: executing program 0 (id=11465): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000004c0)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='qrtr_ns_service_announce_del\x00', r2, 0x0, 0x200000000000}, 0x18) 555.331675ms ago: executing program 6 (id=11466): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 553.255865ms ago: executing program 0 (id=11467): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000180)='./file1\x00', 0x1004001, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000000d00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 551.022535ms ago: executing program 6 (id=11468): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB="0700000d0057fbf7229f4ecc2cc9ad51ccd0f6ee", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0023ee0a8e000000b7080000000000bfa20000ad283bcb07020000f8ffffffb703000008000000b70400000000000085008f00030000009500000000000004000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r3) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r4) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_access(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB='system_u:ck_exec_t:s0 /usr/sbin/cupn-browsed 0'], 0x4e) 443.837123ms ago: executing program 6 (id=11469): unshare(0x22020600) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000001}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x800, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 419.402866ms ago: executing program 1 (id=11470): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4000, &(0x7f0000000a40)={[{@noblock_validity}, {@jqfmt_vfsold}, {@mb_optimize_scan}, {@noload}, {@abort}, {@usrjquota}, {@nolazytime}, {@nodiscard}, {@init_itable_val={'init_itable', 0x3d, 0x200000006}}, {@mblk_io_submit}]}, 0x3, 0x572, &(0x7f0000000180)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 411.448846ms ago: executing program 6 (id=11471): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="bc89fd5600000000000000000000000018010000202069bded000000002020207b1af8ff00000000bfa1000000000000b70300"/68], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000080)=0xbc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 347.019811ms ago: executing program 1 (id=11472): socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/44}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x80000080, 0x0, 0x5e, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001100010027bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="d21d00000400000008001f0000000000050007002200d89b6b00"], 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x80) 336.369192ms ago: executing program 1 (id=11473): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb70200"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fchmod(0xffffffffffffffff, 0x80) 324.260193ms ago: executing program 6 (id=11474): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x4000, &(0x7f0000000a40)={[{@noblock_validity}, {@jqfmt_vfsold}, {@mb_optimize_scan}, {@noload}, {@abort}, {@usrjquota}, {@nolazytime}, {@nodiscard}, {@init_itable_val={'init_itable', 0x3d, 0x200000006}}, {@mblk_io_submit}]}, 0x3, 0x572, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x140000) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r4, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 281.522847ms ago: executing program 1 (id=11475): bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000000)='./file0\x00', 0x2000000) 222.261831ms ago: executing program 1 (id=11478): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x410c84, &(0x7f0000000080)={[{@nobh}, {@usrjquota}]}, 0x1, 0x77e, &(0x7f0000000a80)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) bind$inet(r3, &(0x7f0000000500)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r4, 0x7, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f00000004c0)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc000) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077672b2364c26b390270bf5fc37d66b4f1"], 0xa8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='qrtr_ns_service_announce_del\x00', r2, 0x0, 0x200000000000}, 0x18) 196.132403ms ago: executing program 3 (id=11479): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 195.156504ms ago: executing program 3 (id=11480): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 174.927375ms ago: executing program 3 (id=11481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 162.993126ms ago: executing program 1 (id=11482): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x2, 0x0, 0x0, 0x13, 0x0, 0x10}]}, {0x0, [0x0]}}, 0x0, 0x27, 0x0, 0x1, 0x5}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 154.438757ms ago: executing program 3 (id=11483): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8a) openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0xf, 0x4) socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 123.01807ms ago: executing program 3 (id=11484): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(0x0, 0x48) r0 = dup(0xffffffffffffffff) write$P9_RLERRORu(r0, 0x0, 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca4000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) 81.413523ms ago: executing program 6 (id=11485): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7fd, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='!~u&\t0|\t\t') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007c0000000000019078ac1efe01ac1414aa19009078e00400e0480000000000005d00110000ac1414aa7f0000018303000703214434000300000000000000007f00000100000000ac1414bb000000000000000000000000ac141442000000000000000000000000890fa700000000e00000017f000001000000"], 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x2000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0xb851}, 0x1c) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 0s ago: executing program 3 (id=11486): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): [T30937] __bpf_trace_sys_enter+0x10/0x30 [ 520.513084][T30937] trace_sys_enter+0x86/0xf0 [ 520.513117][T30937] syscall_trace_enter+0x13e/0x1e0 [ 520.513149][T30937] do_syscall_64+0xac/0x200 [ 520.513249][T30937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 520.513343][T30937] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.513392][T30937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.513417][T30937] RIP: 0033:0x7f461764ebe9 [ 520.513437][T30937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.513506][T30937] RSP: 002b:00007f46160b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 520.513548][T30937] RAX: ffffffffffffffda RBX: 00007f4617875fa0 RCX: 00007f461764ebe9 [ 520.513565][T30937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 520.513637][T30937] RBP: 00007f46160b7090 R08: 0000000000000000 R09: 0000000000000000 [ 520.513649][T30937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.513664][T30937] R13: 00007f4617876038 R14: 00007f4617875fa0 R15: 00007ffdb17187d8 [ 520.513690][T30937] [ 520.960310][T30972] FAULT_INJECTION: forcing a failure. [ 520.960310][T30972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.973646][T30972] CPU: 0 UID: 0 PID: 30972 Comm: syz.2.9790 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 520.973743][T30972] Tainted: [W]=WARN [ 520.973888][T30972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.973899][T30972] Call Trace: [ 520.973905][T30972] [ 520.973911][T30972] __dump_stack+0x1d/0x30 [ 520.973973][T30972] dump_stack_lvl+0xe8/0x140 [ 520.973991][T30972] dump_stack+0x15/0x1b [ 520.974006][T30972] should_fail_ex+0x265/0x280 [ 520.974036][T30972] should_fail+0xb/0x20 [ 520.974062][T30972] should_fail_usercopy+0x1a/0x20 [ 520.974088][T30972] copy_to_user_nofault+0x7f/0x120 [ 520.974109][T30972] bpf_probe_write_user+0x83/0xc0 [ 520.974155][T30972] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 520.974171][T30972] bpf_trace_run2+0x104/0x1c0 [ 520.974202][T30972] __bpf_trace_sys_enter+0x10/0x30 [ 520.974223][T30972] trace_sys_enter+0x86/0xf0 [ 520.974244][T30972] syscall_trace_enter+0x13e/0x1e0 [ 520.974266][T30972] do_syscall_64+0xac/0x200 [ 520.974312][T30972] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 520.974344][T30972] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 520.974370][T30972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.974393][T30972] RIP: 0033:0x7f89a333ebe9 [ 520.974443][T30972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.974477][T30972] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 520.974523][T30972] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 520.974561][T30972] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 520.974572][T30972] RBP: 00007f89a1da7090 R08: 0000200000000000 R09: 0000000000000000 [ 520.974583][T30972] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 520.974634][T30972] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 520.974652][T30972] [ 521.188137][T30974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 521.194865][T30974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.202775][T30974] vhci_hcd vhci_hcd.0: Device attached [ 521.208871][T30975] vhci_hcd: cannot find the pending unlink 6 [ 521.352972][T30975] vhci_hcd: connection closed [ 521.353321][T16587] vhci_hcd: stop threads [ 521.362438][T16587] vhci_hcd: release socket [ 521.366936][T16587] vhci_hcd: disconnect device [ 521.935076][T30995] FAULT_INJECTION: forcing a failure. [ 521.935076][T30995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.948348][T30995] CPU: 0 UID: 0 PID: 30995 Comm: syz.2.9799 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 521.948392][T30995] Tainted: [W]=WARN [ 521.948399][T30995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 521.948413][T30995] Call Trace: [ 521.948420][T30995] [ 521.948435][T30995] __dump_stack+0x1d/0x30 [ 521.948457][T30995] dump_stack_lvl+0xe8/0x140 [ 521.948500][T30995] dump_stack+0x15/0x1b [ 521.948517][T30995] should_fail_ex+0x265/0x280 [ 521.948576][T30995] should_fail+0xb/0x20 [ 521.948610][T30995] should_fail_usercopy+0x1a/0x20 [ 521.948683][T30995] copy_to_user_nofault+0x7f/0x120 [ 521.948715][T30995] bpf_probe_write_user+0x83/0xc0 [ 521.948755][T30995] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 521.948773][T30995] bpf_trace_run2+0x104/0x1c0 [ 521.948886][T30995] __bpf_trace_sys_enter+0x10/0x30 [ 521.948910][T30995] trace_sys_enter+0x86/0xf0 [ 521.948933][T30995] syscall_trace_enter+0x13e/0x1e0 [ 521.948960][T30995] do_syscall_64+0xac/0x200 [ 521.949023][T30995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 521.949104][T30995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 521.949128][T30995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.949155][T30995] RIP: 0033:0x7f89a333ebe9 [ 521.949175][T30995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.949272][T30995] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.949291][T30995] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 521.949308][T30995] RDX: 0000000000000050 RSI: 0000200000000d00 RDI: 0000000000000000 [ 521.949323][T30995] RBP: 00007f89a1da7090 R08: 0000000000000000 R09: 0000000000000000 [ 521.949337][T30995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.949376][T30995] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 521.949402][T30995] [ 522.317328][T31002] policy can only be matched on NF_INET_PRE_ROUTING [ 522.317349][T31002] unable to load match [ 522.341338][T31006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9803'. [ 522.384783][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 522.384803][ T29] audit: type=1326 audit(2000000008.460:68858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.436990][ T29] audit: type=1326 audit(2000000008.490:68859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.460792][ T29] audit: type=1326 audit(2000000008.490:68860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.484469][ T29] audit: type=1326 audit(2000000008.490:68861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.508232][ T29] audit: type=1326 audit(2000000008.490:68862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.531955][ T29] audit: type=1326 audit(2000000008.490:68863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.555978][ T29] audit: type=1326 audit(2000000008.490:68864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.579590][ T29] audit: type=1326 audit(2000000008.490:68865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.603349][ T29] audit: type=1326 audit(2000000008.490:68866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.626981][ T29] audit: type=1326 audit(2000000008.490:68867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31009 comm="syz.2.9804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 522.660315][T30984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9794'. [ 522.676310][T30984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9794'. [ 522.816957][T31035] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 522.823648][T31035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.831387][T31035] vhci_hcd vhci_hcd.0: Device attached [ 522.837956][T31037] vhci_hcd: cannot find the pending unlink 6 [ 522.894301][T31043] syzkaller1: entered promiscuous mode [ 522.899835][T31043] syzkaller1: entered allmulticast mode [ 522.915883][T31046] syzkaller1: entered promiscuous mode [ 522.921395][T31046] syzkaller1: entered allmulticast mode [ 522.983015][T31037] vhci_hcd: connection closed [ 522.983202][T16587] vhci_hcd: stop threads [ 522.992350][T16587] vhci_hcd: release socket [ 522.996833][T16587] vhci_hcd: disconnect device [ 523.432949][ T1034] usb 5-1: enqueue for inactive port 0 [ 523.438583][ T1034] usb 5-1: enqueue for inactive port 0 [ 523.485757][T31055] loop1: detected capacity change from 0 to 512 [ 523.493754][T31055] EXT4-fs (loop1): failed to initialize system zone (-117) [ 523.501042][T31055] EXT4-fs (loop1): mount failed [ 523.512708][ T1034] vhci_hcd: vhci_device speed not set [ 523.528715][T31061] FAULT_INJECTION: forcing a failure. [ 523.528715][T31061] name failslab, interval 1, probability 0, space 0, times 0 [ 523.541453][T31061] CPU: 0 UID: 0 PID: 31061 Comm: syz.1.9815 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 523.541499][T31061] Tainted: [W]=WARN [ 523.541508][T31061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.541547][T31061] Call Trace: [ 523.541633][T31061] [ 523.541641][T31061] __dump_stack+0x1d/0x30 [ 523.541662][T31061] dump_stack_lvl+0xe8/0x140 [ 523.541681][T31061] dump_stack+0x15/0x1b [ 523.541696][T31061] should_fail_ex+0x265/0x280 [ 523.541747][T31061] should_failslab+0x8c/0xb0 [ 523.541811][T31061] kmem_cache_alloc_noprof+0x50/0x310 [ 523.541838][T31061] ? getname_flags+0x80/0x3b0 [ 523.541865][T31061] getname_flags+0x80/0x3b0 [ 523.541890][T31061] __se_sys_newlstat+0x4b/0x280 [ 523.541980][T31061] ? fput+0x8f/0xc0 [ 523.542008][T31061] ? ksys_write+0x192/0x1a0 [ 523.542030][T31061] __x64_sys_newlstat+0x31/0x40 [ 523.542094][T31061] x64_sys_call+0x1b88/0x2ff0 [ 523.542198][T31061] do_syscall_64+0xd2/0x200 [ 523.542228][T31061] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 523.542257][T31061] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 523.542363][T31061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.542383][T31061] RIP: 0033:0x7fa8675febe9 [ 523.542449][T31061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.542507][T31061] RSP: 002b:00007fa86605f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 523.542525][T31061] RAX: ffffffffffffffda RBX: 00007fa867825fa0 RCX: 00007fa8675febe9 [ 523.542539][T31061] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 523.542625][T31061] RBP: 00007fa86605f090 R08: 0000000000000000 R09: 0000000000000000 [ 523.542640][T31061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.542653][T31061] R13: 00007fa867826038 R14: 00007fa867825fa0 R15: 00007ffd81a6dbe8 [ 523.542721][T31061] [ 523.851601][T31092] FAULT_INJECTION: forcing a failure. [ 523.851601][T31092] name failslab, interval 1, probability 0, space 0, times 0 [ 523.864436][T31092] CPU: 0 UID: 0 PID: 31092 Comm: syz.3.9820 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 523.864628][T31092] Tainted: [W]=WARN [ 523.864637][T31092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.864656][T31092] Call Trace: [ 523.864663][T31092] [ 523.864671][T31092] __dump_stack+0x1d/0x30 [ 523.864694][T31092] dump_stack_lvl+0xe8/0x140 [ 523.864714][T31092] dump_stack+0x15/0x1b [ 523.864734][T31092] should_fail_ex+0x265/0x280 [ 523.864822][T31092] should_failslab+0x8c/0xb0 [ 523.864854][T31092] __kmalloc_node_noprof+0xa9/0x410 [ 523.864916][T31092] ? load_msg+0x41/0x2f0 [ 523.865029][T31092] load_msg+0x41/0x2f0 [ 523.865066][T31092] do_mq_timedsend+0x23e/0x6b0 [ 523.865117][T31092] __x64_sys_mq_timedsend+0xd1/0x160 [ 523.865139][T31092] x64_sys_call+0x1d10/0x2ff0 [ 523.865209][T31092] do_syscall_64+0xd2/0x200 [ 523.865249][T31092] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 523.865293][T31092] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 523.865315][T31092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.865343][T31092] RIP: 0033:0x7fbc4c3cebe9 [ 523.865363][T31092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.865393][T31092] RSP: 002b:00007fbc4ae16038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 523.865417][T31092] RAX: ffffffffffffffda RBX: 00007fbc4c5f6090 RCX: 00007fbc4c3cebe9 [ 523.865434][T31092] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 523.865460][T31092] RBP: 00007fbc4ae16090 R08: 0000000000000000 R09: 0000000000000000 [ 523.865490][T31092] R10: 0000000000003ed7 R11: 0000000000000246 R12: 0000000000000001 [ 523.865507][T31092] R13: 00007fbc4c5f6128 R14: 00007fbc4c5f6090 R15: 00007ffdae97e568 [ 523.865601][T31092] [ 524.150430][T31106] FAULT_INJECTION: forcing a failure. [ 524.150430][T31106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.163861][T31106] CPU: 0 UID: 0 PID: 31106 Comm: syz.2.9827 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 524.163932][T31106] Tainted: [W]=WARN [ 524.163942][T31106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.164000][T31106] Call Trace: [ 524.164010][T31106] [ 524.164018][T31106] __dump_stack+0x1d/0x30 [ 524.164041][T31106] dump_stack_lvl+0xe8/0x140 [ 524.164089][T31106] dump_stack+0x15/0x1b [ 524.164112][T31106] should_fail_ex+0x265/0x280 [ 524.164153][T31106] should_fail+0xb/0x20 [ 524.164215][T31106] should_fail_usercopy+0x1a/0x20 [ 524.164240][T31106] copy_to_user_nofault+0x7f/0x120 [ 524.164305][T31106] bpf_probe_write_user+0x83/0xc0 [ 524.164350][T31106] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 524.164374][T31106] bpf_trace_run2+0x104/0x1c0 [ 524.164409][T31106] __bpf_trace_sys_enter+0x10/0x30 [ 524.164437][T31106] trace_sys_enter+0x86/0xf0 [ 524.164487][T31106] syscall_trace_enter+0x13e/0x1e0 [ 524.164511][T31106] do_syscall_64+0xac/0x200 [ 524.164536][T31106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 524.164632][T31106] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 524.164660][T31106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.164685][T31106] RIP: 0033:0x7f89a333ebe9 [ 524.164757][T31106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.164778][T31106] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 524.164799][T31106] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 524.164813][T31106] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000580 [ 524.164826][T31106] RBP: 00007f89a1da7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.164839][T31106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.164853][T31106] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 524.164884][T31106] [ 524.380610][T31109] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 524.387186][T31109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 524.394721][T31109] vhci_hcd vhci_hcd.0: Device attached [ 524.401151][T31112] vhci_hcd: cannot find the pending unlink 6 [ 524.415595][T31115] netlink: 'syz.2.9829': attribute type 11 has an invalid length. [ 524.625091][T31112] vhci_hcd: connection closed [ 524.625425][T16587] vhci_hcd: stop threads [ 524.634618][T16587] vhci_hcd: release socket [ 524.639080][T16587] vhci_hcd: disconnect device [ 524.644016][ T36] usb 13-1: new low-speed USB device number 20 using vhci_hcd [ 524.652063][ T36] usb 13-1: enqueue for inactive port 0 [ 524.654163][T31125] syzkaller1: entered promiscuous mode [ 524.663162][T31125] syzkaller1: entered allmulticast mode [ 524.668853][ T36] usb 13-1: enqueue for inactive port 0 [ 524.680742][ T36] usb 13-1: enqueue for inactive port 0 [ 524.686168][T31129] FAULT_INJECTION: forcing a failure. [ 524.686168][T31129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.699780][T31129] CPU: 0 UID: 0 PID: 31129 Comm: syz.2.9833 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 524.699826][T31129] Tainted: [W]=WARN [ 524.699833][T31129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 524.699879][T31129] Call Trace: [ 524.699888][T31129] [ 524.699897][T31129] __dump_stack+0x1d/0x30 [ 524.699963][T31129] dump_stack_lvl+0xe8/0x140 [ 524.699989][T31129] dump_stack+0x15/0x1b [ 524.700011][T31129] should_fail_ex+0x265/0x280 [ 524.700100][T31129] should_fail+0xb/0x20 [ 524.700139][T31129] should_fail_usercopy+0x1a/0x20 [ 524.700172][T31129] copy_to_user_nofault+0x7f/0x120 [ 524.700202][T31129] bpf_probe_write_user+0x83/0xc0 [ 524.700280][T31129] bpf_prog_19072b5a3fcf5d64+0x41/0x49 [ 524.700299][T31129] bpf_trace_run2+0x104/0x1c0 [ 524.700333][T31129] __bpf_trace_sys_enter+0x10/0x30 [ 524.700363][T31129] trace_sys_enter+0x86/0xf0 [ 524.700472][T31129] syscall_trace_enter+0x13e/0x1e0 [ 524.700502][T31129] do_syscall_64+0xac/0x200 [ 524.700561][T31129] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 524.700601][T31129] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 524.700647][T31129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.700737][T31129] RIP: 0033:0x7f89a333ebe9 [ 524.700757][T31129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.700782][T31129] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 524.700808][T31129] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 524.700825][T31129] RDX: 0000000000000018 RSI: 0000200000000340 RDI: 0000000000000006 [ 524.700842][T31129] RBP: 00007f89a1da7090 R08: 0000000000000000 R09: 0000000000000000 [ 524.700859][T31129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.700875][T31129] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 524.700970][T31129] [ 524.896853][ T36] vhci_hcd: vhci_device speed not set [ 524.903098][ T3377] usb 3-1: enqueue for inactive port 0 [ 524.908756][ T3377] usb 3-1: enqueue for inactive port 0 [ 524.952065][T31133] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9835'. [ 524.963376][T31133] netlink: 'syz.2.9835': attribute type 4 has an invalid length. [ 524.982991][ T3377] vhci_hcd: vhci_device speed not set [ 524.999728][T31140] FAULT_INJECTION: forcing a failure. [ 524.999728][T31140] name failslab, interval 1, probability 0, space 0, times 0 [ 525.012807][T31140] CPU: 1 UID: 0 PID: 31140 Comm: syz.2.9838 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 525.012848][T31140] Tainted: [W]=WARN [ 525.012857][T31140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.012873][T31140] Call Trace: [ 525.012881][T31140] [ 525.012890][T31140] __dump_stack+0x1d/0x30 [ 525.012943][T31140] dump_stack_lvl+0xe8/0x140 [ 525.012977][T31140] dump_stack+0x15/0x1b [ 525.012999][T31140] should_fail_ex+0x265/0x280 [ 525.013037][T31140] should_failslab+0x8c/0xb0 [ 525.013063][T31140] kmem_cache_alloc_noprof+0x50/0x310 [ 525.013158][T31140] ? getname_flags+0x80/0x3b0 [ 525.013198][T31140] getname_flags+0x80/0x3b0 [ 525.013231][T31140] user_path_at+0x28/0x130 [ 525.013265][T31140] __x64_sys_umount+0x85/0xe0 [ 525.013360][T31140] x64_sys_call+0xdd2/0x2ff0 [ 525.013389][T31140] do_syscall_64+0xd2/0x200 [ 525.013448][T31140] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 525.013547][T31140] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 525.013578][T31140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.013607][T31140] RIP: 0033:0x7f89a333ebe9 [ 525.013627][T31140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.013664][T31140] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 525.013754][T31140] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 525.013783][T31140] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000580 [ 525.013799][T31140] RBP: 00007f89a1da7090 R08: 0000000000000000 R09: 0000000000000000 [ 525.013815][T31140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.013831][T31140] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 525.013857][T31140] [ 525.469142][T31153] geneve1 speed is unknown, defaulting to 1000 [ 525.579631][T31183] FAULT_INJECTION: forcing a failure. [ 525.579631][T31183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.593191][T31183] CPU: 1 UID: 0 PID: 31183 Comm: syz.2.9844 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 525.593233][T31183] Tainted: [W]=WARN [ 525.593305][T31183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.593323][T31183] Call Trace: [ 525.593331][T31183] [ 525.593345][T31183] __dump_stack+0x1d/0x30 [ 525.593374][T31183] dump_stack_lvl+0xe8/0x140 [ 525.593401][T31183] dump_stack+0x15/0x1b [ 525.593420][T31183] should_fail_ex+0x265/0x280 [ 525.593504][T31183] should_fail+0xb/0x20 [ 525.593537][T31183] should_fail_usercopy+0x1a/0x20 [ 525.593564][T31183] _copy_from_user+0x1c/0xb0 [ 525.593631][T31183] do_sock_getsockopt+0xf1/0x240 [ 525.593727][T31183] __x64_sys_getsockopt+0x11e/0x1a0 [ 525.593771][T31183] x64_sys_call+0x2bc6/0x2ff0 [ 525.593793][T31183] do_syscall_64+0xd2/0x200 [ 525.593818][T31183] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 525.593866][T31183] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 525.593905][T31183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.593933][T31183] RIP: 0033:0x7f89a333ebe9 [ 525.593949][T31183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.594030][T31183] RSP: 002b:00007f89a1da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 525.594051][T31183] RAX: ffffffffffffffda RBX: 00007f89a3565fa0 RCX: 00007f89a333ebe9 [ 525.594112][T31183] RDX: 0000000000002711 RSI: 0000200000000114 RDI: 0000000000000003 [ 525.594129][T31183] RBP: 00007f89a1da7090 R08: 0000200000000000 R09: 0000000000000000 [ 525.594146][T31183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.594163][T31183] R13: 00007f89a3566038 R14: 00007f89a3565fa0 R15: 00007fffd7682d78 [ 525.594255][T31183] [ 525.850684][T31188] FAULT_INJECTION: forcing a failure. [ 525.850684][T31188] name failslab, interval 1, probability 0, space 0, times 0 [ 525.863434][T31188] CPU: 1 UID: 0 PID: 31188 Comm: syz.3.9845 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 525.863481][T31188] Tainted: [W]=WARN [ 525.863491][T31188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.863508][T31188] Call Trace: [ 525.863517][T31188] [ 525.863528][T31188] __dump_stack+0x1d/0x30 [ 525.863640][T31188] dump_stack_lvl+0xe8/0x140 [ 525.863666][T31188] dump_stack+0x15/0x1b [ 525.863688][T31188] should_fail_ex+0x265/0x280 [ 525.863792][T31188] should_failslab+0x8c/0xb0 [ 525.863825][T31188] kmem_cache_alloc_noprof+0x50/0x310 [ 525.863869][T31188] ? audit_log_start+0x365/0x6c0 [ 525.863911][T31188] audit_log_start+0x365/0x6c0 [ 525.864010][T31188] audit_seccomp+0x48/0x100 [ 525.864044][T31188] ? __seccomp_filter+0x68c/0x10d0 [ 525.864146][T31188] __seccomp_filter+0x69d/0x10d0 [ 525.864176][T31188] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 525.864214][T31188] ? vfs_write+0x75e/0x8e0 [ 525.864242][T31188] ? __rcu_read_unlock+0x4f/0x70 [ 525.864316][T31188] ? __fget_files+0x184/0x1c0 [ 525.864390][T31188] __secure_computing+0x82/0x150 [ 525.864418][T31188] syscall_trace_enter+0xcf/0x1e0 [ 525.864470][T31188] do_syscall_64+0xac/0x200 [ 525.864560][T31188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 525.864586][T31188] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 525.864609][T31188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.864671][T31188] RIP: 0033:0x7fbc4c3cebe9 [ 525.864688][T31188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.864707][T31188] RSP: 002b:00007fbc4ae37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e5 [ 525.864728][T31188] RAX: ffffffffffffffda RBX: 00007fbc4c5f5fa0 RCX: 00007fbc4c3cebe9 [ 525.864741][T31188] RDX: 0000000000000000 RSI: 0000000000000000 RDI: fffffffffffffffa [ 525.864766][T31188] RBP: 00007fbc4ae37090 R08: 0000000000000000 R09: 0000000000000000 [ 525.864779][T31188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.864792][T31188] R13: 00007fbc4c5f6038 R14: 00007fbc4c5f5fa0 R15: 00007ffdae97e568 [ 525.864811][T31188] [ 526.415323][T31218] loop1: detected capacity change from 0 to 256 [ 526.424315][T31218] FAT-fs (loop1): Directory bread(block 1285) failed [ 526.432449][T31218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9852'. [ 526.441553][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9852'. [ 526.451285][T31218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9852'. [ 526.460400][T31218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9852'. [ 526.470545][T31218] FAT-fs (loop1): Directory bread(block 1285) failed [ 526.478083][T31218] FAT-fs (loop1): Directory bread(block 1285) failed [ 526.485240][T31218] FAT-fs (loop1): Directory bread(block 1285) failed [ 526.598700][T31226] syzkaller1: entered promiscuous mode [ 526.604339][T31226] syzkaller1: entered allmulticast mode [ 526.796006][T31233] geneve1 speed is unknown, defaulting to 1000 [ 527.273412][T31264] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 527.279963][T31264] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.287530][T31264] vhci_hcd vhci_hcd.0: Device attached [ 527.294814][T31265] vhci_hcd: cannot find the pending unlink 6 [ 527.440724][T31271] loop1: detected capacity change from 0 to 512 [ 527.449228][T31265] vhci_hcd: connection closed [ 527.449517][ T12] vhci_hcd: stop threads [ 527.453214][T31271] EXT4-fs (loop1): failed to initialize system zone (-117) [ 527.454313][ T12] vhci_hcd: release socket [ 527.458819][T31271] EXT4-fs (loop1): mount failed [ 527.466032][ T12] vhci_hcd: disconnect device [ 527.480439][ T10] vhci_hcd: vhci_device speed not set [ 527.506067][T31277] loop1: detected capacity change from 0 to 512 [ 527.517159][T31277] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9861: bg 0: block 5: invalid block bitmap [ 527.529828][T31277] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 527.539506][T31277] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.9861: invalid indirect mapped block 3 (level 2) [ 527.555400][T31277] EXT4-fs (loop1): 2 truncates cleaned up [ 527.561654][T31277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.599734][T31284] netlink: '+}[@': attribute type 13 has an invalid length. [ 527.605590][T31277] netlink: 'syz.1.9861': attribute type 1 has an invalid length. [ 527.614974][T31277] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9861'. [ 527.656753][T31284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.682157][T31289] netlink: 'syz.1.9861': attribute type 13 has an invalid length. [ 527.735536][T31289] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.742785][T31289] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.751606][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 527.751625][ T29] audit: type=1400 audit(2000000013.810:69089): avc: denied { append } for pid=31276 comm="syz.1.9861" path="/73/file0/memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 527.828841][T31289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.840772][T31300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9866'. [ 527.850952][T31289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.916663][T16605] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.925926][ T3377] geneve1 speed is unknown, defaulting to 1000 [ 527.932152][ T3377] syz2: Port: 1 Link DOWN [ 527.934661][ T9] geneve1 speed is unknown, defaulting to 1000 [ 527.944553][T16605] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.960663][T16605] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.990086][T16605] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.081735][T28837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.123681][T31318] syzkaller1: entered promiscuous mode [ 528.129410][T31318] syzkaller1: entered allmulticast mode [ 528.141018][ T29] audit: type=1326 audit(2000000014.210:69090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.166213][ T29] audit: type=1326 audit(2000000014.210:69091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.190197][ T29] audit: type=1326 audit(2000000014.210:69092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.213967][ T29] audit: type=1326 audit(2000000014.210:69093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.237705][ T29] audit: type=1326 audit(2000000014.210:69094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.261499][ T29] audit: type=1326 audit(2000000014.210:69095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.285192][ T29] audit: type=1326 audit(2000000014.210:69096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.311922][ T29] audit: type=1326 audit(2000000014.290:69097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.335902][ T29] audit: type=1326 audit(2000000014.290:69098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.3.9872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 528.491613][T31334] geneve1 speed is unknown, defaulting to 1000 [ 528.889572][T31362] FAULT_INJECTION: forcing a failure. [ 528.889572][T31362] name failslab, interval 1, probability 0, space 0, times 0 [ 528.902475][T31362] CPU: 1 UID: 0 PID: 31362 Comm: syz.0.9876 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 528.902524][T31362] Tainted: [W]=WARN [ 528.902604][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.902620][T31362] Call Trace: [ 528.902680][T31362] [ 528.902688][T31362] __dump_stack+0x1d/0x30 [ 528.902736][T31362] dump_stack_lvl+0xe8/0x140 [ 528.902759][T31362] dump_stack+0x15/0x1b [ 528.902776][T31362] should_fail_ex+0x265/0x280 [ 528.902816][T31362] should_failslab+0x8c/0xb0 [ 528.902909][T31362] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 528.902963][T31362] ? shmem_alloc_inode+0x34/0x50 [ 528.903006][T31362] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 528.903036][T31362] shmem_alloc_inode+0x34/0x50 [ 528.903064][T31362] alloc_inode+0x3d/0x170 [ 528.903168][T31362] new_inode+0x1d/0xe0 [ 528.903201][T31362] shmem_get_inode+0x244/0x750 [ 528.903228][T31362] ? __se_sys_memfd_create+0x1cc/0x590 [ 528.903283][T31362] __shmem_file_setup+0x113/0x210 [ 528.903320][T31362] shmem_file_setup+0x3b/0x50 [ 528.903358][T31362] __se_sys_memfd_create+0x2c3/0x590 [ 528.903432][T31362] __x64_sys_memfd_create+0x31/0x40 [ 528.903456][T31362] x64_sys_call+0x2abe/0x2ff0 [ 528.903479][T31362] do_syscall_64+0xd2/0x200 [ 528.903525][T31362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 528.903550][T31362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 528.903573][T31362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.903602][T31362] RIP: 0033:0x7fbd4866ebe9 [ 528.903621][T31362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.903726][T31362] RSP: 002b:00007fbd470d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 528.903751][T31362] RAX: ffffffffffffffda RBX: 000000000000045b RCX: 00007fbd4866ebe9 [ 528.903765][T31362] RDX: 00007fbd470d6ef0 RSI: 0000000000000000 RDI: 00007fbd486f27e8 [ 528.903778][T31362] RBP: 00002000000010c0 R08: 00007fbd470d6bb7 R09: 00007fbd470d6e40 [ 528.903790][T31362] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 528.903816][T31362] R13: 00007fbd470d6ef0 R14: 00007fbd470d6eb0 R15: 0000200000000240 [ 528.903839][T31362] [ 529.273109][T31376] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 529.279746][T31376] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 529.287376][T31376] vhci_hcd vhci_hcd.0: Device attached [ 529.323601][T31378] netlink: 'syz.3.9883': attribute type 1 has an invalid length. [ 529.331458][T31378] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9883'. [ 529.344921][T31378] netlink: 'syz.3.9883': attribute type 13 has an invalid length. [ 529.405440][T31395] loop1: detected capacity change from 0 to 512 [ 529.433810][T31395] EXT4-fs (loop1): failed to initialize system zone (-117) [ 529.442047][T31395] EXT4-fs (loop1): mount failed [ 529.490605][T31391] geneve1 speed is unknown, defaulting to 1000 [ 529.532691][ T10] usb 13-1: new low-speed USB device number 21 using vhci_hcd [ 529.584041][T31415] loop1: detected capacity change from 0 to 512 [ 529.611473][T31415] EXT4-fs (loop1): failed to initialize system zone (-117) [ 529.628643][T31415] EXT4-fs (loop1): mount failed [ 529.653756][T31381] vhci_hcd: connection reset by peer [ 529.659608][T16604] vhci_hcd: stop threads [ 529.664094][T16604] vhci_hcd: release socket [ 529.668800][T16604] vhci_hcd: disconnect device [ 529.736228][T31447] loop1: detected capacity change from 0 to 1024 [ 529.743814][T31447] EXT4-fs: Ignoring removed bh option [ 529.749339][T31447] EXT4-fs: inline encryption not supported [ 529.756540][T31447] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 529.767813][T31447] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 529.777236][T31447] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.9892: lblock 2 mapped to illegal pblock 2 (length 1) [ 529.791437][T31447] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.9892: lblock 0 mapped to illegal pblock 48 (length 1) [ 529.806229][T31447] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9892: Failed to acquire dquot type 0 [ 529.817751][T31447] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 529.829407][T31447] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.9892: mark_inode_dirty error [ 529.841001][T31447] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 529.851382][T31447] EXT4-fs (loop1): 1 orphan inode deleted [ 529.857744][T31447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.870456][T16605] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 529.887306][T16605] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 530.208948][T31454] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9893'. [ 530.218629][T31454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9893'. [ 530.230745][T31454] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9893'. [ 530.240177][T31454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9893'. [ 530.377503][T31470] geneve1 speed is unknown, defaulting to 1000 [ 530.461216][T31486] netlink: 'syz.6.9900': attribute type 1 has an invalid length. [ 530.469335][T31486] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9900'. [ 530.482039][T31486] netlink: 'syz.6.9900': attribute type 13 has an invalid length. [ 530.499266][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.507124][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.515017][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.522848][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.530296][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.537772][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.545350][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.552863][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.560288][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.567756][ T3361] hid-generic 0005:0000:0000.0006: unknown main item tag 0x0 [ 530.582015][ T3361] hid-generic 0005:0000:0000.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 530.615043][T28837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.637597][T28837] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 530.659017][T28837] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 530.668672][T28837] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 530.680204][T31510] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 530.683741][T31513] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9904'. [ 530.686820][T31510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 530.703665][T31510] vhci_hcd vhci_hcd.0: Device attached [ 530.777225][T31521] loop1: detected capacity change from 0 to 512 [ 530.789817][T31521] EXT4-fs (loop1): failed to initialize system zone (-117) [ 530.797434][T31521] EXT4-fs (loop1): mount failed [ 530.835803][T31529] loop1: detected capacity change from 0 to 256 [ 530.845158][T31529] FAT-fs (loop1): Directory bread(block 1285) failed [ 530.853589][T31529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9906'. [ 530.866109][T31529] FAT-fs (loop1): Directory bread(block 1285) failed [ 530.875144][T31529] FAT-fs (loop1): Directory bread(block 1285) failed [ 530.882009][T31529] FAT-fs (loop1): Directory bread(block 1285) failed [ 530.905240][T31512] vhci_hcd: connection closed [ 530.905389][T16604] vhci_hcd: stop threads [ 530.914573][T16604] vhci_hcd: release socket [ 530.919016][T16604] vhci_hcd: disconnect device [ 530.952632][ T3361] usb 7-1: new low-speed USB device number 22 using vhci_hcd [ 530.960195][ T3361] usb 7-1: enqueue for inactive port 0 [ 530.965945][ T3361] usb 7-1: enqueue for inactive port 0 [ 530.971555][ T3361] usb 7-1: enqueue for inactive port 0 [ 530.977018][T31534] geneve1 speed is unknown, defaulting to 1000 [ 531.042789][ T3361] vhci_hcd: vhci_device speed not set [ 531.550713][T31600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=31600 comm=syz.2.9915 [ 531.573786][T31599] syzkaller1: entered promiscuous mode [ 531.579318][T31599] syzkaller1: entered allmulticast mode [ 531.616009][T31598] geneve1 speed is unknown, defaulting to 1000 [ 531.782735][T31629] geneve1 speed is unknown, defaulting to 1000 [ 532.061533][T31673] FAULT_INJECTION: forcing a failure. [ 532.061533][T31673] name failslab, interval 1, probability 0, space 0, times 0 [ 532.074558][T31673] CPU: 1 UID: 0 PID: 31673 Comm: syz.6.9925 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 532.074606][T31673] Tainted: [W]=WARN [ 532.074697][T31673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.074713][T31673] Call Trace: [ 532.074722][T31673] [ 532.074733][T31673] __dump_stack+0x1d/0x30 [ 532.074761][T31673] dump_stack_lvl+0xe8/0x140 [ 532.074798][T31673] dump_stack+0x15/0x1b [ 532.074864][T31673] should_fail_ex+0x265/0x280 [ 532.074910][T31673] should_failslab+0x8c/0xb0 [ 532.074943][T31673] kmem_cache_alloc_noprof+0x50/0x310 [ 532.074980][T31673] ? security_file_alloc+0x32/0x100 [ 532.075023][T31673] security_file_alloc+0x32/0x100 [ 532.075059][T31673] init_file+0x5c/0x1d0 [ 532.075099][T31673] alloc_empty_file+0x8b/0x200 [ 532.075238][T31673] path_openat+0x68/0x2170 [ 532.075263][T31673] ? _parse_integer_limit+0x170/0x190 [ 532.075350][T31673] ? _parse_integer+0x27/0x40 [ 532.075388][T31673] ? kstrtoull+0x111/0x140 [ 532.075423][T31673] ? kstrtouint+0x76/0xc0 [ 532.075506][T31673] do_filp_open+0x109/0x230 [ 532.075543][T31673] do_sys_openat2+0xa6/0x110 [ 532.075589][T31673] __x64_sys_creat+0x65/0x90 [ 532.075627][T31673] x64_sys_call+0x2d94/0x2ff0 [ 532.075656][T31673] do_syscall_64+0xd2/0x200 [ 532.075761][T31673] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 532.075786][T31673] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 532.075873][T31673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.075901][T31673] RIP: 0033:0x7f461764ebe9 [ 532.075917][T31673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.075937][T31673] RSP: 002b:00007f46160b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 532.075957][T31673] RAX: ffffffffffffffda RBX: 00007f4617875fa0 RCX: 00007f461764ebe9 [ 532.076057][T31673] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 532.076080][T31673] RBP: 00007f46160b7090 R08: 0000000000000000 R09: 0000000000000000 [ 532.076095][T31673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.076107][T31673] R13: 00007f4617876038 R14: 00007f4617875fa0 R15: 00007ffdb17187d8 [ 532.076129][T31673] [ 532.332865][T31679] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 532.339447][T31679] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.347323][T31679] vhci_hcd vhci_hcd.0: Device attached [ 532.373772][T31680] vhci_hcd: cannot find the pending unlink 6 [ 532.519920][T31696] geneve1 speed is unknown, defaulting to 1000 [ 532.593671][ T3361] usb 5-1: new low-speed USB device number 29 using vhci_hcd [ 532.604671][T31712] FAULT_INJECTION: forcing a failure. [ 532.604671][T31712] name failslab, interval 1, probability 0, space 0, times 0 [ 532.617593][T31712] CPU: 0 UID: 0 PID: 31712 Comm: syz.3.9936 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 532.617636][T31712] Tainted: [W]=WARN [ 532.617647][T31712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.617676][T31712] Call Trace: [ 532.617683][T31712] [ 532.617694][T31712] __dump_stack+0x1d/0x30 [ 532.617771][T31712] dump_stack_lvl+0xe8/0x140 [ 532.617798][T31712] dump_stack+0x15/0x1b [ 532.617819][T31712] should_fail_ex+0x265/0x280 [ 532.617861][T31712] ? __se_sys_memfd_create+0x1cc/0x590 [ 532.617927][T31712] should_failslab+0x8c/0xb0 [ 532.617978][T31712] __kmalloc_cache_noprof+0x4c/0x320 [ 532.618021][T31712] __se_sys_memfd_create+0x1cc/0x590 [ 532.618070][T31712] __x64_sys_memfd_create+0x31/0x40 [ 532.618092][T31712] x64_sys_call+0x2abe/0x2ff0 [ 532.618118][T31712] do_syscall_64+0xd2/0x200 [ 532.618147][T31712] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 532.618176][T31712] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 532.618206][T31712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.618310][T31712] RIP: 0033:0x7fbc4c3cebe9 [ 532.618342][T31712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.618361][T31712] RSP: 002b:00007fbc4ae36d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 532.618381][T31712] RAX: ffffffffffffffda RBX: 000000000000059e RCX: 00007fbc4c3cebe9 [ 532.618396][T31712] RDX: 00007fbc4ae36dec RSI: 0000000000000000 RDI: 00007fbc4c4527e8 [ 532.618413][T31712] RBP: 0000200000000600 R08: 00007fbc4ae36b07 R09: 0000000000000000 [ 532.618429][T31712] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 532.618445][T31712] R13: 00007fbc4ae36dec R14: 00007fbc4ae36df0 R15: 00007ffdae97e568 [ 532.618472][T31712] [ 532.828877][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 532.828895][ T29] audit: type=1400 audit(2000000018.880:69430): avc: denied { setopt } for pid=31711 comm="syz.3.9936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 532.868383][T31735] __nla_validate_parse: 5 callbacks suppressed [ 532.868405][T31735] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9939'. [ 532.898534][ T29] audit: type=1400 audit(2000000018.970:69431): avc: denied { write } for pid=31737 comm="syz.3.9938" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 532.979169][T31744] policy can only be matched on NF_INET_PRE_ROUTING [ 532.979185][T31744] unable to load match [ 532.990701][T31680] vhci_hcd: connection reset by peer [ 532.998002][T16605] vhci_hcd: stop threads [ 533.002313][T16605] vhci_hcd: release socket [ 533.006815][T16605] vhci_hcd: disconnect device [ 533.011840][ T29] audit: type=1326 audit(2000000019.010:69432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.035699][ T29] audit: type=1326 audit(2000000019.010:69433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.059379][ T29] audit: type=1326 audit(2000000019.010:69434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.083259][ T29] audit: type=1326 audit(2000000019.010:69435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.107005][ T29] audit: type=1326 audit(2000000019.010:69436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.130780][ T29] audit: type=1326 audit(2000000019.010:69437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.138120][T31751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9944'. [ 533.154501][ T29] audit: type=1326 audit(2000000019.010:69438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbd4866d69f code=0x7ffc0000 [ 533.187049][ T29] audit: type=1326 audit(2000000019.010:69439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31741 comm="syz.0.9942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 533.218325][T31753] syzkaller1: entered promiscuous mode [ 533.224011][T31753] syzkaller1: entered allmulticast mode [ 533.230460][T31751] hsr_slave_0: left promiscuous mode [ 533.236426][T31751] hsr_slave_1: left promiscuous mode [ 533.245645][T31758] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9944'. [ 533.381223][T31777] loop1: detected capacity change from 0 to 2048 [ 533.393922][T31757] syzkaller0: entered promiscuous mode [ 533.399522][T31757] syzkaller0: entered allmulticast mode [ 533.424808][T31740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.437049][T31740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.875242][T31805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9952'. [ 533.910253][T31800] geneve1 speed is unknown, defaulting to 1000 [ 533.988476][T31830] random: crng reseeded on system resumption [ 534.070960][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9959'. [ 534.086220][T31840] hsr_slave_0: left promiscuous mode [ 534.096112][T31840] hsr_slave_1: left promiscuous mode [ 534.155669][T31854] syzkaller1: entered promiscuous mode [ 534.161213][T31854] syzkaller1: entered allmulticast mode [ 534.304729][T31868] geneve1 speed is unknown, defaulting to 1000 [ 534.409078][T31891] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9972'. [ 534.438377][T31906] FAULT_INJECTION: forcing a failure. [ 534.438377][T31906] name failslab, interval 1, probability 0, space 0, times 0 [ 534.451251][T31906] CPU: 1 UID: 0 PID: 31906 Comm: syz.6.9973 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 534.451290][T31906] Tainted: [W]=WARN [ 534.451379][T31906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.451396][T31906] Call Trace: [ 534.451406][T31906] [ 534.451416][T31906] __dump_stack+0x1d/0x30 [ 534.451438][T31906] dump_stack_lvl+0xe8/0x140 [ 534.451516][T31906] dump_stack+0x15/0x1b [ 534.451547][T31906] should_fail_ex+0x265/0x280 [ 534.451593][T31906] should_failslab+0x8c/0xb0 [ 534.451703][T31906] kmem_cache_alloc_node_noprof+0x57/0x320 [ 534.451741][T31906] ? __alloc_skb+0x101/0x320 [ 534.451782][T31906] __alloc_skb+0x101/0x320 [ 534.451823][T31906] netlink_alloc_large_skb+0xba/0xf0 [ 534.451914][T31906] netlink_sendmsg+0x3cf/0x6b0 [ 534.451969][T31906] ? __pfx_netlink_sendmsg+0x10/0x10 [ 534.452070][T31906] __sock_sendmsg+0x142/0x180 [ 534.452101][T31906] ____sys_sendmsg+0x31e/0x4e0 [ 534.452146][T31906] ___sys_sendmsg+0x17b/0x1d0 [ 534.452317][T31906] __x64_sys_sendmsg+0xd4/0x160 [ 534.452368][T31906] x64_sys_call+0x191e/0x2ff0 [ 534.452398][T31906] do_syscall_64+0xd2/0x200 [ 534.452478][T31906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 534.452541][T31906] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 534.452572][T31906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.452605][T31906] RIP: 0033:0x7f461764ebe9 [ 534.452654][T31906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.452680][T31906] RSP: 002b:00007f46160b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.452753][T31906] RAX: ffffffffffffffda RBX: 00007f4617875fa0 RCX: 00007f461764ebe9 [ 534.452766][T31906] RDX: 00000000300048c0 RSI: 0000200000000700 RDI: 0000000000000009 [ 534.452779][T31906] RBP: 00007f46160b7090 R08: 0000000000000000 R09: 0000000000000000 [ 534.452796][T31906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.452835][T31906] R13: 00007f4617876038 R14: 00007f4617875fa0 R15: 00007ffdb17187d8 [ 534.452862][T31906] [ 534.663757][ T10] usb 13-1: enqueue for inactive port 0 [ 534.669387][ T10] usb 13-1: enqueue for inactive port 0 [ 534.739101][T31928] FAULT_INJECTION: forcing a failure. [ 534.739101][T31928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 534.752421][T31928] CPU: 0 UID: 0 PID: 31928 Comm: syz.6.9976 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 534.752562][T31928] Tainted: [W]=WARN [ 534.752569][T31928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 534.752589][T31928] Call Trace: [ 534.752598][T31928] [ 534.752608][T31928] __dump_stack+0x1d/0x30 [ 534.752637][T31928] dump_stack_lvl+0xe8/0x140 [ 534.752664][T31928] dump_stack+0x15/0x1b [ 534.752796][T31928] should_fail_ex+0x265/0x280 [ 534.752842][T31928] should_fail+0xb/0x20 [ 534.752879][T31928] should_fail_usercopy+0x1a/0x20 [ 534.752913][T31928] _copy_from_user+0x1c/0xb0 [ 534.753007][T31928] ___sys_sendmsg+0xc1/0x1d0 [ 534.753072][T31928] __x64_sys_sendmsg+0xd4/0x160 [ 534.753120][T31928] x64_sys_call+0x191e/0x2ff0 [ 534.753180][T31928] do_syscall_64+0xd2/0x200 [ 534.753209][T31928] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 534.753234][T31928] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 534.753337][T31928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.753374][T31928] RIP: 0033:0x7f461764ebe9 [ 534.753394][T31928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.753413][T31928] RSP: 002b:00007f46160b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.753433][T31928] RAX: ffffffffffffffda RBX: 00007f4617875fa0 RCX: 00007f461764ebe9 [ 534.753528][T31928] RDX: 0000000000002000 RSI: 0000200000000180 RDI: 0000000000000003 [ 534.753541][T31928] RBP: 00007f46160b7090 R08: 0000000000000000 R09: 0000000000000000 [ 534.753554][T31928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.753568][T31928] R13: 00007f4617876038 R14: 00007f4617875fa0 R15: 00007ffdb17187d8 [ 534.753595][T31928] [ 535.092882][T31940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9978'. [ 535.139363][T31943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9980'. [ 535.148419][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9980'. [ 535.158503][T31944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9979'. [ 535.463282][T31980] netlink: 'syz.0.9990': attribute type 13 has an invalid length. [ 535.490769][T31981] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 535.497398][T31981] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.505184][T31981] vhci_hcd vhci_hcd.0: Device attached [ 535.536751][T31985] loop1: detected capacity change from 0 to 512 [ 535.567646][T31985] EXT4-fs (loop1): failed to initialize system zone (-117) [ 535.589349][T31985] EXT4-fs (loop1): mount failed [ 535.933485][T31982] vhci_hcd: connection closed [ 535.935324][T16587] vhci_hcd: stop threads [ 535.944697][T16587] vhci_hcd: release socket [ 535.949221][T16587] vhci_hcd: disconnect device [ 536.204721][ T10] vhci_hcd: vhci_device speed not set [ 536.252959][T32012] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 536.259575][T32012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 536.267299][T32012] vhci_hcd vhci_hcd.0: Device attached [ 536.276926][T32013] vhci_hcd: cannot find the pending unlink 6 [ 536.453487][T32013] vhci_hcd: connection closed [ 536.453801][ T1712] vhci_hcd: stop threads [ 536.462962][ T1712] vhci_hcd: release socket [ 536.467408][ T1712] vhci_hcd: disconnect device [ 536.522777][ T36] usb 7-1: new low-speed USB device number 23 using vhci_hcd [ 536.530337][ T36] usb 7-1: enqueue for inactive port 0 [ 536.536321][ T36] usb 7-1: enqueue for inactive port 0 [ 536.541906][ T36] usb 7-1: enqueue for inactive port 0 [ 536.613204][ T36] vhci_hcd: vhci_device speed not set [ 536.841803][T32037] loop1: detected capacity change from 0 to 1024 [ 536.849140][T32037] EXT4-fs: Ignoring removed bh option [ 536.854677][T32037] EXT4-fs: inline encryption not supported [ 536.860889][T32037] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 536.872511][T32037] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 536.884592][T32037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.10004: lblock 2 mapped to illegal pblock 2 (length 1) [ 536.899054][T32037] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.10004: lblock 0 mapped to illegal pblock 48 (length 1) [ 536.914607][T32037] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.10004: Failed to acquire dquot type 0 [ 536.926214][T32037] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 536.935804][T32037] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.10004: mark_inode_dirty error [ 536.947493][T32037] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 536.982682][T32037] EXT4-fs (loop1): 1 orphan inode deleted [ 536.988857][T32037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.003343][T16604] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:46: lblock 1 mapped to illegal pblock 1 (length 1) [ 537.023295][T16604] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:46: Failed to release dquot type 0 [ 537.294862][T32050] hsr_slave_0: left promiscuous mode [ 537.300807][T32050] hsr_slave_1: left promiscuous mode [ 537.605924][T32069] geneve1 speed is unknown, defaulting to 1000 [ 537.672775][ T3361] usb 5-1: enqueue for inactive port 0 [ 537.679960][ T3361] usb 5-1: enqueue for inactive port 0 [ 537.752761][ T3361] vhci_hcd: vhci_device speed not set [ 537.761273][T28837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.771318][T28837] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 537.784589][T28837] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 537.795030][T28837] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 537.891600][T32114] __nla_validate_parse: 7 callbacks suppressed [ 537.891618][T32114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10020'. [ 537.937439][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 537.937460][ T29] audit: type=1326 audit(2000000024.010:69959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 537.968426][T32115] loop1: detected capacity change from 0 to 1024 [ 537.970890][ T29] audit: type=1326 audit(2000000024.010:69960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 537.975799][T32115] EXT4-fs: Ignoring removed bh option [ 537.999347][ T29] audit: type=1326 audit(2000000024.010:69961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 537.999410][ T29] audit: type=1326 audit(2000000024.010:69962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.005207][T32115] EXT4-fs: inline encryption not supported [ 538.028900][ T29] audit: type=1326 audit(2000000024.010:69963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.054121][T32115] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 538.058510][ T29] audit: type=1326 audit(2000000024.010:69964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.092378][T32115] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 538.092923][ T29] audit: type=1326 audit(2000000024.010:69965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.120144][T32115] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.10019: lblock 2 mapped to illegal pblock 2 (length 1) [ 538.124883][ T29] audit: type=1326 audit(2000000024.010:69966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.151806][T32115] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 538.163179][ T29] audit: type=1326 audit(2000000024.010:69967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32109 comm="syz.1.10019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 538.219728][T32115] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.10019: lblock 0 mapped to illegal pblock 48 (length 1) [ 538.234519][T32115] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.10019: Failed to acquire dquot type 0 [ 538.252680][T32115] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 538.283630][T32115] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.10019: mark_inode_dirty error [ 538.295356][T32115] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 538.307589][T32115] EXT4-fs (loop1): 1 orphan inode deleted [ 538.314023][T32115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.318934][T32122] syzkaller1: entered promiscuous mode [ 538.332046][T32122] syzkaller1: entered allmulticast mode [ 538.340177][ T1712] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 538.366756][ T1712] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 538.654639][T32142] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 538.661179][T32142] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 538.668732][T32142] vhci_hcd vhci_hcd.0: Device attached [ 538.675152][T32143] vhci_hcd: cannot find the pending unlink 6 [ 538.873093][T32143] vhci_hcd: connection closed [ 538.873284][T16587] vhci_hcd: stop threads [ 538.882548][T16587] vhci_hcd: release socket [ 538.887097][T16587] vhci_hcd: disconnect device [ 539.079515][T28837] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.089679][T28837] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 539.103079][T28837] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 539.112824][T28837] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 539.216577][T32160] syzkaller1: entered promiscuous mode [ 539.222152][T32160] syzkaller1: entered allmulticast mode [ 539.229930][T32163] syzkaller1: entered promiscuous mode [ 539.235482][T32163] syzkaller1: entered allmulticast mode [ 539.353785][T32177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10032'. [ 540.106598][T32212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10044'. [ 540.146696][T32216] loop1: detected capacity change from 0 to 512 [ 540.159950][T32216] EXT4-fs (loop1): failed to initialize system zone (-117) [ 540.168801][T32216] EXT4-fs (loop1): mount failed [ 540.169154][T32214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10045'. [ 540.214922][T32214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.222458][T32214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.265668][T32214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.273262][T32214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.369417][T32242] geneve1 speed is unknown, defaulting to 1000 [ 540.523228][T32274] syzkaller1: entered promiscuous mode [ 540.528764][T32274] syzkaller1: entered allmulticast mode [ 540.573930][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10056'. [ 540.583483][T32278] netlink: 152 bytes leftover after parsing attributes in process `syz.2.10056'. [ 541.408224][T32315] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 541.414892][T32315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 541.422774][T32315] vhci_hcd vhci_hcd.0: Device attached [ 541.429796][T32317] vhci_hcd: cannot find the pending unlink 6 [ 541.616479][T32325] geneve1 speed is unknown, defaulting to 1000 [ 541.670632][ T3361] usb 3-1: new low-speed USB device number 25 using vhci_hcd [ 541.690467][T32331] geneve1 speed is unknown, defaulting to 1000 [ 541.704496][T32317] vhci_hcd: connection reset by peer [ 541.710298][T16604] vhci_hcd: stop threads [ 541.714603][T16604] vhci_hcd: release socket [ 541.719065][T16604] vhci_hcd: disconnect device [ 541.867433][T32388] syzkaller1: entered promiscuous mode [ 541.873123][T32388] syzkaller1: entered allmulticast mode [ 542.261895][T32398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10079'. [ 542.320775][T32410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10083'. [ 542.849840][T32435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 542.856383][T32435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 542.864140][T32435] vhci_hcd vhci_hcd.0: Device attached [ 542.870281][T32436] vhci_hcd: cannot find the pending unlink 6 [ 543.033366][T32436] vhci_hcd: connection closed [ 543.033703][T16605] vhci_hcd: stop threads [ 543.042805][T16605] vhci_hcd: release socket [ 543.047410][T16605] vhci_hcd: disconnect device [ 543.052677][ T3377] vhci_hcd: vhci_device speed not set [ 543.176394][T32444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10093'. [ 543.198957][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 543.198973][ T29] audit: type=1326 audit(2000000029.270:70300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.232420][ T29] audit: type=1326 audit(2000000029.270:70301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.239531][T32452] netlink: 'syz.1.10094': attribute type 13 has an invalid length. [ 543.256335][ T29] audit: type=1326 audit(2000000029.270:70302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.256375][ T29] audit: type=1326 audit(2000000029.270:70303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.312177][ T29] audit: type=1326 audit(2000000029.270:70304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.335992][ T29] audit: type=1326 audit(2000000029.270:70305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.359893][ T29] audit: type=1326 audit(2000000029.270:70306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.383659][ T29] audit: type=1326 audit(2000000029.270:70307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.407365][ T29] audit: type=1326 audit(2000000029.270:70308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.431260][ T29] audit: type=1326 audit(2000000029.270:70309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32439 comm="syz.3.10092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 543.461079][T32454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10095'. [ 543.681770][T32487] bridge_slave_0: left allmulticast mode [ 543.688225][T32487] bridge_slave_0: left promiscuous mode [ 543.694369][T32487] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.703516][T32487] bridge_slave_1: left allmulticast mode [ 543.709294][T32487] bridge_slave_1: left promiscuous mode [ 543.715208][T32487] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.725951][T32487] bond0: (slave bond_slave_0): Releasing backup interface [ 543.734176][T32487] bond0: (slave bond_slave_1): Releasing backup interface [ 543.744478][T32487] team0: Port device team_slave_0 removed [ 543.751256][T32487] team0: Port device team_slave_1 removed [ 543.757356][T32487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.765645][T32487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.785116][T32488] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 544.667628][T32531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10122'. [ 544.987587][T32559] bridge_slave_0: left allmulticast mode [ 544.993638][T32559] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.004948][T32559] bridge_slave_1: left allmulticast mode [ 545.010654][T32559] bridge_slave_1: left promiscuous mode [ 545.016516][T32559] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.030954][T32559] bond0: (slave bond_slave_0): Releasing backup interface [ 545.042156][T32559] bond0: (slave bond_slave_1): Releasing backup interface [ 545.058537][T32559] team0: Port device team_slave_0 removed [ 545.068829][T32559] team0: Port device team_slave_1 removed [ 545.117421][T32567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10137'. [ 545.194982][T32564] bond1: entered promiscuous mode [ 545.200107][T32564] bond1: entered allmulticast mode [ 545.206040][T32564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 545.214773][T32567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.224088][T32567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.620886][T32627] netlink: 'syz.3.10145': attribute type 13 has an invalid length. [ 545.688265][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10147'. [ 545.792107][T32636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.817329][T32642] syzkaller1: entered promiscuous mode [ 545.822991][T32642] syzkaller1: entered allmulticast mode [ 545.928776][T32649] geneve1 speed is unknown, defaulting to 1000 [ 546.292237][T32699] netlink: 'syz.2.10161': attribute type 13 has an invalid length. [ 546.322279][T32701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10162'. [ 546.331543][T32701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'. [ 546.342196][T32701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10162'. [ 546.351341][T32701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10162'. [ 546.677530][T32725] geneve1 speed is unknown, defaulting to 1000 [ 546.699555][T32731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10171'. [ 546.712688][ T3361] usb 3-1: enqueue for inactive port 0 [ 546.718198][ T3361] usb 3-1: enqueue for inactive port 0 [ 546.812653][ T3361] vhci_hcd: vhci_device speed not set [ 546.959394][ T311] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 546.966041][ T311] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 546.973653][ T311] vhci_hcd vhci_hcd.0: Device attached [ 546.992080][ T317] vhci_hcd: cannot find the pending unlink 6 [ 547.243574][ T317] vhci_hcd: connection closed [ 547.243705][ T1712] vhci_hcd: stop threads [ 547.252831][ T1712] vhci_hcd: release socket [ 547.257524][ T1712] vhci_hcd: disconnect device [ 548.006356][ T373] geneve1 speed is unknown, defaulting to 1000 [ 548.193613][ T413] __nla_validate_parse: 14 callbacks suppressed [ 548.193628][ T413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10209'. [ 548.209159][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 548.209295][ T29] kauditd_printk_skb: 950 callbacks suppressed [ 548.209313][ T29] audit: type=1326 audit(2000000034.270:71260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.248041][ T29] audit: type=1326 audit(2000000034.270:71261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.271613][ T29] audit: type=1326 audit(2000000034.270:71262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.295316][ T29] audit: type=1326 audit(2000000034.270:71263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.318846][ T29] audit: type=1326 audit(2000000034.270:71264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.342892][ T29] audit: type=1326 audit(2000000034.270:71265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.366491][ T29] audit: type=1326 audit(2000000034.270:71266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.375662][ T413] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10209'. [ 548.390114][ T29] audit: type=1326 audit(2000000034.270:71267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.390154][ T29] audit: type=1326 audit(2000000034.270:71268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.390318][ T29] audit: type=1326 audit(2000000034.400:71269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=414 comm="syz.2.10210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 548.399308][ T413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 548.594282][ T426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10215'. [ 548.634141][ T426] hsr_slave_0: left promiscuous mode [ 548.642289][ T426] hsr_slave_1: left promiscuous mode [ 548.911899][ T474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10227'. [ 548.921082][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10227'. [ 548.942647][ T474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10227'. [ 548.951818][ T474] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10227'. [ 549.262208][ T529] netlink: 'syz.3.10244': attribute type 13 has an invalid length. [ 549.393178][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10250'. [ 549.534961][ T561] netlink: 'syz.1.10257': attribute type 13 has an invalid length. [ 550.310012][ T634] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 550.316628][ T634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.324498][ T634] vhci_hcd vhci_hcd.0: Device attached [ 550.407880][ T637] vhci_hcd: cannot find the pending unlink 6 [ 551.043297][ T637] vhci_hcd: connection closed [ 551.043787][T16605] vhci_hcd: stop threads [ 551.052891][T16605] vhci_hcd: release socket [ 551.057331][T16605] vhci_hcd: disconnect device [ 552.179006][ T820] bond1: entered promiscuous mode [ 552.184238][ T820] bond1: entered allmulticast mode [ 552.193483][ T820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 552.679039][ T920] netlink: 'syz.1.10374': attribute type 13 has an invalid length. [ 552.909366][ T936] geneve1 speed is unknown, defaulting to 1000 [ 553.218247][ T29] kauditd_printk_skb: 1249 callbacks suppressed [ 553.218263][ T29] audit: type=1326 audit(2000000039.290:72519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.280259][ T29] audit: type=1326 audit(2000000039.330:72520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.304153][ T29] audit: type=1326 audit(2000000039.330:72521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.310081][ T1011] __nla_validate_parse: 22 callbacks suppressed [ 553.310156][ T1011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10399'. [ 553.327952][ T29] audit: type=1326 audit(2000000039.330:72522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.328004][ T29] audit: type=1326 audit(2000000039.330:72523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.391066][ T29] audit: type=1326 audit(2000000039.330:72524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.414967][ T29] audit: type=1326 audit(2000000039.330:72525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.438628][ T29] audit: type=1326 audit(2000000039.330:72526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.462398][ T29] audit: type=1326 audit(2000000039.330:72527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.486365][ T29] audit: type=1326 audit(2000000039.330:72528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1010 comm="syz.2.10399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 553.632107][ T1025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10403'. [ 553.748454][ T1035] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10407'. [ 553.757727][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10407'. [ 553.782012][ T1035] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10407'. [ 553.791611][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10407'. [ 553.822055][ T1038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10408'. [ 553.828494][ T1039] bond1: entered promiscuous mode [ 553.836733][ T1039] bond1: entered allmulticast mode [ 553.886413][ T1039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.002080][ T1083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10413'. [ 554.011980][ T1083] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10413'. [ 554.340680][ T1121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10429'. [ 554.725696][ T1143] netlink: 'syz.0.10438': attribute type 13 has an invalid length. [ 554.790183][ T1145] bond2: entered promiscuous mode [ 554.795515][ T1145] bond2: entered allmulticast mode [ 554.806123][ T1145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 555.259988][ T1223] netlink: 'syz.6.10460': attribute type 13 has an invalid length. [ 555.359569][ T1234] bond3: entered promiscuous mode [ 555.364997][ T1234] bond3: entered allmulticast mode [ 555.375736][ T1234] 8021q: adding VLAN 0 to HW filter on device bond3 [ 555.604529][ T1299] netlink: 'syz.6.10472': attribute type 13 has an invalid length. [ 555.790935][ T1315] bond4: entered promiscuous mode [ 555.796363][ T1315] bond4: entered allmulticast mode [ 555.835119][ T1315] 8021q: adding VLAN 0 to HW filter on device bond4 [ 556.609487][ T1421] bond4: entered promiscuous mode [ 556.614684][ T1421] bond4: entered allmulticast mode [ 556.644964][ T1421] 8021q: adding VLAN 0 to HW filter on device bond4 [ 557.578838][ T1538] bond5: entered promiscuous mode [ 557.584175][ T1538] bond5: entered allmulticast mode [ 557.601001][ T1538] 8021q: adding VLAN 0 to HW filter on device bond5 [ 558.094428][ T1598] netlink: 'syz.3.10548': attribute type 13 has an invalid length. [ 558.251963][ T1614] 9pnet_fd: Insufficient options for proto=fd [ 558.276412][ T1616] syzkaller1: entered promiscuous mode [ 558.282268][ T1616] syzkaller1: entered allmulticast mode [ 558.372263][ T29] kauditd_printk_skb: 516 callbacks suppressed [ 558.372284][ T29] audit: type=1326 audit(2000000044.440:73045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.402175][ T29] audit: type=1326 audit(2000000044.440:73046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.425873][ T29] audit: type=1326 audit(2000000044.440:73047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.450040][ T29] audit: type=1326 audit(2000000044.440:73048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.473942][ T29] audit: type=1326 audit(2000000044.440:73049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.497726][ T29] audit: type=1326 audit(2000000044.440:73050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.521558][ T29] audit: type=1326 audit(2000000044.440:73051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.545340][ T29] audit: type=1326 audit(2000000044.440:73052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.568988][ T29] audit: type=1326 audit(2000000044.440:73053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.592619][ T29] audit: type=1326 audit(2000000044.440:73054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1624 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 558.710038][ T1638] __nla_validate_parse: 40 callbacks suppressed [ 558.710059][ T1638] netlink: 72 bytes leftover after parsing attributes in process `syz.0.10565'. [ 558.768268][ T1642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10567'. [ 558.777465][ T1642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10567'. [ 558.819100][ T1648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10567'. [ 558.828346][ T1648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10567'. [ 559.102830][ T1677] netlink: 'syz.3.10579': attribute type 13 has an invalid length. [ 559.179369][ T1679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10580'. [ 559.295761][ T1698] bond2: entered promiscuous mode [ 559.300859][ T1698] bond2: entered allmulticast mode [ 559.322803][ T1698] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.365655][ T1737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10589'. [ 559.459257][ T1743] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10591'. [ 559.547486][ T1751] syzkaller1: entered promiscuous mode [ 559.553146][ T1751] syzkaller1: entered allmulticast mode [ 559.660267][ T1759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10596'. [ 559.935338][ T1773] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 559.941929][ T1773] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 559.949637][ T1773] vhci_hcd vhci_hcd.0: Device attached [ 559.964654][ T1774] vhci_hcd: cannot find the pending unlink 6 [ 560.192618][ T3550] usb 13-1: new low-speed USB device number 22 using vhci_hcd [ 560.251516][ T1783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10604'. [ 560.323854][ T1774] vhci_hcd: connection reset by peer [ 560.329402][T16604] vhci_hcd: stop threads [ 560.333735][T16604] vhci_hcd: release socket [ 560.338196][T16604] vhci_hcd: disconnect device [ 560.439232][ T1798] syzkaller1: entered promiscuous mode [ 560.445036][ T1798] syzkaller1: entered allmulticast mode [ 560.676420][ T1822] netlink: 'syz.0.10620': attribute type 13 has an invalid length. [ 560.867103][ T1853] bond5: entered promiscuous mode [ 560.872348][ T1853] bond5: entered allmulticast mode [ 560.882104][ T1853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 561.444747][ T1949] netlink: 'syz.1.10655': attribute type 13 has an invalid length. [ 561.566343][ T1961] bond3: entered promiscuous mode [ 561.571447][ T1961] bond3: entered allmulticast mode [ 561.584902][ T1961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 561.936729][ T2044] syzkaller1: entered promiscuous mode [ 561.942298][ T2044] syzkaller1: entered allmulticast mode [ 562.227229][ T2073] bond6: entered promiscuous mode [ 562.232337][ T2073] bond6: entered allmulticast mode [ 562.243436][ T2073] 8021q: adding VLAN 0 to HW filter on device bond6 [ 562.453476][ T2140] netlink: 'syz.0.10704': attribute type 13 has an invalid length. [ 562.527796][ T2141] geneve1 speed is unknown, defaulting to 1000 [ 562.562818][ T2156] syzkaller1: entered promiscuous mode [ 562.568367][ T2156] syzkaller1: entered allmulticast mode [ 562.657157][ T2183] bond2: entered promiscuous mode [ 562.662414][ T2183] bond2: entered allmulticast mode [ 562.668135][ T2183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.950328][ T2256] bond6: entered promiscuous mode [ 562.955467][ T2256] bond6: entered allmulticast mode [ 562.961365][ T2256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.016839][ T2299] syzkaller1: entered promiscuous mode [ 563.022350][ T2299] syzkaller1: entered allmulticast mode [ 563.191433][ T2322] netlink: 'syz.6.10737': attribute type 13 has an invalid length. [ 563.373988][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 563.374007][ T29] audit: type=1326 audit(2000000049.450:73669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.1.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 563.418574][ T29] audit: type=1326 audit(2000000049.450:73670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2355 comm="syz.1.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8676314a5 code=0x7ffc0000 [ 563.442415][ T29] audit: type=1326 audit(2000000049.450:73671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.1.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 563.466125][ T29] audit: type=1326 audit(2000000049.450:73672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.1.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 563.489791][ T29] audit: type=1326 audit(2000000049.450:73673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2349 comm="syz.1.10747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 563.527735][ T29] audit: type=1326 audit(2000000049.490:73674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.2.10750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 563.551602][ T29] audit: type=1326 audit(2000000049.500:73675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.2.10750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 563.575240][ T29] audit: type=1326 audit(2000000049.500:73676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.2.10750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 563.599147][ T29] audit: type=1326 audit(2000000049.500:73677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.2.10750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 563.622939][ T29] audit: type=1326 audit(2000000049.500:73678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2358 comm="syz.2.10750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a333ebe9 code=0x7ffc0000 [ 563.740569][ T2394] __nla_validate_parse: 44 callbacks suppressed [ 563.740584][ T2394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10761'. [ 563.794946][ T2402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10764'. [ 563.804227][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10764'. [ 563.815294][ T2402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10764'. [ 563.824389][ T2402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10764'. [ 563.862878][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10765'. [ 563.891127][ T2404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 563.924509][ T2404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 563.953969][ T2416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10770'. [ 564.104307][ T2447] netlink: 'syz.3.10775': attribute type 13 has an invalid length. [ 564.203468][ T2455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10779'. [ 564.204414][ T2458] syzkaller1: entered promiscuous mode [ 564.212729][ T2455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10779'. [ 564.218186][ T2458] syzkaller1: entered allmulticast mode [ 564.263698][ T2462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10779'. [ 565.278732][ T3550] usb 13-1: enqueue for inactive port 0 [ 565.285355][ T3550] usb 13-1: enqueue for inactive port 0 [ 565.362731][ T3550] vhci_hcd: vhci_device speed not set [ 565.473864][ T2586] syzkaller1: entered promiscuous mode [ 565.479439][ T2586] syzkaller1: entered allmulticast mode [ 566.005371][ T2607] bond6: entered promiscuous mode [ 566.010496][ T2607] bond6: entered allmulticast mode [ 566.035822][ T2607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 566.435455][ T2689] bond4: entered promiscuous mode [ 566.440599][ T2689] bond4: entered allmulticast mode [ 566.447641][ T2689] 8021q: adding VLAN 0 to HW filter on device bond4 [ 566.556488][ T2734] netlink: 'syz.6.10851': attribute type 13 has an invalid length. [ 566.836875][ T2757] geneve1 speed is unknown, defaulting to 1000 [ 566.970048][ T2780] bond7: entered promiscuous mode [ 566.975313][ T2780] bond7: entered allmulticast mode [ 566.981065][ T2780] 8021q: adding VLAN 0 to HW filter on device bond7 [ 568.170010][ T2920] bond8: entered promiscuous mode [ 568.175307][ T2920] bond8: entered allmulticast mode [ 568.201057][ T2920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 568.477192][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 568.477206][ T29] audit: type=1326 audit(2000000054.550:74273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2963 comm="syz.3.10899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 568.523412][ T29] audit: type=1326 audit(2000000054.580:74274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.547615][ T29] audit: type=1326 audit(2000000054.580:74275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.571378][ T29] audit: type=1326 audit(2000000054.580:74276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.595020][ T29] audit: type=1326 audit(2000000054.580:74277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.619001][ T29] audit: type=1326 audit(2000000054.580:74278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.642809][ T29] audit: type=1326 audit(2000000054.580:74279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.666380][ T29] audit: type=1326 audit(2000000054.580:74280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.690192][ T29] audit: type=1326 audit(2000000054.580:74281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.714126][ T29] audit: type=1326 audit(2000000054.580:74282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2972 comm="syz.0.10903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4866ebe9 code=0x7ffc0000 [ 568.764520][ T2983] __nla_validate_parse: 28 callbacks suppressed [ 568.764554][ T2983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10906'. [ 568.780528][ T2983] netlink: 152 bytes leftover after parsing attributes in process `syz.0.10906'. [ 568.822830][ T2985] netlink: 'syz.3.10907': attribute type 13 has an invalid length. [ 568.905696][ T2995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10912'. [ 568.914829][ T2995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10912'. [ 568.956896][ T3007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10912'. [ 568.966092][ T3007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10912'. [ 569.016567][ T3011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10917'. [ 569.067342][ T3020] syzkaller1: entered promiscuous mode [ 569.073012][ T3020] syzkaller1: entered allmulticast mode [ 569.090186][ T3028] netlink: 'syz.0.10921': attribute type 13 has an invalid length. [ 569.142060][ T3034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10923'. [ 569.151745][ T3034] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10923'. [ 569.181738][ T3036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10925'. [ 569.615102][ T3090] bond7: entered promiscuous mode [ 569.616303][ T3129] netlink: 'syz.1.10944': attribute type 13 has an invalid length. [ 569.620295][ T3090] bond7: entered allmulticast mode [ 569.634612][ T3090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.183322][ T3169] geneve1 speed is unknown, defaulting to 1000 [ 570.324930][ T3197] syzkaller1: entered promiscuous mode [ 570.330521][ T3197] syzkaller1: entered allmulticast mode [ 571.601575][ T3288] bridge_slave_0: left allmulticast mode [ 571.607391][ T3288] bridge_slave_0: left promiscuous mode [ 571.613253][ T3288] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.632343][ T3288] bridge_slave_1: left allmulticast mode [ 571.638110][ T3288] bridge_slave_1: left promiscuous mode [ 571.643860][ T3288] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.653602][ T3288] bond0: (slave bond_slave_0): Releasing backup interface [ 571.663536][ T3288] bond0: (slave bond_slave_1): Releasing backup interface [ 571.673100][ T3288] team0: Port device team_slave_0 removed [ 571.679751][ T3288] team0: Port device team_slave_1 removed [ 571.703195][ T3290] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 571.919233][ T3314] netlink: 'syz.2.10999': attribute type 13 has an invalid length. [ 572.257300][ T3352] netlink: 'syz.0.11014': attribute type 13 has an invalid length. [ 572.586179][ T3385] geneve1 speed is unknown, defaulting to 1000 [ 573.255582][ T3462] bond3: entered promiscuous mode [ 573.260699][ T3462] bond3: entered allmulticast mode [ 573.283089][ T3462] 8021q: adding VLAN 0 to HW filter on device bond3 [ 573.409102][ T3512] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 573.502838][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 573.502854][ T29] audit: type=1326 audit(2000000059.580:75071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.547999][ T29] audit: type=1326 audit(2000000059.610:75072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.571746][ T29] audit: type=1326 audit(2000000059.610:75073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.595911][ T29] audit: type=1326 audit(2000000059.610:75074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.619734][ T29] audit: type=1326 audit(2000000059.610:75075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.643755][ T29] audit: type=1326 audit(2000000059.610:75076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.667677][ T29] audit: type=1326 audit(2000000059.610:75077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.691355][ T29] audit: type=1326 audit(2000000059.610:75078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.715133][ T29] audit: type=1326 audit(2000000059.610:75079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.739129][ T29] audit: type=1326 audit(2000000059.610:75080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3524 comm="syz.1.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 573.889132][ T3542] bond7: entered promiscuous mode [ 573.894263][ T3542] bond7: entered allmulticast mode [ 573.909494][ T3542] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.046621][ T3590] __nla_validate_parse: 28 callbacks suppressed [ 574.046649][ T3590] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11058'. [ 574.100105][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11059'. [ 574.148352][ T3582] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 574.211099][ T3598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11061'. [ 574.322120][ T3618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11069'. [ 574.606218][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11077'. [ 574.640264][ T3659] bond8: entered promiscuous mode [ 574.645452][ T3659] bond8: entered allmulticast mode [ 574.660584][ T3659] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.827978][ T3711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11086'. [ 574.865909][ T3718] netlink: 'syz.1.11089': attribute type 13 has an invalid length. [ 574.917608][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11090'. [ 575.007050][ T3731] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11085'. [ 575.016257][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11085'. [ 575.041971][ T3733] bond9: entered promiscuous mode [ 575.047108][ T3733] bond9: entered allmulticast mode [ 575.064094][ T3733] 8021q: adding VLAN 0 to HW filter on device bond9 [ 575.073163][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11085'. [ 575.311090][ T3789] netlink: 'syz.3.11105': attribute type 13 has an invalid length. [ 575.476201][ T3792] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 575.518616][ T3797] bond8: entered promiscuous mode [ 575.523794][ T3797] bond8: entered allmulticast mode [ 575.556043][ T3797] 8021q: adding VLAN 0 to HW filter on device bond8 [ 575.595340][ T3836] bond5: entered promiscuous mode [ 575.600434][ T3836] bond5: entered allmulticast mode [ 575.622755][ T3836] 8021q: adding VLAN 0 to HW filter on device bond5 [ 575.986351][ T3914] bond10: entered promiscuous mode [ 575.991529][ T3914] bond10: entered allmulticast mode [ 575.997215][ T3914] 8021q: adding VLAN 0 to HW filter on device bond10 [ 576.005121][ T3904] geneve1 speed is unknown, defaulting to 1000 [ 576.269115][ T3984] syzkaller1: entered promiscuous mode [ 576.274803][ T3984] syzkaller1: entered allmulticast mode [ 576.454102][ T4003] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 576.460698][ T4003] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 576.468266][ T4003] vhci_hcd vhci_hcd.0: Device attached [ 576.515920][ T4005] vhci_hcd: cannot find the pending unlink 6 [ 576.589585][ T4012] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 576.712886][ T3550] usb 5-1: new low-speed USB device number 31 using vhci_hcd [ 576.764332][ T4034] netlink: 'syz.0.11147': attribute type 13 has an invalid length. [ 576.853308][ T4005] vhci_hcd: connection reset by peer [ 576.862215][T16607] vhci_hcd: stop threads [ 576.866702][T16607] vhci_hcd: release socket [ 576.871148][T16607] vhci_hcd: disconnect device [ 576.909051][ T4045] syzkaller1: entered promiscuous mode [ 576.914788][ T4045] syzkaller1: entered allmulticast mode [ 577.086601][ T4061] geneve1 speed is unknown, defaulting to 1000 [ 577.104299][ T4074] netlink: 'syz.3.11158': attribute type 13 has an invalid length. [ 577.170594][ T4081] netlink: 'syz.3.11161': attribute type 13 has an invalid length. [ 577.708184][ T4139] bond11: entered promiscuous mode [ 577.713452][ T4139] bond11: entered allmulticast mode [ 577.735220][ T4139] 8021q: adding VLAN 0 to HW filter on device bond11 [ 577.750520][ T4178] syzkaller1: entered promiscuous mode [ 577.756362][ T4178] syzkaller1: entered allmulticast mode [ 577.903735][ T4201] netlink: 'syz.3.11181': attribute type 13 has an invalid length. [ 578.036609][ T4226] bond12: entered promiscuous mode [ 578.041770][ T4226] bond12: entered allmulticast mode [ 578.047893][ T4226] 8021q: adding VLAN 0 to HW filter on device bond12 [ 578.172379][ T4273] netlink: 'syz.3.11194': attribute type 13 has an invalid length. [ 578.580730][ T29] kauditd_printk_skb: 997 callbacks suppressed [ 578.580748][ T29] audit: type=1326 audit(2000000064.650:76078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.635982][ T29] audit: type=1326 audit(2000000064.650:76079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.659921][ T29] audit: type=1326 audit(2000000064.650:76080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.663372][ T4315] netlink: 'syz.2.11207': attribute type 13 has an invalid length. [ 578.683632][ T29] audit: type=1326 audit(2000000064.650:76081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.715112][ T29] audit: type=1326 audit(2000000064.650:76082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.738800][ T29] audit: type=1326 audit(2000000064.650:76083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.762602][ T29] audit: type=1326 audit(2000000064.650:76084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.786350][ T29] audit: type=1326 audit(2000000064.650:76085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.810039][ T29] audit: type=1326 audit(2000000064.650:76086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 578.833911][ T29] audit: type=1326 audit(2000000064.650:76087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4308 comm="syz.1.11206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8675febe9 code=0x7ffc0000 [ 579.217130][ T4354] __nla_validate_parse: 14 callbacks suppressed [ 579.217230][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11223'. [ 579.232747][ T4354] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11223'. [ 579.263960][ T4356] geneve1 speed is unknown, defaulting to 1000 [ 579.421926][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11227'. [ 579.508348][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11232'. [ 579.517506][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11232'. [ 579.554561][ T4405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11232'. [ 579.563847][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11232'. [ 580.070721][ T4438] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 580.196751][ T4451] bond13: entered promiscuous mode [ 580.202042][ T4451] bond13: entered allmulticast mode [ 580.207915][ T4451] 8021q: adding VLAN 0 to HW filter on device bond13 [ 580.242114][ T4486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11249'. [ 580.251476][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11249'. [ 580.312025][ T4490] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11249'. [ 580.571778][ T4502] geneve1 speed is unknown, defaulting to 1000 [ 581.753731][ T3550] usb 5-1: enqueue for inactive port 0 [ 581.759801][ T3550] usb 5-1: enqueue for inactive port 0 [ 581.833930][ T3550] vhci_hcd: vhci_device speed not set [ 581.949604][ T4657] geneve1 speed is unknown, defaulting to 1000 [ 582.066362][T16587] bond0 (unregistering): Released all slaves [ 582.076065][T16587] bond1 (unregistering): Released all slaves [ 582.085371][T16587] bond2 (unregistering): Released all slaves [ 582.094662][T16587] bond3 (unregistering): Released all slaves [ 582.103838][T16587] bond4 (unregistering): Released all slaves [ 582.112453][T16587] bond5 (unregistering): Released all slaves [ 582.121392][T16587] bond6 (unregistering): Released all slaves [ 582.131282][T16587] bond7 (unregistering): Released all slaves [ 582.140393][T16587] bond8 (unregistering): Released all slaves [ 582.189218][ T4657] chnl_net:caif_netlink_parms(): no params data found [ 582.333119][ T4657] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.340343][ T4657] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.347946][ T4657] bridge_slave_0: entered allmulticast mode [ 582.354928][ T4657] bridge_slave_0: entered promiscuous mode [ 582.362232][ T4657] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.369452][ T4657] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.376798][ T4657] bridge_slave_1: entered allmulticast mode [ 582.383415][ T4657] bridge_slave_1: entered promiscuous mode [ 582.404855][ T4657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.415577][ T4657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.438879][ T4657] team0: Port device team_slave_0 added [ 582.445991][ T4657] team0: Port device team_slave_1 added [ 582.465165][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.472149][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.498426][ T4657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.510678][ T4657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.517748][ T4657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.543750][ T4657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.622220][ T4657] hsr_slave_0: entered promiscuous mode [ 582.634433][ T4657] hsr_slave_1: entered promiscuous mode [ 582.640614][ T4657] debugfs: 'hsr0' already exists in 'hsr' [ 582.646472][ T4657] Cannot create hsr debugfs directory [ 582.992347][ T4657] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 583.012533][ T4657] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 583.023817][ T4657] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 583.043671][ T4657] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 583.098895][ T4657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 583.122539][ T4657] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.136273][T16604] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.143497][T16604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.175087][T16605] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.182193][T16605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.301924][ T4657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.552012][ T4657] veth0_vlan: entered promiscuous mode [ 583.561592][ T4657] veth1_vlan: entered promiscuous mode [ 583.584987][ T4657] veth0_macvtap: entered promiscuous mode [ 583.613824][ T4657] veth1_macvtap: entered promiscuous mode [ 583.626315][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.645503][ T4657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.657811][T16587] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.673344][T16587] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.691596][T16587] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.719556][T16587] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.752625][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 583.752646][ T29] audit: type=1326 audit(2000000069.820:76674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.783160][ T29] audit: type=1326 audit(2000000069.820:76675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.806809][ T29] audit: type=1326 audit(2000000069.820:76676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.830732][ T29] audit: type=1326 audit(2000000069.820:76677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.854440][ T29] audit: type=1326 audit(2000000069.820:76678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.878400][ T29] audit: type=1326 audit(2000000069.820:76679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.902049][ T29] audit: type=1326 audit(2000000069.820:76680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.925931][ T29] audit: type=1326 audit(2000000069.820:76681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.949618][ T29] audit: type=1326 audit(2000000069.820:76682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.973225][ T29] audit: type=1326 audit(2000000069.820:76683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5112 comm="syz.3.11333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4c3cebe9 code=0x7ffc0000 [ 583.976734][ T5119] bond4: entered promiscuous mode [ 584.002025][ T5119] bond4: entered allmulticast mode [ 584.007937][ T5119] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.195851][ T5175] netlink: 'syz.6.11341': attribute type 13 has an invalid length. [ 584.290924][ T5187] syzkaller1: entered promiscuous mode [ 584.291981][ T5188] __nla_validate_parse: 19 callbacks suppressed [ 584.292001][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11343'. [ 584.296525][ T5187] syzkaller1: entered allmulticast mode [ 584.673026][ T5228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11359'. [ 584.805878][ T5238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11364'. [ 584.815180][ T5238] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11364'. [ 584.887241][ T5250] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11368'. [ 584.971536][ T5258] syzkaller1: entered promiscuous mode [ 584.977254][ T5258] syzkaller1: entered allmulticast mode [ 585.111507][ T5275] syzkaller1: entered promiscuous mode [ 585.117560][ T5275] syzkaller1: entered allmulticast mode [ 585.188965][ T5293] syzkaller1: entered promiscuous mode [ 585.194711][ T5293] syzkaller1: entered allmulticast mode [ 585.343591][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11382'. [ 585.352871][ T5299] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11382'. [ 585.541013][ T5308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 585.547589][ T5308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.555138][ T5308] vhci_hcd vhci_hcd.0: Device attached [ 585.561808][ T5309] vhci_hcd: cannot find the pending unlink 6 [ 585.733409][ T5309] vhci_hcd: connection closed [ 585.733535][T16587] vhci_hcd: stop threads [ 585.742700][T16587] vhci_hcd: release socket [ 585.747175][T16587] vhci_hcd: disconnect device [ 585.802679][ T36] usb 5-1: new low-speed USB device number 32 using vhci_hcd [ 585.810166][ T36] usb 5-1: enqueue for inactive port 0 [ 585.815919][ T36] usb 5-1: enqueue for inactive port 0 [ 585.821391][ T36] usb 5-1: enqueue for inactive port 0 [ 585.881153][ T5314] geneve1 speed is unknown, defaulting to 1000 [ 585.892689][ T36] vhci_hcd: vhci_device speed not set [ 586.048456][ T5357] netlink: 'syz.1.11394': attribute type 13 has an invalid length. [ 586.235641][ T5372] geneve1 speed is unknown, defaulting to 1000 [ 586.459295][ T5405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11402'. [ 586.555315][ T5413] netlink: 'syz.2.11405': attribute type 13 has an invalid length. [ 586.705801][ T5435] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11414'. [ 586.716552][ T5432] bond5: entered promiscuous mode [ 586.721701][ T5432] bond5: entered allmulticast mode [ 586.727386][ T5432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 586.902165][ T5488] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11422'. [ 587.007464][ T5506] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 587.014030][ T5506] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 587.021833][ T5506] vhci_hcd vhci_hcd.0: Device attached [ 587.031073][ T5507] vhci_hcd: cannot find the pending unlink 6 [ 587.116143][ T5516] netlink: 'syz.3.11432': attribute type 13 has an invalid length. [ 587.262662][ T9] usb 3-1: new low-speed USB device number 26 using vhci_hcd [ 587.293036][ T5507] vhci_hcd: connection reset by peer [ 587.298753][T16607] vhci_hcd: stop threads [ 587.303306][T16607] vhci_hcd: release socket [ 587.307869][T16607] vhci_hcd: disconnect device [ 587.337594][ T5542] bond6: entered promiscuous mode [ 587.342946][ T5542] bond6: entered allmulticast mode [ 587.348557][ T5542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 587.395733][ T5581] netlink: 'syz.6.11445': attribute type 13 has an invalid length. [ 587.572348][ T5611] netlink: 'syz.6.11457': attribute type 13 has an invalid length. [ 587.853945][ T5643] netlink: 'syz.6.11469': attribute type 13 has an invalid length. [ 587.887981][ T5647] hsr_slave_0: left promiscuous mode [ 587.894313][ T5647] hsr_slave_1: left promiscuous mode [ 588.297497][ T5685] ================================================================== [ 588.305651][ T5685] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 588.314024][ T5685] [ 588.316370][ T5685] write to 0xffff8881040b255c of 4 bytes by task 28 on cpu 0: [ 588.323931][ T5685] rcu_tasks_trace_pregp_step+0x1ac/0x920 [ 588.329715][ T5685] rcu_tasks_wait_gp+0x8b/0x530 [ 588.334630][ T5685] rcu_tasks_one_gp+0x7f6/0x8e0 [ 588.339511][ T5685] rcu_tasks_kthread+0xf7/0x110 [ 588.344390][ T5685] kthread+0x486/0x510 [ 588.348489][ T5685] ret_from_fork+0xda/0x150 [ 588.353131][ T5685] ret_from_fork_asm+0x1a/0x30 [ 588.358009][ T5685] [ 588.360351][ T5685] read to 0xffff8881040b2100 of 3264 bytes by task 5685 on cpu 1: [ 588.368162][ T5685] memcpy_and_pad+0x48/0x80 [ 588.372702][ T5685] arch_dup_task_struct+0x2c/0x40 [ 588.377833][ T5685] dup_task_struct+0x83/0x6a0 [ 588.382529][ T5685] copy_process+0x399/0x2000 [ 588.387226][ T5685] kernel_clone+0x16c/0x5c0 [ 588.391755][ T5685] __se_sys_clone3+0x1c2/0x200 [ 588.396569][ T5685] __x64_sys_clone3+0x31/0x40 [ 588.401279][ T5685] x64_sys_call+0x1fc9/0x2ff0 [ 588.405977][ T5685] do_syscall_64+0xd2/0x200 [ 588.410509][ T5685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.416425][ T5685] [ 588.418842][ T5685] Reported by Kernel Concurrency Sanitizer on: [ 588.425003][ T5685] CPU: 1 UID: 0 PID: 5685 Comm: syz.3.11486 Tainted: G W 6.16.0-syzkaller-12016-gbec077162bd0 #0 PREEMPT(voluntary) [ 588.438822][ T5685] Tainted: [W]=WARN [ 588.442643][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.452791][ T5685] ================================================================== [ 592.312746][ T9] usb 3-1: enqueue for inactive port 0 [ 592.318273][ T9] usb 3-1: enqueue for inactive port 0 [ 592.402611][ T9] vhci_hcd: vhci_device speed not set