last executing test programs: 7m30.076975065s ago: executing program 32 (id=5417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x10, 0x1ff, 0x2, 0x29d3}, 0x80000006, 0x0, 0xfffffffd, 0x5, 0x5, 0x0, 0x1, 0x5, 0x4, 0x401, {0x101, 0xffffffff, 0x5, 0x0, 0x2, 0x101}}}}]}, 0x78}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56141, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r2, {}, {0xe}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6m45.683623603s ago: executing program 33 (id=6129): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000b10f0000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 4m43.832702534s ago: executing program 34 (id=7174): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x7}, 0x18) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(r3, r3, 0x0) 3m43.310015207s ago: executing program 4 (id=8038): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {0xf}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x680c80, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0xe, 0x6, 0x3}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r5}, 0x18) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000100000001100010000000000000000000100000ada9e815b0f38023faa4527fb099e543437baeb02280894126656e7db30288696e57b38246b143f5efe50418953dc3be287f1a7200fee6b865c76a059364da787aa3931b864457fd9bea681543484c3cb42ca672de04a8489afd82253246bf0d09632a650f7f2140a383bf0b37cebcb92d3"], 0x28}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m43.268397229s ago: executing program 4 (id=8039): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0x100000000}, 0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x1000000}}, 0x18) 3m43.227961121s ago: executing program 4 (id=8040): bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socket(0x28, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0xfffffffffffffffc}, 0x18) 3m42.885421156s ago: executing program 4 (id=8047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x44054) 3m42.806029359s ago: executing program 4 (id=8049): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {0xf}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x680c80, 0x0) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x0, 0xe, 0x6, 0x3}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m42.79791318s ago: executing program 4 (id=8051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) (fail_nth: 3) 3m42.77903015s ago: executing program 35 (id=7889): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) r3 = signalfd(r0, &(0x7f0000000080)={[0x30b6]}, 0x8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0x7, 0xd012}) cachestat(0xffffffffffffffff, &(0x7f0000000280)={0x10011, 0x80}, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @broadcast}, {0x6, @local}, 0x6e, {0x2, 0x4e22, @empty}, 'lo\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000001000050000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x80000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mkdirat(r4, &(0x7f0000000180)='./bus\x00', 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r10}, 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3m39.061409901s ago: executing program 36 (id=7952): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000000640), 0xfe, 0x4f7, &(0x7f0000001000)="$eJzs3UFvG1kdAPD/TOzdps3iLHBYVmJ3xS5KKqiTbOhuxKGAhOBUCSj3EhI3iuLEVeK0TVRBKj4AEkKAxAVOXJD4AEioHwEhVYI7AgRC0MKBQ2GQ7XFIUztxVMdm7d9Pepl5M2/8fy+jeZ43M/IEMLbeiojZiMiyLLscEaV8eZqnOGilRrknj++vNFISWXbjb0kk+bL2Z72cTy/lm12IiK99OeKbyfNxd/b2N5ar1cp2np+rbyZPs2z/yvrm8lplrbK1uLjw3tL7S1eX5vvSzumIuPbFP/3guz/70rVfffru72/+ZfZbrQa2HG1HP7WaXmz+L9oKEbF9HsGGpNBsYcvVIdcFAICTNc73PxwRn4iIy1GKiebZHAAAADBKss9NxdOkdf8PAAAAGE1pRExFkpbz532nIk3L5dYzvB+Ni2m1tlP/VFY6vF4wHcX01nq1Mp8/OzAdxaSRX8ifsW3n3z2WX4yIVyPi+6XJZr68UquuDvXKBwAAAIyPS8fG//8stcb/AAAAwIiZHnYFAAAAgHNn/A8AAACjz/gfAAAARtpXrl9vpKz9/uvVO3u7G7U7V1YrOxvlzd2V8kpt+3Z5rVZba/5m3+Zpn1et1W5/JrZ2783VKzv1uZ29/Zubtd2t+s31Z16BDQAAAAzQq28+/F0SEQefnUwjIkuOrCtGZBNHCxcGXz/g/KRnKfzH86sHMHgTvRRKzr8ewOA5pYfxVRx2BYChO60f6Prwzq/7XxcAAOB8zHzs8P5/MzW8lK9z2R9GW37/P3Gsw/jp6f4/MJLc/4PxVTzpDMCgAEZe2sOh/uL3/7PsTJUCAAD6bqqZkrScjwOmIk3L5YhXmq8FKCa31quV+Yj4UET8tlR8uZFfaG6ZuDwAAAAAAAAAAAAAAAAAAAAAAAAAAD3KsiSyLiYPywAAAAAfZBHpn5P8/V8zpXemjl8feCn5V6k5jYi7P77xw3vL9fr2QmP53w+X13+UL3930FcvAAAAgE7a4/T2OB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+unJ4/sr7TTIuH/9QkRMd4pfiAvN6YUoRsTFfyRROLJdEhETfYh/8CAiXusUP2lUK6bzWhyPn0bE5JDjX+pDfBhnDxv9z+c7HX9pvNWcdj7+Cnl6Ud37v/Sw/5vo0v+90ukD0+cXvf7oF3Nd4z+IeL3Quf9px0+6xH+7xzZ+4+v7+93WZT+NmOn4/ZM8E2suKdye29nbv7K+ubxWWatsLS4uvLf0/tLVpfm5W+vVSv63Y4zvffyX/zmp/Re7xJ8+pf3v9Nj+fz+69/gjrdnisVXF+EmWzb7def+/1iV++7vvk/nubuRn2vMHrfmj3vj5b95484T2r3Zp/2n7f7bH9l/+6nf+0GNRAGAAdvb2N5ar1cr22WaSiIMX2NzMeM1MxgCDLsdJZdonsQOoz7fzUP8Xu+DMM8PrkwAAgPPxv5P+YdcEAAAAAAAAAAAAAAAAAAAAxtdpPwMWffg5seMxD4bTVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAE/03AAD//yLgyFg=") 3m38.047519845s ago: executing program 37 (id=7963): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 3m30.254384791s ago: executing program 8 (id=8148): bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x2, r2, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x14) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x3ff}, 0x1c) 3m30.145699816s ago: executing program 8 (id=8150): r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, '\x00'}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000280)={{0x0, 0x0, 0x0, 0x0, r1, 0x80, 0x8010}, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r4}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") r5 = syz_clone(0x80100000, &(0x7f0000001b40)="e47f9dbcbfaeb1c2857889d3b69cb8b7d87e7974a03c4623b0c5360a2fbd7793c45795548eaf0ff144704f43f5a71ccd148546f009468bed2534fa760d11d56029f06fc078f45b3f28a6864d4fe63acf7794f144f81ba0e1d0d520824cc2496e292a4a81bd25e19d02125c5a5bfbadfc961fc8ec98a9cfe705720a5381b5788232f1b43f8020ce4c9d171b06312211e8233ae48f77be4a3a0a36451b681728618024e09b6ea38a0807102915dbd47620505ba89a481ae16706a066f0926fd433c73373b65a4987fd83c64d79563fd3ae9ae2f7535cb35f1864a3", 0xda, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="94e66b45731a164a7db094925fbda49ea72e652a390b41eeabce258a243841ed016b567fe3d061d7b61d9af240bd2aed74d65a56d25691492362fc7d371e5a710f7b89e759aa3a33e182e5ab0145c06a7887da166e6c0a69e7c2411aca656a48f330fab75a7fb451e603f535b85da67d57ab1d5810c8f2b5a591bbf268") fstat(r0, &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_pidfd_open(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000003c0)="e1642d6050008a577536083009945a2a2f19eedf1e81be06ffbbbdccc72d8b7a7f4552f288f8102423cbe9d7b4125d6eb55d0d349ca0e7bb33b05d27f98c6fbdb047870ed6917dc75ce1b0a027106dae16a5449701ea964040f94ee28baa2069fc7420b5604462ca1969e9d58903851d46a9a5c96f35d8ebe4f93ec36ef7fc10ac4e2a62d0259ddae55134e22c", 0x8d}, {&(0x7f0000000480)="c55c16f83110fc11063f9e5e44452272a49ccb20a4005e515b69b96198a1e38534c5c8ebe6ab54327c2921f6bfc4c49e8f23073c11b2b48888bf3545bc6f679cb28e969d171d3ec699c506a976a7ecfe529a8d9272504ff4cb1de854ef91f180e12a4b668afee1f77d3456be9aec836f5fa1a53154612788903bcafdd5a3593f194d9908c9b1f2fdedc9528e7e9c630d81e0403090922bee4467ffb9531cd0d738198056fed05b229f6a275b68af9ae1fb43455da808f1c9c0e63a30c3e00b4da9f7040cdfe022731e4a000741bdf170098c25b9363cad2a14d786d23a2ef58a", 0xe0}, {&(0x7f0000000580)="cfe393339127064030095f1aadc04052517f472597999433934c740399877c14c80bfb5d8aab950a987a2dd162ff48cd229cd511666d755e1eaf78cd4c183a98e0e0f0dba87839b79a36c9db8f3258a3ff5046cb5dec3f135d1f9fc4a86508eca38453b4fc83e4f6754a899659a6ceb2a60b06657a82a6c8fb75391caad2920c2b95651ae0427f06a816d73a1c6fdde6f9ffcc9e5818a6561ebe7bb0052038359a7ca5bce2f7be2b2e6a223526e9f2a1404cd0f4443e9c8b299659b9fd01a27f3d28e01e5c17750e9e2e2399ced2266fd0a614f4ac653bf3dae15fbce97fb21382098d269c934316fbcd226eedb2d658550d6a38", 0xf4}, {&(0x7f0000000680)="7b0a9b9ce7208af76b443af443ace6d2a44e00c5a874cf308b7dc8f4b7575c11ddf54267cdd0", 0x26}, {&(0x7f00000006c0)="eef166035848f7bc2d1fbb32b3e00f8aea5989c3b96b5b3631a9e7dce70843e0cf0c3315515fbb58e9c8cfe2cac138f0f82543baf412610f419ebbe62139d72113352932b0572a0281541bb070f6906abdc8212d9a4eb8c62363e56a5cb6bdc7e3b708186cba21050c4197abc1469db3b02cf3b7", 0x74}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000000740)="00e66b1b629da83b9dcac07aa45199", 0xf}, {&(0x7f0000000780)="7aeaca9db2ac11d3ea99948cc1867f1c56017a2176806d684bfac747d850f532c7fd8ee323329c7163e2ad9de546217491dfde74f007e383ed444308e7b754baf992f685db3e917682d2b1fd11fd72f337a1a2da913ab42c77c4d299ccd334", 0x5f}, {&(0x7f0000000800)="df3df604648aef112d05eee74776508f9d16", 0x12}, {&(0x7f0000000840)="57403a44692922790fccce7c6b409d856552e8cc882c282f5418a729c2c4", 0x1e}], 0xa, &(0x7f0000000b80)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4000100}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000c40)="3ef8ef8b6088abf63cb61a99f07817b0d56a9b74282e4fc66cb8200231d18c1b40fd1a53f05b66d9af9fe89e1da6a1729d8c693c63f4186beb8f8364446af961e92b590053a6035725dcdad2954f3c37ad10ecd97160fc11876f47cc63d3bb89a6389eb7384aa6af76a4e25c2c219998abf53a5cd3deaa1444b440e47d490c5c2437d9b0930e6ef50d119c472958253bcc90304dd4c80bb770b653c7e7e7e2955110c2d558c873b0acc7fe2740d01774bbb36481f03d042e51e7f064c983ab4325a26c2c2e746fe3b8506fd4250c60ba127ba45f35f8c66f76eb38b71f7c85845aab75d290", 0xe5}, {&(0x7f0000000e40)="d20c54b51406cb32ccc8016fe07098b8c479498e147774b1c3321e839a1f8454c3d58d3729c4bc1128dd71c466e7be2beda60819f0440023bd1419a75ea793e56b0afebc7c99b373beabb652f99415bb7fc9f5ce49f3ca89", 0x58}, {&(0x7f0000000ec0)="ce20d9be418dba6288a867d708551137c18ae5d7695cd5424afb08f767585ee7c3864070fcf8f28baa6a0c0f595466b24208d145b60ef18fadfadfcdab6c958ecee9946529319ab5bb05f3c979c47032a1f86b5e6427d50f2b2b4d8bc1ac3073ddeab90f2d2c0196323bd7eec6183e5505de407fc86ba659f4ac1b0fa8eb3e85167f013a77228988933e5bbe60709d673fc5fb48a45633634e111b10c544028cd16424df0ee6c67bd6", 0xa9}, {&(0x7f0000000f80)="a4db9ae6ba3bb9ba52679edbd12154a451981fb1cef70d99c70ddd217351d917f0772d2d8cbee6088256530319ccc33a5e00886c2093352d40e102774ede42f143b6a3c47fe7e28443dec1b7a315e69c31b072bcc38424e6517700dd89dfb73ba9ae01c92e1e8d76ba102dbba973eb4c1500459c984936dc141f766e32c312b8cdd2f4d20ff1d607ddb518f5bd7bf7274f566fb9a39e6eabf456f78fac549c516b38d5d1f2c302ff50b9b5fffa25ff55b3a41d708648fbc2844002a7a47a688438d19909e53ee6cb969c73cefa06f76195ffb6f68d5084eff66d4e03861646b3", 0xe0}, {&(0x7f0000000d40)="9a58f529167f2c626d06dc4bb7e297494efa4d34f056b5f37b8da73657dd567450619a70dc", 0x25}], 0x5, 0x0, 0x0, 0x40000}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000dc0)="82ae6a671966c51ba138c95f04fda1a10bfc3cebaefd41ebf6fc1c3d92e3595c002dcac1d3c52729252d7e4dd9a4e8a2195aa5a42c1ab996cb63c64bef2c75", 0x3f}, {&(0x7f0000001100)="3b564f3377cbaae01969f9b2e19d331dddabcbc18ff2005468ffdbcd84644ea2e13a8f9d65e46e30fc75f2710a03800762caba278f5e77c43676e2eb9b30b785bc73e7b3d571562e6ae5fb0dc1b338b42a2abe4bc5d9a01e256190e1a4f1cc81438d0b1b3da861fc07abc4dcdffa6b1f651f5a834da2ac72d0dd96b85c9025aee3c489281e39061550b6fbb1f9ff5f963bfee7fcfcfe65e3f21f502df483ed5a53471ae11d73f9a6c57b53caeb4665ac98182bc41ea7da32f7030dc9523a1b", 0xbf}, {&(0x7f00000011c0)="515b6cc93aac77c0", 0x8}, {&(0x7f0000001200)="4e7f0277d60d725b7236b1e1b59d891420a346745e7437908046b55c8cdafa221e5748d121f53614394536f3c24f66764cc6f8688b6aa7f087a9ac07a2e5d6e7b00ed112a3f42a0498204e32b188ab80d9abcde4ea88ec34e0cc1744df2c0959424b5725388d93b732a8a98efcfe5f929d38ae4844cc31766ea16807ed19a76b83133bc99b349e57ea58f3601b58b7d046d81e05a12a9cd4a590dcc7d4625a10c27f433b", 0xa4}, {&(0x7f00000012c0)="c4b194ae1108f06175283147348495c8b610b56540a2d169c84e672c8b99dd7ee699302e64a725b555986e0b8a92f576a9509ab64f2af5221fb785edaa0dfd1adc43724e596999c35033422831d91bd268990f5e6ac99d17ae9021e6403a7c205672c19b4177776897f4d36ff8e42511f871b9ea6c80da38e2094ab9c5a0c0e23d6dccfe97f4d629f46f52489e871570c4bb6f9c1349369fc711bda2482dc5f809ae3951debc405515695f79392b0aba46a6d1eaae36ae294c8bd5e7b893e8cad82bdde854d7", 0xc6}, {&(0x7f00000013c0)="5a701518f8feb5bcdd6027f668a1e601abf8dd52755e85c841d267b4f71a8efc82434f9119ceab6a01cb715d5ace39550464b5c9d062ba8fd5f9f8dba3a2e6be5e65617ecaf020ab33e19023037afa64f6309312eeac25272dd5ebdb228e6d9a7fd423a0734c", 0x66}, {&(0x7f0000001440)="c89a1360b4e7688d4c983549debb504a6ec018e00c9913ec38c97ab5283ac23e4079f91d4678bebc53a7478b5c6875150bdf3c0182f9a8d43f05abca63", 0x3d}, {&(0x7f0000001480)="8811513c287067f78a0f6edfe0210f5e55ab0abdadcebcd0639e01e082de5537139179ebbec1705a1beb61ca4b34189eed67a0211388dae3bb5aab998831c2435ab01150c5e4a4956bd64f479e652c7c57b39f4cc0c249efd14a452c", 0x5c}, {&(0x7f00000015c0)="1fe039752fd2e5a4bea342370d2f12ee011353e945ce1832c8a46068bd1c4e0d71edda099acd013f0b5455f28643d2448b50fd23e5054e1201d148a052bd969a5bed3ed807adfb2909b68a", 0x4b}], 0x9, &(0x7f0000001780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0, r0]}}], 0x48, 0x810}}, {{&(0x7f0000001800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000003180)="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", 0x1000}, {&(0x7f0000001880)="2a6c0575733c8269980329e84aecb0e95bc91ba11f77fc4998b2ee7948cca4ad42bbaa5df802968d602d20d9f87e741a828cd7e3d0e897add2efa53550132886dd98b2699cceca9f57eaf694a6bdccd1c5e586eedfe67fd5fdf14f0732a07956fa9fe2fb598be684b7a20ed9a6d19c0fc18769885a6bdec5e80e3e4cc7d65e2c58edd847b68af3b2f596b76adf029a7a5789b0990d6336a5b5f2a3e2184c495504eaaa68456c121c0a98b409db37f96dd3805b3e4aa5716f81e6dc4bba1c3ed03554d9b14976df3d72af77e85049edf6e0d9ee6003220852010e315c91641e", 0xdf}, {&(0x7f0000001980)="1532032de442a8a066239c268ef5ce6f5057ad6ee3a36b2e9329e9a21121882af8a10de36fc75a5e6718943e07b74c90c70af087ca685a779b4cfc0710f3218a8a7a23315fca0761547c1bea109906a7453b2f30dfb6cf14c30ffd87481324f3269ad7ad310465de6f1b2c7b76f902ae912115e7d3d9b097718a4c7ef5c71c0468eb432bdcdcd65f5d15d075d5fa7b1a3e68de03f2ea5048be5aa33abb79daa27ee5de803bee2e92b3b4c91733f82d3f0b6a8d2a8622a92c4d067df698b7952c09b44e2fcd80408590fda709580289bcaf951a4f4c1273a71cd55b38ef13e02c5235", 0xe2}], 0x3, &(0x7f0000001dc0)=[@rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, 0xffffffffffffffff]}}], 0xb8, 0x20000000}}], 0x4, 0x40040) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f00000000c0)) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) timer_delete(r9) mount$9p_rdma(0x0, &(0x7f0000001540)='.\x00', &(0x7f0000001580), 0x0, &(0x7f0000001680)=ANY=[@ANYBLOB='trans=r']) r11 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r11, 0xb5}, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)="e2070f6ebda166b485c0c634b3b73cd9d965f8e7660ddbd94264aac18758769f8a66a3fe91f4db1370e88b82c3c355a6af6c85307adbb0b2b6588a9f7c5ffb1e1ee96edc77ad755d84805fa686f61015dc779e31c57c84b84cca156a7a2e453befee2e9a3d5f5f2406477359712fa36bdeb39567276e95669232a2d65f5be06331f03653c5001819245c9ed4741ec534bc92649d0a46f4b91e639e3c73535cc136c720fa82778be3867405f71f5770725f25547895", 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m29.317818472s ago: executing program 8 (id=8155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x63a2, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x2043, 0x0, 0x0) 3m29.283262913s ago: executing program 8 (id=8156): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmmsg$unix(r0, &(0x7f0000012fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="cfa5af52f9470cd9", 0xff58}], 0x1, 0x0, 0x0, 0x40000}}], 0x1, 0x24004005) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000000000000000130000001c0009"], 0x30}}, 0x0) 3m29.187614647s ago: executing program 8 (id=8157): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x0, 0x1}, {}, {0x3}, {0xf}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x680c80, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m29.187270907s ago: executing program 8 (id=8158): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xd, 0x8, 0x1, 0x9, 0x6}}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) 3m27.755427979s ago: executing program 38 (id=8051): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) (fail_nth: 3) 3m24.383103444s ago: executing program 9 (id=8208): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x70bd2a, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3m24.326154387s ago: executing program 9 (id=8210): r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x53f, &(0x7f0000000440)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000200000000950000000000000080673e4b23598158bbf8672ce8aaf4549744a2fa59f5651b089ff01b4027f237ca4a4436af98aa7bb3e8beca2e8c2079ef2cba2d1a740a485272ce7169939ae7f8f06617866d9b385e63d10a00000024f01a1d836ec323ed65f56b26dd6bbf9a3fb0577de8d2f83715bcfbcc3bf1a5f3df60d2f4c98ae5"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() setrlimit(0xc, &(0x7f0000000280)={0x9, 0x1}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='dctcp\x00', 0xfda5) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000980)=""/94, 0x112000, 0x1000, 0x9, 0x3}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) syz_clone(0x9d241a80, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000ffe000/0x1000)=nil], &(0x7f0000001300)=[0x2], 0x0, 0x2) unshare(0x18030c00) r8 = socket$inet_sctp(0x2, 0x1, 0x84) r9 = socket$kcm(0x10, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000580)={{0x3c, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@multicast1, 0x4e20, 0x2, 0x0, 0x80012d58, 0x12d59}}, 0x44) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f0000000180)) 3m23.422678886s ago: executing program 9 (id=8218): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7fffffffffffffff) 3m23.306011081s ago: executing program 9 (id=8220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000540)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, 0x0, 0x0) close_range(r2, r2, 0x0) 3m23.305481201s ago: executing program 9 (id=8221): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3m23.258062193s ago: executing program 9 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000b10f0000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 3m14.165730326s ago: executing program 39 (id=8158): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0xd, 0x8, 0x1, 0x9, 0x6}}}, @NHA_ID={0x8, 0x6, 0x1}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x240048c0) 2m17.580495219s ago: executing program 40 (id=8223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000b10f0000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000600)=[{{0x0, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x40}], 0x1, 0x2, 0x0) 2m11.31396756s ago: executing program 3 (id=8424): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = inotify_init() r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind(r4, &(0x7f00000000c0)=@can={0x1d, r5}, 0x80) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect(r6, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x80) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6(0xa, 0x0, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20010000) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 2m10.906591287s ago: executing program 3 (id=8427): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$inet6(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x288}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f0000000180), 0x1, 0x451, &(0x7f0000000780)="$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") (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10) (async) chdir(&(0x7f00000002c0)='./file0\x00') (async) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) (async) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r8, r9+10000000}) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000bfff0100060000000500040000000000090002007379723100000000050005000a00000011000300686173683a69702c706ff4b546727400"], 0x4c}}, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000f4d3c50c74cafbb48a0cbb060004400e1f0000050007008800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x16, @private=0xa010102, 0x4e21, 0x3, 'none\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc0100) ioctl$SNDRV_TIMER_IOCTL_INFO(r12, 0x80e85411, &(0x7f00000005c0)) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r11, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(r11, 0x1) 2m10.906398697s ago: executing program 3 (id=8428): syz_io_uring_setup(0x64d, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000780)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 2m10.659570578s ago: executing program 3 (id=8434): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="70010000100033060000000000000000e0000001000000000000000000000000ac1414aa000000000000000000000000ffff400000007fff0000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414fd000000000000000000000000000004d432000000fe80000000000000000000000000000b23030000000000000000000100000000000000000000000003000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000000000000a0000000100000000000000480002"], 0x170}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000000640)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast1, @in=@broadcast, 0x4e20, 0x101, 0x4e21, 0x8, 0xa, 0x0, 0x20, 0xf, r3, r4}, {0x800, 0x3ff, 0xfffffffffffffffc, 0x4, 0x4, 0x5, 0x4, 0x8000000000000000}, {0x1, 0x1, 0x925, 0xa}, 0x4d5, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, {{@in=@local, 0x4d6, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3502, 0x1, 0x1, 0x2, 0x8, 0x330b, 0x1}}, 0xe8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000400)="aa", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x2, 0x3f66400, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r9, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000000900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000018c46afd73dfe5a08b366b599e2d0869919b170a"], &(0x7f0000001480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='file_check_and_advance_wb_err\x00', r11, 0x0, 0x54c}, 0x79) r12 = socket$igmp(0x2, 0x3, 0x2) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_INIT(r12, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f00000004c0)={0x1, 0x4, 0x3, 0x0, @vifc_lcl_ifindex, @rand_addr=0x64010101}, 0x10) dup2(r13, r12) 2m10.051340945s ago: executing program 3 (id=8451): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m9.975256478s ago: executing program 3 (id=8452): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) memfd_secret(0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000fcff00b7080000000000007b8af8ff00000000bfa2000000ffb703000008000000b704000000000000850000000100000095500c9339c7ef63e911e5b8802949a550b78c67d0f6bdbef7f2833fb66f40ca222e15e7def52a049b4d555d5188da962f05cd1c82342bee4792b927"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nolazytime}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@nolazytime}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x1000) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000280)={0x4, 0x40000, 0x810000, 0xfffffffd}) 2m9.189936611s ago: executing program 7 (id=8465): socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x70bd2a, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2m9.051519238s ago: executing program 7 (id=8469): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000) 2m9.016613639s ago: executing program 7 (id=8472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r1}, 0x18) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m8.98464177s ago: executing program 7 (id=8474): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, &(0x7f00000002c0)=ANY=[], 0x1, 0x28e, &(0x7f0000000740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x841) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m8.823769047s ago: executing program 7 (id=8476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 2m8.823345837s ago: executing program 7 (id=8477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 1m54.901389328s ago: executing program 41 (id=8452): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x8010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) memfd_secret(0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000fcff00b7080000000000007b8af8ff00000000bfa2000000ffb703000008000000b704000000000000850000000100000095500c9339c7ef63e911e5b8802949a550b78c67d0f6bdbef7f2833fb66f40ca222e15e7def52a049b4d555d5188da962f05cd1c82342bee4792b927"], &(0x7f0000000240)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x10) lsm_set_self_attr(0x69, 0x0, 0x20, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000000800000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@nolazytime}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@nolazytime}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r9, 0x1000) capset(&(0x7f0000000000)={0x19980330, r3}, &(0x7f0000000280)={0x4, 0x40000, 0x810000, 0xfffffffd}) 1m53.775288217s ago: executing program 42 (id=8477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 2.060882511s ago: executing program 0 (id=11808): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f00000007c0)) mkdirat(0xffffffffffffff9c, 0x0, 0xe1) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) 1.942876856s ago: executing program 0 (id=11811): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket(0xa, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000e00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f000000bb00)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0xfefe, 0x807, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0xfffffffd, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000080)={0x10, 0x17, 0xfa00, {0x0, 0x14, {0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, r6}}, 0x38) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x1, {0xa, 0x4e21, 0xdb, @remote, 0x8}, r6}}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x4206, r8) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 1.37783966s ago: executing program 2 (id=11826): io_uring_setup(0x7f59, &(0x7f0000000300)={0x0, 0xb13e, 0x1000, 0x0, 0x197}) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 1.344769262s ago: executing program 2 (id=11827): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203060910"], 0x80}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r2, &(0x7f0000000240)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r5, 0x11, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r5, 0x0, 0x40840) close_range(r3, 0xffffffffffffffff, 0x0) 1.060026634s ago: executing program 0 (id=11831): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x38}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x32, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xc68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x6, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x5, 0x2060005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x8, 0x4}, {0x7e, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000080)=0x2e9aa845) 996.394067ms ago: executing program 5 (id=11832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) futimesat(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000003d8500000000004421d25b4d5e117fd15ebdb4f9bd54ea466587d03bc6b31ff0fee35dee7a2f7da4ff158e263ff8e31175f91c6f49de63cc7974e0959a0b28c198bc9dd2c27b61b4e6ac6cacae4bc9d0bc1090eacad9b9e4db", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0xd7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r7, @ANYBLOB="bf4400000000000000000c"], 0x2ac}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000240)={'pimreg0\x00', 0x7c2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x1, 0x81}, {0x61}, {0x6}]}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x18) r12 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) getpeername(r12, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x80) read(r5, &(0x7f0000000340)=""/164, 0xa4) 941.046299ms ago: executing program 0 (id=11833): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x5) sendto$inet6(r0, &(0x7f0000000240)="e6", 0x1, 0x1, 0x0, 0x0) 906.482831ms ago: executing program 5 (id=11836): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') unshare(0x400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 852.138213ms ago: executing program 5 (id=11837): r0 = socket(0x2, 0x3, 0x67) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 851.945203ms ago: executing program 5 (id=11839): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000600000000000000030000840901000004000000040000000100000000000000000000000400000004000000000000005d000000003000002e"], 0x0, 0x4e, 0x0, 0x8}, 0x28) 851.646903ms ago: executing program 5 (id=11842): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0x909}, {0x2}], 0x2) semctl$GETZCNT(0x0, 0x3, 0xf, 0x0) 758.002447ms ago: executing program 1 (id=11848): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000150001034083562fa3cd361005"], 0x14}}, 0x0) 689.779311ms ago: executing program 1 (id=11849): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) 689.6358ms ago: executing program 1 (id=11850): syz_clone(0xfa9d3f858507c37b, 0x0, 0x0, 0x0, 0x0, 0x0) 689.49604ms ago: executing program 1 (id=11851): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0xfd, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="000456"], 0x0, 0x0, 0x0, 0x0}, 0x0) 491.878149ms ago: executing program 2 (id=11852): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040002}, 0x80) 471.81331ms ago: executing program 2 (id=11853): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x5437, 0x0) 418.115762ms ago: executing program 2 (id=11854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f00000001c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x68, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x40, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x7ffffffe, 0xfbc}, @nop, @exp_smc, @fastopen={0x22, 0xa, "7856f5b175fb699d"}, @exp_fastopen={0xfe, 0x11, 0xf989, "444e38caa511b9096239c28c18"}, @exp_fastopen={0xfe, 0x4}, @md5sig={0x13, 0xa, "0c39e122bd2f7556512830127a3fa7b7"}]}}}}}}}, 0x0) 417.914922ms ago: executing program 2 (id=11855): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff00000502", @ANYRES8=r0], 0x0) 168.012773ms ago: executing program 1 (id=11861): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r1, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) 167.913023ms ago: executing program 6 (id=11862): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32=r1, @ANYBLOB="08000a0090"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 140.379424ms ago: executing program 1 (id=11863): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x2809}], 0x1, 0x0, 0x0, 0x9c) 140.239634ms ago: executing program 6 (id=11864): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000000000001000084000000000000000001"], 0x0, 0x3e}, 0x28) 140.093374ms ago: executing program 6 (id=11865): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 113.719035ms ago: executing program 6 (id=11866): socket$netlink(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0xfcc3}) r1 = socket(0xa, 0x3, 0x3a) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$inet6(r2, &(0x7f0000002d40)={0xa, 0x4e23, 0x1, @private0, 0x6}, 0x1c) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="674466980100000000000400040000006d32ba03985140bbde9368624676db68516c87343ce088e4353705c784de7facd78deadfc649c2b517f8d531ca430100db58ee83e2d5e09f766813bd2ba80458ea2146ec47ee8c4802000e8b71f15a11e030f882d2557dc8c7ae60658afa99e96cca3a68fc27ebb35ecd9a1ea725188558f3e943a503c939108de9bea8562d96b9454a96f0ffb4af22c3880888914cc3c5336044ae72c42433e0bee9f62f47734cb86d50a26d80e391e8b862d9bbccf36fb107dda6f5e1cd4ad70e000000"], 0xce) socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x80}, {0x94, 0x0, 0x0, 0xffffff81}, {0x6}]}, 0x10) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000240)=0x2, 0x4) 113.080655ms ago: executing program 6 (id=11867): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000225c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000022540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200, 0x8d0, 0xfff, 0x401, 0x5, 0x9, 0x0, 0x401, 0x9}}}}]}, 0x58}}, 0x0) 46.052578ms ago: executing program 0 (id=11868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x7, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x408dc}, 0x4000080) 45.859448ms ago: executing program 6 (id=11869): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000080), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 28.889609ms ago: executing program 0 (id=11870): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x80) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 0s ago: executing program 5 (id=11871): syz_clone3(&(0x7f0000000380)={0x1181700, &(0x7f0000000000), 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x799, 0x1, 0x0, 0x4, 0x0, 0x5, 0x2}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x20003}, 0x0, 0x0) kernel console output (not intermixed with test programs): ck_lvl+0xe8/0x140 [ 631.826929][ T4380] dump_stack+0x15/0x1b [ 631.826950][ T4380] should_fail_ex+0x265/0x280 [ 631.827021][ T4380] should_failslab+0x8c/0xb0 [ 631.827044][ T4380] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 631.827066][ T4380] ? __alloc_skb+0x324/0x4d0 [ 631.827119][ T4380] __alloc_skb+0x324/0x4d0 [ 631.827142][ T4380] ? __alloc_skb+0x24d/0x4d0 [ 631.827166][ T4380] netlink_alloc_large_skb+0xbf/0xf0 [ 631.827194][ T4380] netlink_sendmsg+0x3cf/0x6b0 [ 631.827301][ T4380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.827332][ T4380] __sock_sendmsg+0x145/0x180 [ 631.827352][ T4380] ____sys_sendmsg+0x31e/0x4a0 [ 631.827388][ T4380] ___sys_sendmsg+0x17b/0x1d0 [ 631.827426][ T4380] __x64_sys_sendmsg+0xd4/0x160 [ 631.827452][ T4380] x64_sys_call+0x17ba/0x3000 [ 631.827498][ T4380] do_syscall_64+0xd8/0x2a0 [ 631.827581][ T4380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.827604][ T4380] RIP: 0033:0x7f35a999f749 [ 631.827621][ T4380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.827641][ T4380] RSP: 002b:00007f35a83ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.827662][ T4380] RAX: ffffffffffffffda RBX: 00007f35a9bf5fa0 RCX: 00007f35a999f749 [ 631.827710][ T4380] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000004 [ 631.827723][ T4380] RBP: 00007f35a83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 631.827737][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.827750][ T4380] R13: 00007f35a9bf6038 R14: 00007f35a9bf5fa0 R15: 00007ffd73910bc8 [ 631.827800][ T4380] [ 631.830459][ T4384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10591'. [ 631.897940][ T4392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10595'. [ 631.899748][ T4384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10591'. [ 632.007804][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10598'. [ 632.066906][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.082806][ T4396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.098155][ T4398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10596'. [ 632.234154][ T4424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10607'. [ 632.276242][ T4436] loop0: detected capacity change from 0 to 512 [ 632.287210][ T4436] EXT4-fs: dax option not supported [ 632.330532][ T4436] 9p: Could not find request transport: r [ 632.365345][ T4448] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 632.373061][ T4448] SELinux: failed to load policy [ 632.576099][ T4484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54601 sclass=netlink_route_socket pid=4484 comm=syz.1.10619 [ 632.589323][ T4483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54601 sclass=netlink_route_socket pid=4483 comm=syz.1.10619 [ 632.616792][ T4488] loop0: detected capacity change from 0 to 512 [ 632.622957][ T3084] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.632889][ T3084] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.650019][ T4488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 632.653069][ T4495] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 632.658844][ T4488] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.666634][ T4495] SELinux: failed to load policy [ 632.702744][ T4492] loop1: detected capacity change from 0 to 512 [ 632.713932][ T4488] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10615: Allocating blocks 41-42 which overlap fs metadata [ 632.718503][ T4492] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 632.729727][ T4488] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.10615: Allocating blocks 41-42 which overlap fs metadata [ 632.752618][ T4492] EXT4-fs (loop1): 1 truncate cleaned up [ 632.753114][ T4488] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.10615: Failed to acquire dquot type 1 [ 632.764561][ T4492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.774745][ T4488] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 632.783109][ T3084] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.797860][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10615: corrupted inode contents [ 632.805836][ T3084] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.818649][ T4488] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.10615: mark_inode_dirty error [ 632.839582][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10615: corrupted inode contents [ 632.841082][ T4492] Invalid ELF header magic: != ELF [ 632.852425][ T4488] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.10615: mark_inode_dirty error [ 632.877087][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10615: corrupted inode contents [ 632.895310][ T4488] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 632.906932][ T3084] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.912169][ T4488] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.10615: corrupted inode contents [ 632.916729][ T3084] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.928708][ T4488] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.10615: mark_inode_dirty error [ 632.955857][ T4453] chnl_net:caif_netlink_parms(): no params data found [ 632.963336][ T4488] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 632.974258][ T4488] EXT4-fs (loop0): 1 truncate cleaned up [ 632.980244][ T4488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.995983][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.030267][ T4600] 9p: Could not find request transport: r [ 633.044090][ T4453] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.051315][ T4453] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.065477][ T4453] bridge_slave_0: entered allmulticast mode [ 633.072181][ T4453] bridge_slave_0: entered promiscuous mode [ 633.079298][ T4453] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.086421][ T4453] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.094065][ T4453] bridge_slave_1: entered allmulticast mode [ 633.100924][ T4453] bridge_slave_1: entered promiscuous mode [ 633.114457][ T3084] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 633.124237][ T3084] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.149997][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.182742][ T4453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.215965][ T4453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.217569][ T4707] loop1: detected capacity change from 0 to 512 [ 633.236304][ T4707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 633.259886][ T4707] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.10630: invalid block [ 633.272801][ T4707] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10630: invalid indirect mapped block 4294967295 (level 1) [ 633.287558][ T4707] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.10630: invalid indirect mapped block 4294967295 (level 1) [ 633.302305][ T4707] EXT4-fs (loop1): 2 truncates cleaned up [ 633.303276][ T4453] team0: Port device team_slave_0 added [ 633.313743][ T4707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.333939][ T4453] team0: Port device team_slave_1 added [ 633.340381][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.349591][ T3084] bridge_slave_1: left allmulticast mode [ 633.355428][ T3084] bridge_slave_1: left promiscuous mode [ 633.361074][ T3084] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.371128][ T3084] bridge_slave_0: left allmulticast mode [ 633.376979][ T3084] bridge_slave_0: left promiscuous mode [ 633.382845][ T3084] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.528315][ T4774] 9p: Could not find request transport: r [ 633.576061][ T3084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.586175][ T3084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.595547][ T3084] bond0 (unregistering): Released all slaves [ 633.619367][ T3404] syz0: Port: 1 Link DOWN [ 633.624098][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.631047][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.657018][ T4453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.668527][ T4453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.675608][ T4453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.701612][ T4453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.762899][ T4453] hsr_slave_0: entered promiscuous mode [ 633.769239][ T4453] hsr_slave_1: entered promiscuous mode [ 633.790758][ T3084] hsr_slave_0: left promiscuous mode [ 633.804380][ T3084] hsr_slave_1: left promiscuous mode [ 633.813140][ T3084] veth1_macvtap: left promiscuous mode [ 633.818697][ T3084] veth0_macvtap: left promiscuous mode [ 633.824878][ T3084] veth1_vlan: left promiscuous mode [ 633.830131][ T3084] veth0_vlan: left promiscuous mode [ 633.895770][ T3084] team0 (unregistering): Port device team_slave_1 removed [ 633.906276][ T3084] team0 (unregistering): Port device team_slave_0 removed [ 633.917958][ T52] smc: removing ib device !yz! [ 633.923049][ T2039] smc: removing ib device syz0 [ 634.144152][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.151841][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.159254][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.166739][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.174249][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.181631][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.189054][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.196500][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.203917][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.211307][ T3404] hid-generic 0003:0004:0008.0003: unknown main item tag 0x0 [ 634.229555][ T3404] hid-generic 0003:0004:0008.0003: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 634.259855][ T4915] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 634.268183][ T4915] SELinux: failed to load policy [ 634.362955][ T4928] 9p: Could not find request transport: r [ 634.394280][ T4936] loop0: detected capacity change from 0 to 256 [ 634.530494][ T4963] loop0: detected capacity change from 0 to 512 [ 634.554718][ T4963] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.10653: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 634.560363][ T4453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 634.575071][ T4963] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.10653: Bad quota inode: 3, type: 0 [ 634.590774][ T4963] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 634.592745][ T4453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 634.613294][ T4963] EXT4-fs (loop0): mount failed [ 634.615975][ T4453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 634.628013][ T4453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 634.661690][ T4453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.674069][ T4453] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.684446][ T2039] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.691605][ T2039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.704043][ T2039] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.711122][ T2039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.776100][ T4453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.835402][ T4453] veth0_vlan: entered promiscuous mode [ 634.842858][ T4453] veth1_vlan: entered promiscuous mode [ 634.857536][ T4453] veth0_macvtap: entered promiscuous mode [ 634.864698][ T4453] veth1_macvtap: entered promiscuous mode [ 634.878847][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.890827][ T4453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.898236][ T5006] loop1: detected capacity change from 0 to 512 [ 634.898806][ T5006] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 634.908919][ T3081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.917998][ T5006] EXT4-fs (loop1): 1 truncate cleaned up [ 634.923968][ T3081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.938289][ T3081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.939452][ T5006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.948961][ T3081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.980160][ T5006] Invalid ELF header magic: != ELF [ 635.049303][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.768331][ T5079] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 635.789396][ T5079] SELinux: failed to load policy [ 635.821506][ T5082] FAULT_INJECTION: forcing a failure. [ 635.821506][ T5082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.834712][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.5.10672 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 635.834758][ T5082] Tainted: [W]=WARN [ 635.834766][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.834778][ T5082] Call Trace: [ 635.834786][ T5082] [ 635.834794][ T5082] __dump_stack+0x1d/0x30 [ 635.834877][ T5082] dump_stack_lvl+0xe8/0x140 [ 635.834897][ T5082] dump_stack+0x15/0x1b [ 635.834914][ T5082] should_fail_ex+0x265/0x280 [ 635.834934][ T5082] should_fail+0xb/0x20 [ 635.835006][ T5082] should_fail_usercopy+0x1a/0x20 [ 635.835065][ T5082] _copy_from_user+0x1c/0xb0 [ 635.835088][ T5082] sctp_setsockopt+0x154/0xe30 [ 635.835181][ T5082] sock_common_setsockopt+0x69/0x80 [ 635.835199][ T5082] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 635.835217][ T5082] __sys_setsockopt+0x184/0x200 [ 635.835258][ T5082] __x64_sys_setsockopt+0x64/0x80 [ 635.835280][ T5082] x64_sys_call+0x21d5/0x3000 [ 635.835300][ T5082] do_syscall_64+0xd8/0x2a0 [ 635.835392][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.835425][ T5082] RIP: 0033:0x7f0bbfd3f749 [ 635.835451][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.835467][ T5082] RSP: 002b:00007f0bbe79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 635.835484][ T5082] RAX: ffffffffffffffda RBX: 00007f0bbff95fa0 RCX: 00007f0bbfd3f749 [ 635.835495][ T5082] RDX: 0000000000000023 RSI: 0000000000000084 RDI: 0000000000000003 [ 635.835580][ T5082] RBP: 00007f0bbe79f090 R08: 0000000000000008 R09: 0000000000000000 [ 635.835592][ T5082] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 635.835603][ T5082] R13: 00007f0bbff96038 R14: 00007f0bbff95fa0 R15: 00007ffe6c9a6b78 [ 635.835628][ T5082] [ 635.843133][ T5084] loop1: detected capacity change from 0 to 512 [ 636.062072][ T5084] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 636.080371][ T5084] EXT4-fs (loop1): 1 truncate cleaned up [ 636.086681][ T5084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.118118][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 636.118134][ T29] audit: type=1326 audit(1404.725:36637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 636.181271][ T29] audit: type=1326 audit(1404.725:36638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 636.204412][ T29] audit: type=1326 audit(1404.725:36639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 636.227540][ T29] audit: type=1326 audit(1404.725:36640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff267adf90 code=0x7ffc0000 [ 636.250734][ T29] audit: type=1326 audit(1404.725:36641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7eff267b0f77 code=0x7ffc0000 [ 636.273861][ T29] audit: type=1326 audit(1404.725:36642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 636.297127][ T5106] netlink: 'syz.1.10673': attribute type 10 has an invalid length. [ 636.305352][ T29] audit: type=1326 audit(1404.725:36643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7eff267b0f77 code=0x7ffc0000 [ 636.328482][ T29] audit: type=1326 audit(1404.725:36644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7eff267ae3aa code=0x7ffc0000 [ 636.353153][ T29] audit: type=1326 audit(1404.725:36645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5098 comm="syz.2.10677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 636.376380][ T29] audit: type=1400 audit(1404.725:36646): avc: denied { ioctl } for pid=5083 comm="syz.1.10673" path="/563/file2/file1" dev="loop1" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 636.401814][ T5106] ipvlan0: entered allmulticast mode [ 636.407177][ T5106] veth0_vlan: entered allmulticast mode [ 636.421723][ T5110] Invalid ELF header magic: != ELF [ 636.433088][ T5114] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 636.442521][ T5114] SELinux: failed to load policy [ 636.458496][ T5121] hub 9-0:1.0: USB hub found [ 636.465461][ T5121] hub 9-0:1.0: 8 ports detected [ 636.488459][ T5116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5116 comm=syz.0.10683 [ 636.557061][ T5116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5116 comm=syz.0.10683 [ 636.598299][ T3084] Bluetooth: hci0: Frame reassembly failed (-84) [ 636.747923][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.760364][ T5143] __nla_validate_parse: 17 callbacks suppressed [ 636.760379][ T5143] netlink: 176 bytes leftover after parsing attributes in process `syz.6.10689'. [ 637.113218][ T5167] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10694'. [ 637.252179][ T5171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10695'. [ 637.261381][ T5171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10695'. [ 637.270336][ T5171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10695'. [ 637.342542][ T5174] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 637.589513][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.608273][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.982387][ T5266] netlink: 'syz.0.10714': attribute type 10 has an invalid length. [ 637.990391][ T5266] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10714'. [ 638.026355][ T5266] ipvlan0: entered promiscuous mode [ 638.032652][ T5266] bridge0: port 3(ipvlan0) entered blocking state [ 638.039146][ T5266] bridge0: port 3(ipvlan0) entered disabled state [ 638.066401][ T5266] ipvlan0: entered allmulticast mode [ 638.071757][ T5266] bridge0: entered allmulticast mode [ 638.121193][ T5266] ipvlan0: left allmulticast mode [ 638.126616][ T5266] bridge0: left allmulticast mode [ 638.238468][ T5272] loop1: detected capacity change from 0 to 512 [ 638.246251][ T5272] journal_path: Non-blockdev passed as './bus' [ 638.252420][ T5272] EXT4-fs: error: could not find journal device path [ 638.275879][ T5272] loop1: detected capacity change from 0 to 512 [ 638.283285][ T5272] EXT4-fs: dax option not supported [ 638.295204][ T5272] bpf: Bad value for 'gid' [ 638.693686][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 638.700235][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 638.995973][ T5307] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 639.026056][ T5307] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.054252][ T5315] geneve2: entered promiscuous mode [ 639.074129][ T2039] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.088638][ T5315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10720'. [ 639.105521][ T2039] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.123218][ T5315] netlink: 19 bytes leftover after parsing attributes in process `syz.1.10720'. [ 639.143929][ T2039] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.152895][ T5320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10721'. [ 639.153415][ T2039] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.988042][ T3084] Bluetooth: hci0: Frame reassembly failed (-84) [ 640.095117][ T5364] netlink: 176 bytes leftover after parsing attributes in process `syz.6.10735'. [ 640.319817][ T5379] loop1: detected capacity change from 0 to 512 [ 640.345545][ T5379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.381940][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.407515][ T5387] loop1: detected capacity change from 0 to 512 [ 640.407773][ T5391] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 640.414670][ T5387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 640.422062][ T5391] SELinux: failed to load policy [ 640.434210][ T5387] EXT4-fs (loop1): 1 truncate cleaned up [ 640.442485][ T5387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.458973][ T5387] Invalid ELF header magic: != ELF [ 640.534652][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.912020][ T5453] Invalid ELF header magic: != ELF [ 640.974650][ T5435] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 641.085273][ T5473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.109797][ T5473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.126769][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 641.126784][ T29] audit: type=1326 audit(1409.735:37172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.226114][ T5490] team0 (unregistering): Port device team_slave_0 removed [ 641.236519][ T5490] team0 (unregistering): Port device team_slave_1 removed [ 641.252875][ T29] audit: type=1326 audit(1409.735:37173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.275973][ T29] audit: type=1326 audit(1409.735:37174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.299530][ T29] audit: type=1326 audit(1409.735:37175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.322506][ T29] audit: type=1326 audit(1409.735:37176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.345583][ T29] audit: type=1326 audit(1409.735:37177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.368649][ T29] audit: type=1326 audit(1409.735:37178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.391698][ T29] audit: type=1326 audit(1409.735:37179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.414897][ T29] audit: type=1326 audit(1409.735:37180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.438105][ T29] audit: type=1326 audit(1409.735:37181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5485 comm="syz.5.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 641.566156][ T5538] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 641.583504][ T5538] SELinux: failed to load policy [ 641.841674][ T5566] __nla_validate_parse: 13 callbacks suppressed [ 641.841689][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10778'. [ 641.879456][ T5570] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 641.887223][ T5570] SELinux: failed to load policy [ 641.918455][ T5574] loop1: detected capacity change from 0 to 512 [ 641.925752][ T5574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 641.937274][ T5574] EXT4-fs (loop1): 1 truncate cleaned up [ 641.943436][ T5574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 641.958536][ T5574] Invalid ELF header magic: != ELF [ 641.977051][T27526] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.995058][ T5582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10783'. [ 642.013530][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 642.019620][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 642.034711][ T5587] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 642.035125][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10783'. [ 642.051973][ T5587] SELinux: failed to load policy [ 642.074766][ T5590] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 642.381431][ T5626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10794'. [ 642.411631][ T5629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10798'. [ 642.420683][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.428273][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.436029][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.443493][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.559281][ T5635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10799'. [ 642.601360][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10802'. [ 642.674116][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10802'. [ 642.752603][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10807'. [ 643.014427][ T5643] chnl_net:caif_netlink_parms(): no params data found [ 643.282363][ T3074] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.356459][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.363668][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.374286][ T5643] bridge_slave_0: entered allmulticast mode [ 643.381491][ T5643] bridge_slave_0: entered promiscuous mode [ 643.389160][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.396259][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.404656][ T5643] bridge_slave_1: entered allmulticast mode [ 643.411120][ T5643] bridge_slave_1: entered promiscuous mode [ 643.440648][ T5858] FAULT_INJECTION: forcing a failure. [ 643.440648][ T5858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.453848][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.6.10817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.453869][ T5858] Tainted: [W]=WARN [ 643.453873][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.453947][ T5858] Call Trace: [ 643.453951][ T5858] [ 643.453955][ T5858] __dump_stack+0x1d/0x30 [ 643.454020][ T5858] dump_stack_lvl+0xe8/0x140 [ 643.454095][ T5858] dump_stack+0x15/0x1b [ 643.454106][ T5858] should_fail_ex+0x265/0x280 [ 643.454120][ T5858] should_fail+0xb/0x20 [ 643.454159][ T5858] should_fail_usercopy+0x1a/0x20 [ 643.454173][ T5858] _copy_to_user+0x20/0xa0 [ 643.454189][ T5858] simple_read_from_buffer+0xb5/0x130 [ 643.454276][ T5858] proc_fail_nth_read+0x10e/0x150 [ 643.454293][ T5858] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 643.454308][ T5858] vfs_read+0x1a8/0x770 [ 643.454318][ T5858] ? __rcu_read_unlock+0x4f/0x70 [ 643.454393][ T5858] ? __fget_files+0x184/0x1c0 [ 643.454406][ T5858] ? mutex_lock+0x58/0x90 [ 643.454420][ T5858] ksys_read+0xda/0x1a0 [ 643.454432][ T5858] __x64_sys_read+0x40/0x50 [ 643.454463][ T5858] x64_sys_call+0x2889/0x3000 [ 643.454477][ T5858] do_syscall_64+0xd8/0x2a0 [ 643.454497][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.454578][ T5858] RIP: 0033:0x7f35a999e15c [ 643.454594][ T5858] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 643.454642][ T5858] RSP: 002b:00007f35a83ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.454666][ T5858] RAX: ffffffffffffffda RBX: 00007f35a9bf5fa0 RCX: 00007f35a999e15c [ 643.454674][ T5858] RDX: 000000000000000f RSI: 00007f35a83ff0a0 RDI: 0000000000000007 [ 643.454681][ T5858] RBP: 00007f35a83ff090 R08: 0000000000000000 R09: 0000000000000000 [ 643.454689][ T5858] R10: 0000000012000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.454696][ T5858] R13: 00007f35a9bf6038 R14: 00007f35a9bf5fa0 R15: 00007ffd73910bc8 [ 643.454707][ T5858] [ 643.456620][ T3074] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.674708][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.685422][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.709112][ T3074] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.722972][ T5643] team0: Port device team_slave_0 added [ 643.729677][ T5643] team0: Port device team_slave_1 added [ 643.755692][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.762662][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.788681][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.801991][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.809014][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.834978][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.849209][ T3074] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.851349][ T5945] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 643.886969][ T5945] SELinux: failed to load policy [ 643.892625][ T5974] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 643.894574][ T5643] hsr_slave_0: entered promiscuous mode [ 643.907206][ T5643] hsr_slave_1: entered promiscuous mode [ 643.913106][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 643.918849][ T5643] Cannot create hsr debugfs directory [ 643.979041][ T3074] bridge_slave_1: left allmulticast mode [ 643.984819][ T3074] bridge_slave_1: left promiscuous mode [ 643.990676][ T3074] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.998366][ T3074] bridge_slave_0: left allmulticast mode [ 644.004011][ T3074] bridge_slave_0: left promiscuous mode [ 644.009700][ T3074] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.010529][ T6027] loop0: detected capacity change from 0 to 164 [ 644.034030][ T6028] 9p: Could not find request transport: r [ 644.078974][ T6027] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 644.145362][ T3074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.154862][ T3074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.163815][ T3074] bond0 (unregistering): Released all slaves [ 644.210410][ T3074] tipc: Disabling bearer [ 644.215682][ T3074] tipc: Left network mode [ 644.240012][ T3074] hsr_slave_0: left promiscuous mode [ 644.249025][ T3074] hsr_slave_1: left promiscuous mode [ 644.757055][ T6136] bond2: option miimon: invalid value (18446744073709551615) [ 644.764585][ T6136] bond2: option miimon: allowed values 0 - 2147483647 [ 644.777960][ T6136] bond2 (unregistering): Released all slaves [ 644.801279][ T6142] team0 (unregistering): Port device team_slave_0 removed [ 644.811781][ T6142] team0 (unregistering): Port device team_slave_1 removed [ 644.915235][ T5643] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 644.932541][ T5643] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 644.944445][ T5643] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 644.966252][ T5643] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 645.012988][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.026068][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.036358][ T2039] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.043439][ T2039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.074743][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.081837][ T3081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.179051][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.330980][ T5643] veth0_vlan: entered promiscuous mode [ 645.355407][ T5643] veth1_vlan: entered promiscuous mode [ 645.385845][ T5643] veth0_macvtap: entered promiscuous mode [ 645.402899][ T5643] veth1_macvtap: entered promiscuous mode [ 645.434151][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.448318][ T3081] Bluetooth: hci0: Frame reassembly failed (-84) [ 645.451141][ T6338] loop0: detected capacity change from 0 to 512 [ 645.468290][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.471341][ T6343] FAULT_INJECTION: forcing a failure. [ 645.471341][ T6343] name failslab, interval 1, probability 0, space 0, times 0 [ 645.488321][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.2.10856 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 645.488356][ T6343] Tainted: [W]=WARN [ 645.488364][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 645.488379][ T6343] Call Trace: [ 645.488386][ T6343] [ 645.488393][ T6343] __dump_stack+0x1d/0x30 [ 645.488418][ T6343] dump_stack_lvl+0xe8/0x140 [ 645.488501][ T6343] dump_stack+0x15/0x1b [ 645.488520][ T6343] should_fail_ex+0x265/0x280 [ 645.488543][ T6343] should_failslab+0x8c/0xb0 [ 645.488613][ T6343] kmem_cache_alloc_noprof+0x69/0x4b0 [ 645.488636][ T6343] ? alloc_empty_file+0x76/0x200 [ 645.488661][ T6343] alloc_empty_file+0x76/0x200 [ 645.488693][ T6343] alloc_file_pseudo+0xc6/0x160 [ 645.488767][ T6343] sock_alloc_file+0x9c/0x1e0 [ 645.488797][ T6343] __sys_socket+0x116/0x180 [ 645.488818][ T6343] __x64_sys_socket+0x3f/0x50 [ 645.488862][ T6343] x64_sys_call+0x127b/0x3000 [ 645.488885][ T6343] do_syscall_64+0xd8/0x2a0 [ 645.488986][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.489078][ T6343] RIP: 0033:0x7eff267af749 [ 645.489138][ T6343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.489155][ T6343] RSP: 002b:00007eff2520f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 645.489192][ T6343] RAX: ffffffffffffffda RBX: 00007eff26a05fa0 RCX: 00007eff267af749 [ 645.489243][ T6343] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 645.489257][ T6343] RBP: 00007eff2520f090 R08: 0000000000000000 R09: 0000000000000000 [ 645.489270][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.489283][ T6343] R13: 00007eff26a06038 R14: 00007eff26a05fa0 R15: 00007ffc16c2c2c8 [ 645.489347][ T6343] [ 645.492860][ T6338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.584664][ T3092] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.804195][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.813040][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.844699][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.976817][ T6405] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 646.014346][ T6405] SELinux: failed to load policy [ 646.017960][ T6412] loop1: detected capacity change from 0 to 512 [ 646.059315][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.128063][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.169912][ T6428] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 646.197805][ T6428] SELinux: failed to load policy [ 646.275090][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 646.275104][ T29] audit: type=1326 audit(1414.885:37691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6438 comm="syz.6.10875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x0 [ 646.380906][ T6464] Invalid ELF header magic: != ELF [ 646.430803][ T29] audit: type=1326 audit(1415.035:37692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6468 comm="syz.1.10879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229ebf749 code=0x7ffc0000 [ 646.636135][ T29] audit: type=1326 audit(1415.245:37693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.692778][ T29] audit: type=1326 audit(1415.275:37694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.715952][ T29] audit: type=1326 audit(1415.275:37695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.739079][ T29] audit: type=1326 audit(1415.275:37696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.762139][ T29] audit: type=1326 audit(1415.275:37697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.785280][ T29] audit: type=1326 audit(1415.275:37698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.808414][ T29] audit: type=1326 audit(1415.275:37699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 646.831515][ T29] audit: type=1326 audit(1415.275:37700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6488 comm="syz.5.10884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bbfd3f749 code=0x7ffc0000 [ 647.027944][ T6497] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 647.035670][ T6497] SELinux: failed to load policy [ 647.124361][ T6506] __nla_validate_parse: 29 callbacks suppressed [ 647.124377][ T6506] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10890'. [ 647.189909][ T6510] Invalid ELF header magic: != ELF [ 647.277681][ T6517] loop1: detected capacity change from 0 to 512 [ 647.315317][ T6517] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 647.425818][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.533463][ T3556] Bluetooth: hci0: command 0x1003 tx timeout [ 647.539583][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 647.602527][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.660144][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10901'. [ 647.700577][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10901'. [ 647.722185][ T6552] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10903'. [ 647.758244][ T6556] loop0: detected capacity change from 0 to 512 [ 647.765414][ T6556] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 647.779783][ T6556] EXT4-fs (loop0): 1 truncate cleaned up [ 647.786241][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.800610][ T6556] Invalid ELF header magic: != ELF [ 647.818652][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.924206][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10913'. [ 647.995860][ T6591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10914'. [ 648.088144][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10917'. [ 648.097274][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10917'. [ 648.106224][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10917'. [ 648.154278][ T6624] Invalid ELF header magic: != ELF [ 648.174435][ T6626] netlink: 8744 bytes leftover after parsing attributes in process `syz.2.10920'. [ 648.805177][ T6741] loop0: detected capacity change from 0 to 512 [ 648.847308][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.888718][ T6754] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 648.917135][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.476224][ T3068] Bluetooth: hci0: Frame reassembly failed (-84) [ 649.501492][ T6810] loop0: detected capacity change from 0 to 512 [ 649.571849][ T6810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.667049][ T6818] Invalid ELF header magic: != ELF [ 649.842704][ T6829] xt_HMARK: spi-set and port-set can't be combined [ 650.004749][ T6838] FAULT_INJECTION: forcing a failure. [ 650.004749][ T6838] name failslab, interval 1, probability 0, space 0, times 0 [ 650.017583][ T6838] CPU: 0 UID: 0 PID: 6838 Comm: syz.6.10963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 650.017683][ T6838] Tainted: [W]=WARN [ 650.017690][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 650.017769][ T6838] Call Trace: [ 650.017777][ T6838] [ 650.017785][ T6838] __dump_stack+0x1d/0x30 [ 650.017812][ T6838] dump_stack_lvl+0xe8/0x140 [ 650.017831][ T6838] dump_stack+0x15/0x1b [ 650.017848][ T6838] should_fail_ex+0x265/0x280 [ 650.017911][ T6838] should_failslab+0x8c/0xb0 [ 650.017931][ T6838] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 650.018020][ T6838] ? led_tg_check+0x138/0x2b0 [ 650.018067][ T6838] ? should_failslab+0x8c/0xb0 [ 650.018088][ T6838] kstrdup+0x3e/0xd0 [ 650.018107][ T6838] led_tg_check+0x138/0x2b0 [ 650.018165][ T6838] xt_check_target+0x28d/0x4c0 [ 650.018194][ T6838] ? mutex_unlock+0x4f/0x90 [ 650.018251][ T6838] ? xt_find_target+0x1cd/0x200 [ 650.018349][ T6838] translate_table+0xcf5/0x1070 [ 650.018410][ T6838] do_ip6t_set_ctl+0x678/0x840 [ 650.018481][ T6838] ? kstrtoull+0x111/0x140 [ 650.018502][ T6838] ? __rcu_read_unlock+0x4f/0x70 [ 650.018548][ T6838] nf_setsockopt+0x199/0x1b0 [ 650.018569][ T6838] ipv6_setsockopt+0x11a/0x130 [ 650.018596][ T6838] tcp_setsockopt+0x98/0xb0 [ 650.018700][ T6838] sock_common_setsockopt+0x69/0x80 [ 650.018719][ T6838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 650.018742][ T6838] __sys_setsockopt+0x184/0x200 [ 650.018815][ T6838] __x64_sys_setsockopt+0x64/0x80 [ 650.018837][ T6838] x64_sys_call+0x21d5/0x3000 [ 650.018857][ T6838] do_syscall_64+0xd8/0x2a0 [ 650.018889][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.018918][ T6838] RIP: 0033:0x7f35a999f749 [ 650.018935][ T6838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.018952][ T6838] RSP: 002b:00007f35a83ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 650.019048][ T6838] RAX: ffffffffffffffda RBX: 00007f35a9bf5fa0 RCX: 00007f35a999f749 [ 650.019060][ T6838] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 650.019071][ T6838] RBP: 00007f35a83ff090 R08: 0000000000000420 R09: 0000000000000000 [ 650.019082][ T6838] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 650.019096][ T6838] R13: 00007f35a9bf6038 R14: 00007f35a9bf5fa0 R15: 00007ffd73910bc8 [ 650.019118][ T6838] [ 650.626497][ T6868] loop1: detected capacity change from 0 to 512 [ 650.645691][ T6868] EXT4-fs: dax option not supported [ 650.703759][ T6875] Invalid ELF header magic: != ELF [ 650.780145][ T6880] 9p: Could not find request transport: r [ 651.323737][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 651.323751][ T29] audit: type=1326 audit(1419.925:38051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.10980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.384605][ T29] audit: type=1326 audit(1419.965:38052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.10980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.407870][ T29] audit: type=1326 audit(1419.965:38053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6916 comm="syz.6.10980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.508004][ T6931] loop1: detected capacity change from 0 to 512 [ 651.533742][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 651.568489][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.619537][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.675911][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.692139][ T6943] Invalid ELF header magic: != ELF [ 651.722351][ T6960] loop0: detected capacity change from 0 to 512 [ 651.765007][ T6960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.788536][ T29] audit: type=1326 audit(1420.395:38054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.6.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.815275][ T29] audit: type=1326 audit(1420.395:38055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.6.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.838496][ T29] audit: type=1326 audit(1420.395:38056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.6.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.861559][ T29] audit: type=1326 audit(1420.395:38057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz.6.10992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 651.928133][ T3076] Bluetooth: hci0: Frame reassembly failed (-84) [ 651.937640][ T29] audit: type=1326 audit(1420.535:38058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 651.960811][ T29] audit: type=1326 audit(1420.545:38059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 651.983873][ T29] audit: type=1326 audit(1420.545:38060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6991 comm="syz.2.10996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 652.014444][ T6986] loop1: detected capacity change from 0 to 512 [ 652.054855][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.076785][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.155571][ T7012] __nla_validate_parse: 36 callbacks suppressed [ 652.155587][ T7012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11001'. [ 652.212599][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11002'. [ 652.239532][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11001'. [ 652.280427][ T7012] team0 (unregistering): Port device team_slave_0 removed [ 652.301796][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11002'. [ 652.304561][ T7012] team0 (unregistering): Port device team_slave_1 removed [ 652.398634][ T7054] netlink: 176 bytes leftover after parsing attributes in process `syz.1.10993'. [ 652.499364][ T7062] loop0: detected capacity change from 0 to 512 [ 652.520378][ T7062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.559991][ T7071] Invalid ELF header magic: != ELF [ 652.559999][ T7070] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11010'. [ 652.604839][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.693590][ T7082] netlink: 664 bytes leftover after parsing attributes in process `syz.2.11014'. [ 652.804188][ T7092] SELinux: policydb magic number 0x3b7 does not match expected magic number 0xf97cff8c [ 652.829277][ T7092] SELinux: failed to load policy [ 652.973019][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11019'. [ 652.988896][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11019'. [ 653.001305][ T7104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11016'. [ 653.011174][ T7102] team0 (unregistering): Port device team_slave_0 removed [ 653.019801][ T7102] team0 (unregistering): Port device team_slave_1 removed [ 653.053097][ T7098] loop0: detected capacity change from 0 to 512 [ 653.059963][ T6751] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 653.061020][ T7144] Invalid ELF header magic: != ELF [ 653.086201][ T7098] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 653.101607][ T7098] EXT4-fs (loop0): mount failed [ 653.471933][ T7182] Invalid ELF header magic: != ELF [ 653.508421][ T7186] 9p: Could not find request transport: r [ 653.943435][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 653.943777][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 653.990067][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.037548][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.045171][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.059678][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.067336][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.107152][ T7232] loop0: detected capacity change from 0 to 512 [ 654.127278][ T7232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.160250][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.185697][ T7242] loop0: detected capacity change from 0 to 512 [ 654.192812][ T7242] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 654.204248][ T7242] EXT4-fs (loop0): 1 truncate cleaned up [ 654.210479][ T7242] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.224604][ T7242] Invalid ELF header magic: != ELF [ 654.237934][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.254951][ T7252] SELinux: policydb magic number 0x3b7 does not match expected magic number 0xf97cff8c [ 654.265096][ T7252] SELinux: failed to load policy [ 654.365031][ T7276] loop1: detected capacity change from 0 to 512 [ 654.372058][ T7276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 654.383803][ T7276] EXT4-fs (loop1): 1 truncate cleaned up [ 654.390106][ T7276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.404222][ T7276] Invalid ELF header magic: != ELF [ 654.419310][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.435845][ T7290] SELinux: policydb magic number 0x3b7 does not match expected magic number 0xf97cff8c [ 654.445752][ T7290] SELinux: failed to load policy [ 654.541652][ T7306] 9p: Could not find request transport: r [ 654.590567][ T7328] loop1: detected capacity change from 0 to 512 [ 654.605373][ T7328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.640185][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.732948][ T7344] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 654.745723][ T7344] EXT4-fs (loop1): 1 truncate cleaned up [ 654.752178][ T7344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.768067][ T7344] Invalid ELF header magic: != ELF [ 654.783924][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.808125][ T7351] SELinux: policydb magic number 0x3b7 does not match expected magic number 0xf97cff8c [ 654.819476][ T7351] SELinux: failed to load policy [ 655.120207][ T7390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.172907][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.512153][ T7433] netlink: 'syz.1.11099': attribute type 30 has an invalid length. [ 655.760889][ T7469] 9p: Could not find request transport: r [ 655.814801][ T7474] set_capacity_and_notify: 2 callbacks suppressed [ 655.814818][ T7474] loop1: detected capacity change from 0 to 512 [ 655.875494][ T7474] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 655.891023][ T7474] EXT4-fs (loop1): mount failed [ 655.940412][ T7488] team0 (unregistering): Port device team_slave_0 removed [ 655.950567][ T7488] team0 (unregistering): Port device team_slave_1 removed [ 656.090343][ T7529] loop1: detected capacity change from 0 to 512 [ 656.115636][ T7529] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.177215][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.524967][ T29] kauditd_printk_skb: 487 callbacks suppressed [ 656.524982][ T29] audit: type=1326 audit(1425.135:38546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bbfd365e7 code=0x7ffc0000 [ 656.559150][ T29] audit: type=1326 audit(1425.165:38547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bbfcdb829 code=0x7ffc0000 [ 656.582270][ T29] audit: type=1326 audit(1425.165:38548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bbfd365e7 code=0x7ffc0000 [ 656.605445][ T29] audit: type=1326 audit(1425.165:38549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bbfcdb829 code=0x7ffc0000 [ 656.628660][ T29] audit: type=1326 audit(1425.165:38550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bbfd365e7 code=0x7ffc0000 [ 656.651866][ T29] audit: type=1326 audit(1425.165:38551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bbfcdb829 code=0x7ffc0000 [ 656.657407][ T7585] SELinux: policydb string SE Lioc» does not match my string SE Linux [ 656.674994][ T29] audit: type=1326 audit(1425.165:38552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bbfd365e7 code=0x7ffc0000 [ 656.675026][ T29] audit: type=1326 audit(1425.165:38553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bbfcdb829 code=0x7ffc0000 [ 656.684611][ T7585] SELinux: failed to load policy [ 656.706236][ T29] audit: type=1326 audit(1425.165:38554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0bbfd365e7 code=0x7ffc0000 [ 656.757055][ T29] audit: type=1326 audit(1425.165:38555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7577 comm="syz.5.11121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0bbfcdb829 code=0x7ffc0000 [ 656.915520][ T7599] loop0: detected capacity change from 0 to 512 [ 656.946013][ T7599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.994974][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.294042][ T7659] __nla_validate_parse: 54 callbacks suppressed [ 657.294059][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11142'. [ 657.391904][ T7666] loop1: detected capacity change from 0 to 512 [ 657.398996][ T7666] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 657.411390][ T7669] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11143'. [ 657.413640][ T7666] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.11145: invalid indirect mapped block 4294967295 (level 0) [ 657.420685][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11143'. [ 657.443633][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11143'. [ 657.463788][ T7666] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.11145: invalid indirect mapped block 4294967295 (level 1) [ 657.479193][ T7666] EXT4-fs (loop1): 1 orphan inode deleted [ 657.485006][ T7666] EXT4-fs (loop1): 1 truncate cleaned up [ 657.491285][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.513577][ T7666] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.11145: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 657.553086][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.637547][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11152'. [ 657.646696][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11152'. [ 657.653586][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11151'. [ 657.655727][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11152'. [ 657.720465][ T7694] SELinux: policydb string SE Lioc» does not match my string SE Linux [ 657.728913][ T7694] SELinux: failed to load policy [ 657.872731][ T7712] loop1: detected capacity change from 0 to 512 [ 657.895049][ T7712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.925395][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.959538][ T7727] SELinux: policydb string SE Linu» does not match my string SE Linux [ 657.967981][ T7727] SELinux: failed to load policy [ 657.975913][ T7728] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11165'. [ 657.987209][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11165'. [ 658.047413][ T7738] loop1: detected capacity change from 0 to 512 [ 658.054707][ T7738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 658.067711][ T7738] EXT4-fs (loop1): 1 truncate cleaned up [ 658.078151][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.093483][ T7738] Invalid ELF header magic: != ELF [ 658.121013][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.632087][ T7827] Invalid ELF header magic: != ELF [ 658.809291][ T7838] FAULT_INJECTION: forcing a failure. [ 658.809291][ T7838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.822473][ T7838] CPU: 1 UID: 0 PID: 7838 Comm: syz.5.11203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 658.822506][ T7838] Tainted: [W]=WARN [ 658.822513][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 658.822524][ T7838] Call Trace: [ 658.822530][ T7838] [ 658.822537][ T7838] __dump_stack+0x1d/0x30 [ 658.822563][ T7838] dump_stack_lvl+0xe8/0x140 [ 658.822596][ T7838] dump_stack+0x15/0x1b [ 658.822615][ T7838] should_fail_ex+0x265/0x280 [ 658.822654][ T7838] should_fail+0xb/0x20 [ 658.822673][ T7838] should_fail_usercopy+0x1a/0x20 [ 658.822719][ T7838] _copy_from_user+0x1c/0xb0 [ 658.822747][ T7838] ucma_join_multicast+0x52/0xe0 [ 658.822777][ T7838] ucma_write+0x1b3/0x250 [ 658.822858][ T7838] ? __pfx_ucma_write+0x10/0x10 [ 658.822883][ T7838] vfs_write+0x269/0x960 [ 658.822903][ T7838] ? __rcu_read_unlock+0x4f/0x70 [ 658.822990][ T7838] ? __fget_files+0x184/0x1c0 [ 658.823036][ T7838] ksys_write+0xda/0x1a0 [ 658.823056][ T7838] __x64_sys_write+0x40/0x50 [ 658.823076][ T7838] x64_sys_call+0x2847/0x3000 [ 658.823162][ T7838] do_syscall_64+0xd8/0x2a0 [ 658.823192][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.823210][ T7838] RIP: 0033:0x7f0bbfd3f749 [ 658.823224][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.823278][ T7838] RSP: 002b:00007f0bbe79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 658.823299][ T7838] RAX: ffffffffffffffda RBX: 00007f0bbff95fa0 RCX: 00007f0bbfd3f749 [ 658.823312][ T7838] RDX: 00000000000000a0 RSI: 0000200000000d40 RDI: 0000000000000003 [ 658.823366][ T7838] RBP: 00007f0bbe79f090 R08: 0000000000000000 R09: 0000000000000000 [ 658.823378][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.823388][ T7838] R13: 00007f0bbff96038 R14: 00007f0bbff95fa0 R15: 00007ffe6c9a6b78 [ 658.823405][ T7838] [ 660.047881][ T7949] Invalid ELF header magic: != ELF [ 660.084395][ T7953] loop0: detected capacity change from 0 to 512 [ 660.106187][ T7953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.161880][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.232806][ T7979] loop0: detected capacity change from 0 to 512 [ 660.249140][ T7982] netlink: 'syz.5.11234': attribute type 1 has an invalid length. [ 660.257188][ T7978] loop1: detected capacity change from 0 to 4096 [ 660.264323][ T7978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 660.272241][ T7979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.287770][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.302270][ T7982] program syz.5.11234 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.315512][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.335048][ T7991] loop0: detected capacity change from 0 to 512 [ 660.341987][ T7991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 660.356608][ T7991] EXT4-fs (loop0): 1 truncate cleaned up [ 660.362751][ T7991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.376580][ T7991] Invalid ELF header magic: != ELF [ 660.391712][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.411463][ T8000] FAULT_INJECTION: forcing a failure. [ 660.411463][ T8000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.424658][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.0.11237 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 660.424690][ T8000] Tainted: [W]=WARN [ 660.424696][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.424706][ T8000] Call Trace: [ 660.424714][ T8000] [ 660.424722][ T8000] __dump_stack+0x1d/0x30 [ 660.424746][ T8000] dump_stack_lvl+0xe8/0x140 [ 660.424818][ T8000] dump_stack+0x15/0x1b [ 660.424839][ T8000] should_fail_ex+0x265/0x280 [ 660.424862][ T8000] should_fail+0xb/0x20 [ 660.425044][ T8000] should_fail_usercopy+0x1a/0x20 [ 660.425069][ T8000] _copy_from_iter+0xcf/0xe70 [ 660.425167][ T8000] ? __alloc_skb+0x3bb/0x4d0 [ 660.425191][ T8000] ? __alloc_skb+0x24d/0x4d0 [ 660.425215][ T8000] netlink_sendmsg+0x471/0x6b0 [ 660.425248][ T8000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.425285][ T8000] __sock_sendmsg+0x145/0x180 [ 660.425305][ T8000] ____sys_sendmsg+0x31e/0x4a0 [ 660.425383][ T8000] ___sys_sendmsg+0x17b/0x1d0 [ 660.425416][ T8000] __x64_sys_sendmsg+0xd4/0x160 [ 660.425443][ T8000] x64_sys_call+0x17ba/0x3000 [ 660.425469][ T8000] do_syscall_64+0xd8/0x2a0 [ 660.425592][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.425611][ T8000] RIP: 0033:0x7fd06897f749 [ 660.425627][ T8000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.425642][ T8000] RSP: 002b:00007fd0673df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.425704][ T8000] RAX: ffffffffffffffda RBX: 00007fd068bd5fa0 RCX: 00007fd06897f749 [ 660.425716][ T8000] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 660.425729][ T8000] RBP: 00007fd0673df090 R08: 0000000000000000 R09: 0000000000000000 [ 660.425742][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.425812][ T8000] R13: 00007fd068bd6038 R14: 00007fd068bd5fa0 R15: 00007ffec4ac8e48 [ 660.425830][ T8000] [ 660.641434][ T8001] netlink: 'syz.1.11233': attribute type 10 has an invalid length. [ 660.657661][ T8004] EXT4-fs: dax option not supported [ 660.733621][ T8009] 9p: Could not find request transport: r [ 660.734357][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.861510][ T8026] set_capacity_and_notify: 1 callbacks suppressed [ 660.861522][ T8026] loop1: detected capacity change from 0 to 512 [ 660.885056][ T8026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.912819][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.566840][ T8072] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 661.577453][ T29] kauditd_printk_skb: 4667 callbacks suppressed [ 661.577468][ T29] audit: type=1326 audit(1430.185:43223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.0.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.624842][ T29] audit: type=1326 audit(1430.185:43224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.0.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.647999][ T29] audit: type=1326 audit(1430.215:43225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.0.11250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.671674][ T29] audit: type=1326 audit(1430.215:43226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.694064][ T29] audit: type=1326 audit(1430.215:43227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.716583][ T29] audit: type=1326 audit(1430.215:43228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.738910][ T29] audit: type=1326 audit(1430.215:43229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.761296][ T29] audit: type=1326 audit(1430.215:43230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06897f749 code=0x7ffc0000 [ 661.900149][ T8076] IPVS: stopping master sync thread 6754 ... [ 661.925309][ T8081] loop1: detected capacity change from 0 to 512 [ 661.946417][ T8081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.977113][ T29] audit: type=1326 audit(1430.585:43231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 662.007851][ T29] audit: type=1326 audit(1430.595:43232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.11256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 662.008843][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.349665][ T8158] __nla_validate_parse: 28 callbacks suppressed [ 662.349683][ T8158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11270'. [ 662.369815][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11270'. [ 662.378974][ T8158] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11270'. [ 662.446265][ T8171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11278'. [ 662.676714][ T8188] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11283'. [ 662.729774][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11283'. [ 662.738886][ T8188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11283'. [ 662.748053][ T8193] Invalid ELF header magic: != ELF [ 662.762940][ T8191] loop0: detected capacity change from 0 to 1024 [ 662.776534][ T8191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.793928][ T8186] loop1: detected capacity change from 0 to 512 [ 662.815689][ T8186] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 662.836466][ T8186] EXT4-fs (loop1): mount failed [ 662.878879][ T8213] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11287'. [ 662.892493][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11287'. [ 662.901708][ T8213] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11287'. [ 663.204432][ T8231] wg2: entered promiscuous mode [ 663.209333][ T8231] wg2: entered allmulticast mode [ 663.215378][ T8231] FAULT_INJECTION: forcing a failure. [ 663.215378][ T8231] name failslab, interval 1, probability 0, space 0, times 0 [ 663.228007][ T8231] CPU: 1 UID: 0 PID: 8231 Comm: syz.6.11294 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 663.228056][ T8231] Tainted: [W]=WARN [ 663.228064][ T8231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 663.228078][ T8231] Call Trace: [ 663.228086][ T8231] [ 663.228095][ T8231] __dump_stack+0x1d/0x30 [ 663.228118][ T8231] dump_stack_lvl+0xe8/0x140 [ 663.228137][ T8231] dump_stack+0x15/0x1b [ 663.228225][ T8231] should_fail_ex+0x265/0x280 [ 663.228250][ T8231] should_failslab+0x8c/0xb0 [ 663.228274][ T8231] __kmalloc_noprof+0xb9/0x5a0 [ 663.228297][ T8231] ? security_task_alloc+0x4d/0x120 [ 663.228332][ T8231] ? mutex_init_generic+0x4c/0x60 [ 663.228358][ T8231] security_task_alloc+0x4d/0x120 [ 663.228400][ T8231] copy_process+0xbb3/0x1ef0 [ 663.228497][ T8231] kernel_clone+0x16c/0x5c0 [ 663.228604][ T8231] ? vfs_write+0x7e8/0x960 [ 663.228664][ T8231] __x64_sys_clone+0xe6/0x120 [ 663.228689][ T8231] x64_sys_call+0x12d0/0x3000 [ 663.228791][ T8231] do_syscall_64+0xd8/0x2a0 [ 663.228820][ T8231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.228839][ T8231] RIP: 0033:0x7f35a999f749 [ 663.228853][ T8231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.228890][ T8231] RSP: 002b:00007f35a83bcfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 663.228911][ T8231] RAX: ffffffffffffffda RBX: 00007f35a9bf6180 RCX: 00007f35a999f749 [ 663.228925][ T8231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 663.228939][ T8231] RBP: 00007f35a83bd090 R08: 0000000000000000 R09: 0000000000000000 [ 663.228953][ T8231] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 663.228967][ T8231] R13: 00007f35a9bf6218 R14: 00007f35a9bf6180 R15: 00007ffd73910bc8 [ 663.228987][ T8231] [ 663.587614][ T8240] Invalid ELF header magic: != ELF [ 663.880400][ T8285] Invalid ELF header magic: != ELF [ 664.949902][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.054609][ T8395] loop0: detected capacity change from 0 to 512 [ 665.098556][ T8395] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 665.188414][T26674] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.213160][ T8415] loop1: detected capacity change from 0 to 1024 [ 665.222795][ T8415] EXT4-fs: Ignoring removed oldalloc option [ 665.228913][ T8415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 665.289408][ T8415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.382461][ T8439] pim6reg1: entered allmulticast mode [ 665.615795][ T8465] 9p: Could not find request transport: r [ 665.907077][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.937384][ T8481] loop1: detected capacity change from 0 to 512 [ 665.946322][ T8481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 665.959242][ T8481] EXT4-fs (loop1): 1 truncate cleaned up [ 665.965563][ T8481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.981306][ T8481] Invalid ELF header magic: != ELF [ 665.994963][ T8487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8487 comm=syz.2.11366 [ 666.008478][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.107694][ T8508] loop1: detected capacity change from 0 to 4096 [ 666.117434][ T8508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.164084][ T8523] Invalid ELF header magic: != ELF [ 666.170176][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.288352][ T8549] loop0: detected capacity change from 0 to 512 [ 666.300431][ T8549] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 666.310339][ T8549] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 666.343117][ T8557] loop1: detected capacity change from 0 to 4096 [ 666.350322][ T8557] /dev/loop1: Can't open blockdev [ 666.373725][ T8564] Invalid ELF header magic: != ELF [ 666.543785][ T8602] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 666.583536][ T29] kauditd_printk_skb: 962 callbacks suppressed [ 666.583552][ T29] audit: type=1326 audit(1435.185:44194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.1.11404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229ebf749 code=0x7ffc0000 [ 666.601958][ T8609] 9p: Could not find request transport: r [ 666.613091][ T29] audit: type=1326 audit(1435.195:44195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.641757][ T29] audit: type=1326 audit(1435.195:44196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.664812][ T29] audit: type=1326 audit(1435.195:44197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.687840][ T29] audit: type=1326 audit(1435.195:44198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.710850][ T29] audit: type=1326 audit(1435.195:44199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.733869][ T29] audit: type=1326 audit(1435.195:44200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8548 comm="syz.0.11385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd0689b2005 code=0x7ffc0000 [ 666.756905][ T29] audit: type=1326 audit(1435.195:44201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.1.11404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8229ebf749 code=0x7ffc0000 [ 666.779864][ T29] audit: type=1326 audit(1435.195:44202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.1.11404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229ebf749 code=0x7ffc0000 [ 666.802932][ T29] audit: type=1326 audit(1435.195:44203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.1.11404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8229ebf749 code=0x7ffc0000 [ 666.845932][ T8618] Invalid ELF header magic: != ELF [ 667.139703][ T8681] Invalid ELF header magic: != ELF [ 667.239005][ T8636] chnl_net:caif_netlink_parms(): no params data found [ 667.304441][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.311520][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.318932][ T8636] bridge_slave_0: entered allmulticast mode [ 667.325439][ T8636] bridge_slave_0: entered promiscuous mode [ 667.332215][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.339316][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.346608][ T8636] bridge_slave_1: entered allmulticast mode [ 667.353061][ T8636] bridge_slave_1: entered promiscuous mode [ 667.372257][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.382784][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.405506][ T8636] team0: Port device team_slave_0 added [ 667.412056][ T8636] team0: Port device team_slave_1 added [ 667.429938][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.436944][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.462890][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.474815][ T8913] __nla_validate_parse: 56 callbacks suppressed [ 667.474832][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11426'. [ 667.475292][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 667.497161][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.523072][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.534404][ T8913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11426'. [ 667.543534][ T8913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11426'. [ 667.557661][ T52] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.575867][ T8918] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11427'. [ 667.585725][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11427'. [ 667.594782][ T8918] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11427'. [ 667.614598][ T8636] hsr_slave_0: entered promiscuous mode [ 667.616984][ T8918] loop0: detected capacity change from 0 to 512 [ 667.620792][ T8636] hsr_slave_1: entered promiscuous mode [ 667.632604][ T8636] debugfs: 'hsr0' already exists in 'hsr' [ 667.638407][ T8636] Cannot create hsr debugfs directory [ 667.644933][ T52] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.646913][ T8918] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 667.669662][ T8918] EXT4-fs (loop0): mount failed [ 667.708945][ T52] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.722891][ T8981] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 667.751935][ T52] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.809073][ T52] bridge_slave_1: left allmulticast mode [ 667.814868][ T52] bridge_slave_1: left promiscuous mode [ 667.820567][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.828659][ T52] bridge_slave_0: left allmulticast mode [ 667.834377][ T52] bridge_slave_0: left promiscuous mode [ 667.840157][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.908256][ T9038] loop1: detected capacity change from 0 to 512 [ 667.914877][ T52] bond1 (unregistering): (slave gretap1): Releasing active interface [ 667.915585][ T9038] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 667.938610][ T9038] EXT4-fs (loop1): 1 truncate cleaned up [ 667.945740][ T9038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 667.961815][ T9038] Invalid ELF header magic: != ELF [ 667.977961][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.014306][ T9046] loop1: detected capacity change from 0 to 4096 [ 668.021049][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.031498][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.034286][ T9046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.055686][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 668.072340][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.085051][ T52] bond0 (unregistering): Released all slaves [ 668.108545][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11433'. [ 668.117666][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11433'. [ 668.126705][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11433'. [ 668.128616][ T52] bond1 (unregistering): Released all slaves [ 668.204462][ T52] IPVS: stopping master sync thread 2575 ... [ 668.219928][ T52] veth1_macvtap: left promiscuous mode [ 668.227233][ T52] veth0_macvtap: left promiscuous mode [ 668.237102][ T52] veth1_vlan: left promiscuous mode [ 668.242745][ T52] veth0_vlan: left promiscuous mode [ 668.292616][ T9062] loop1: detected capacity change from 0 to 512 [ 668.308058][ T9062] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 668.324596][ T9062] EXT4-fs (loop1): mount failed [ 668.369840][ T9071] loop0: detected capacity change from 0 to 512 [ 668.407671][ T9071] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 668.422981][ T9071] EXT4-fs (loop0): mount failed [ 668.612556][ T9126] Invalid ELF header magic: != ELF [ 668.689592][ T8636] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 668.723452][ T8636] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 668.751740][ T8636] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 668.786457][ T8636] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.918754][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.949277][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.962660][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.969745][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.993235][ T3089] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.000431][ T3089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.162633][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.387088][ T8636] veth0_vlan: entered promiscuous mode [ 669.402591][ T8636] veth1_vlan: entered promiscuous mode [ 669.418039][ T8636] veth0_macvtap: entered promiscuous mode [ 669.433995][ T8636] veth1_macvtap: entered promiscuous mode [ 669.448603][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.461118][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.484646][ T3082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.498965][ T3082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.516372][ T3082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.549104][ T3082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.655932][ T3092] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.665800][ T3092] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.665916][ T9240] loop1: detected capacity change from 0 to 4096 [ 669.685246][ T9240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.716926][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.736847][ T3092] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.746702][ T3092] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.786968][ T3092] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.796824][ T3092] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.849161][ T9233] chnl_net:caif_netlink_parms(): no params data found [ 669.881785][ T3092] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 669.891603][ T3092] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.929515][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.936765][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.944438][ T9233] bridge_slave_0: entered allmulticast mode [ 669.951433][ T9233] bridge_slave_0: entered promiscuous mode [ 669.958445][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.965626][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.972771][ T9233] bridge_slave_1: entered allmulticast mode [ 669.979762][ T9233] bridge_slave_1: entered promiscuous mode [ 670.018556][ T9233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.028098][ T3092] bridge_slave_1: left allmulticast mode [ 670.033798][ T3092] bridge_slave_1: left promiscuous mode [ 670.039495][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.050140][ T3092] bridge_slave_0: left promiscuous mode [ 670.055914][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.184924][ T3092] bond1 (unregistering): Released all slaves [ 670.193246][ T3092] bond0 (unregistering): (slave batadv1): Releasing active interface [ 670.202117][ T3092] bond0 (unregistering): Released all slaves [ 670.212402][ T9233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.234944][ T9233] team0: Port device team_slave_0 added [ 670.241694][ T9233] team0: Port device team_slave_1 added [ 670.258275][ T3092] hsr_slave_0: left promiscuous mode [ 670.264102][ T3092] hsr_slave_1: left promiscuous mode [ 670.272484][ T3092] veth1_macvtap: left promiscuous mode [ 670.278206][ T3092] veth0_macvtap: left promiscuous mode [ 670.306212][ T3092] pim6reg (unregistering): left allmulticast mode [ 670.358811][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.365817][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.391714][ T9233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.413800][ T9233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.420765][ T9233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.446778][ T9233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.497046][ T9233] hsr_slave_0: entered promiscuous mode [ 670.503458][ T9233] hsr_slave_1: entered promiscuous mode [ 670.509368][ T9233] debugfs: 'hsr0' already exists in 'hsr' [ 670.515217][ T9233] Cannot create hsr debugfs directory [ 670.565146][ T9581] 9p: Could not find request transport: r [ 670.868670][ T9233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 670.877416][ T9233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 670.887059][ T9233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 670.899318][ T9233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 670.918351][ T9638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.937773][ T9233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.952095][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.952838][ T9233] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.971048][ T3089] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.978220][ T3089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.990969][ T3078] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.998118][ T3078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.065257][ T9233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.128824][ T9666] set_capacity_and_notify: 1 callbacks suppressed [ 671.128837][ T9666] loop1: detected capacity change from 0 to 8192 [ 671.143035][ T9666] vfat: Unknown parameter '1ŸˆÑ9½' [ 671.147253][ T9233] veth0_vlan: entered promiscuous mode [ 671.160009][ T9233] veth1_vlan: entered promiscuous mode [ 671.184962][ T9233] veth0_macvtap: entered promiscuous mode [ 671.192692][ T9233] veth1_macvtap: entered promiscuous mode [ 671.204705][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.217099][ T9233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.228643][ T3078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.242192][ T3078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.255687][ T3078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.275048][ T3078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.325494][ T9685] loop1: detected capacity change from 0 to 164 [ 671.347624][ T9698] Invalid ELF header magic: != ELF [ 671.388647][ T9708] loop0: detected capacity change from 0 to 512 [ 671.453032][ T9728] loop1: detected capacity change from 0 to 128 [ 671.460507][ T9724] loop0: detected capacity change from 0 to 512 [ 671.488121][ T9724] EXT4-fs (loop0): too many log groups per flexible block group [ 671.503751][ T9724] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 671.529225][ T9724] EXT4-fs (loop0): mount failed [ 671.551185][ T9724] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 671.591056][ T9745] loop1: detected capacity change from 0 to 512 [ 671.598020][ T9745] EXT4-fs: dax option not supported [ 671.603420][ T29] kauditd_printk_skb: 896 callbacks suppressed [ 671.603435][ T29] audit: type=1400 audit(1440.195:45097): avc: denied { read write } for pid=9744 comm="syz.1.11513" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.633302][ T29] audit: type=1400 audit(1440.195:45098): avc: denied { open } for pid=9744 comm="syz.1.11513" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.657129][ T29] audit: type=1400 audit(1440.195:45099): avc: denied { ioctl } for pid=9744 comm="syz.1.11513" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 671.682268][ T29] audit: type=1326 audit(1440.205:45100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9719 comm="syz.6.11508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 671.705388][ T29] audit: type=1400 audit(1440.205:45101): avc: denied { mounton } for pid=9744 comm="syz.1.11513" path="/154/file0" dev="tmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 671.745707][ T9747] 9p: Could not find request transport: r [ 671.751967][ T29] audit: type=1400 audit(1440.295:45102): avc: denied { create } for pid=9744 comm="syz.1.11513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 671.770442][ T9758] loop0: detected capacity change from 0 to 512 [ 671.771125][ T29] audit: type=1400 audit(1440.295:45103): avc: denied { getopt } for pid=9744 comm="syz.1.11513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 671.796703][ T29] audit: type=1400 audit(1440.295:45104): avc: denied { module_request } for pid=9744 comm="syz.1.11513" kmod="9p-r" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 671.798171][ T9758] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 671.817576][ T29] audit: type=1400 audit(1440.355:45105): avc: denied { open } for pid=9752 comm="syz.6.11514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 671.846485][ T29] audit: type=1400 audit(1440.355:45106): avc: denied { kernel } for pid=9752 comm="syz.6.11514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 671.867276][ T9758] EXT4-fs (loop0): 1 truncate cleaned up [ 671.878801][ T9755] infiniband syz1: set down [ 671.879993][ T9758] Invalid ELF header magic: != ELF [ 671.883335][ T9755] infiniband syz1: added veth0_to_bond [ 671.900098][ T9755] RDS/IB: syz1: added [ 671.904379][ T9755] smc: adding ib device syz1 with port count 1 [ 671.910663][ T9755] smc: ib device syz1 port 1 has no pnetid [ 672.237854][ T3068] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.480329][ T9796] loop1: detected capacity change from 0 to 512 [ 672.487380][ T9796] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 672.499449][ T9796] EXT4-fs (loop1): 1 truncate cleaned up [ 672.506942][ T9796] Invalid ELF header magic: != ELF [ 672.546330][ T9805] __nla_validate_parse: 31 callbacks suppressed [ 672.546347][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11530'. [ 672.577844][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11530'. [ 672.839984][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11542'. [ 672.853298][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11542'. [ 672.868631][ T9832] team0 (unregistering): Port device team_slave_0 removed [ 672.879101][ T9832] team0 (unregistering): Port device team_slave_1 removed [ 672.976653][ T9873] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11544'. [ 673.007205][ T9866] macvtap0: refused to change device tx_queue_len [ 673.136715][ T9893] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11552'. [ 673.145944][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11552'. [ 673.155083][ T9893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11552'. [ 673.235040][ T9897] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11555'. [ 673.260172][ T9899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11556'. [ 674.253472][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 674.255318][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.519754][ T9994] loop1: detected capacity change from 0 to 4096 [ 674.586499][T10016] loop1: detected capacity change from 0 to 512 [ 674.602389][T10016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 674.618839][T10016] EXT4-fs (loop1): 1 truncate cleaned up [ 674.626551][T10016] Invalid ELF header magic: != ELF [ 674.728311][T10050] vfat: Bad value for 'nonumtail' [ 675.041883][T10101] FAULT_INJECTION: forcing a failure. [ 675.041883][T10101] name failslab, interval 1, probability 0, space 0, times 0 [ 675.054639][T10101] CPU: 0 UID: 0 PID: 10101 Comm: syz.0.11621 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 675.054713][T10101] Tainted: [W]=WARN [ 675.054721][T10101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.054734][T10101] Call Trace: [ 675.054739][T10101] [ 675.054747][T10101] __dump_stack+0x1d/0x30 [ 675.054816][T10101] dump_stack_lvl+0xe8/0x140 [ 675.054840][T10101] dump_stack+0x15/0x1b [ 675.054861][T10101] should_fail_ex+0x265/0x280 [ 675.054919][T10101] should_failslab+0x8c/0xb0 [ 675.054938][T10101] __kvmalloc_node_noprof+0x149/0x6b0 [ 675.054960][T10101] ? simple_xattr_set+0x73/0x2b0 [ 675.054987][T10101] simple_xattr_set+0x73/0x2b0 [ 675.055066][T10101] ? strlen+0x19/0x40 [ 675.055091][T10101] pidfs_xattr_set+0xfb/0x150 [ 675.055201][T10101] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 675.055230][T10101] __vfs_setxattr+0x2e6/0x310 [ 675.055250][T10101] __vfs_setxattr_noperm+0xe8/0x410 [ 675.055325][T10101] __vfs_setxattr_locked+0x1a6/0x1c0 [ 675.055349][T10101] vfs_setxattr+0x132/0x270 [ 675.055369][T10101] file_setxattr+0x139/0x1b0 [ 675.055450][T10101] path_setxattrat+0x290/0x310 [ 675.055488][T10101] __x64_sys_fsetxattr+0x6b/0x80 [ 675.055512][T10101] x64_sys_call+0x23c4/0x3000 [ 675.055568][T10101] do_syscall_64+0xd8/0x2a0 [ 675.055600][T10101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.055644][T10101] RIP: 0033:0x7fa22b94f749 [ 675.055661][T10101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.055677][T10101] RSP: 002b:00007fa22a3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 675.055769][T10101] RAX: ffffffffffffffda RBX: 00007fa22bba5fa0 RCX: 00007fa22b94f749 [ 675.055833][T10101] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000003 [ 675.055845][T10101] RBP: 00007fa22a3b7090 R08: 0000000000000003 R09: 0000000000000000 [ 675.055865][T10101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.055875][T10101] R13: 00007fa22bba6038 R14: 00007fa22bba5fa0 R15: 00007fff6bc8eb58 [ 675.055892][T10101] [ 675.304038][T10110] FAULT_INJECTION: forcing a failure. [ 675.304038][T10110] name failslab, interval 1, probability 0, space 0, times 0 [ 675.316955][T10110] CPU: 1 UID: 0 PID: 10110 Comm: syz.0.11622 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 675.316996][T10110] Tainted: [W]=WARN [ 675.317004][T10110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.317016][T10110] Call Trace: [ 675.317024][T10110] [ 675.317033][T10110] __dump_stack+0x1d/0x30 [ 675.317058][T10110] dump_stack_lvl+0xe8/0x140 [ 675.317123][T10110] dump_stack+0x15/0x1b [ 675.317143][T10110] should_fail_ex+0x265/0x280 [ 675.317167][T10110] should_failslab+0x8c/0xb0 [ 675.317189][T10110] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 675.317210][T10110] ? __alloc_skb+0x324/0x4d0 [ 675.317233][T10110] __alloc_skb+0x324/0x4d0 [ 675.317254][T10110] ? __alloc_skb+0x24d/0x4d0 [ 675.317391][T10110] netlink_alloc_large_skb+0xbf/0xf0 [ 675.317471][T10110] netlink_sendmsg+0x3cf/0x6b0 [ 675.317505][T10110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.317536][T10110] __sock_sendmsg+0x145/0x180 [ 675.317554][T10110] ____sys_sendmsg+0x31e/0x4a0 [ 675.317721][T10110] ___sys_sendmsg+0x17b/0x1d0 [ 675.317756][T10110] __x64_sys_sendmsg+0xd4/0x160 [ 675.317823][T10110] x64_sys_call+0x17ba/0x3000 [ 675.317846][T10110] do_syscall_64+0xd8/0x2a0 [ 675.317902][T10110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.317921][T10110] RIP: 0033:0x7fa22b94f749 [ 675.317934][T10110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.318001][T10110] RSP: 002b:00007fa22a3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.318022][T10110] RAX: ffffffffffffffda RBX: 00007fa22bba5fa0 RCX: 00007fa22b94f749 [ 675.318035][T10110] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 675.318049][T10110] RBP: 00007fa22a3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 675.318063][T10110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.318077][T10110] R13: 00007fa22bba6038 R14: 00007fa22bba5fa0 R15: 00007fff6bc8eb58 [ 675.318168][T10110] [ 675.700287][T10160] FAULT_INJECTION: forcing a failure. [ 675.700287][T10160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 675.713508][T10160] CPU: 1 UID: 0 PID: 10160 Comm: syz.2.11639 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 675.713587][T10160] Tainted: [W]=WARN [ 675.713594][T10160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 675.713606][T10160] Call Trace: [ 675.713613][T10160] [ 675.713618][T10160] __dump_stack+0x1d/0x30 [ 675.713697][T10160] dump_stack_lvl+0xe8/0x140 [ 675.713739][T10160] dump_stack+0x15/0x1b [ 675.713776][T10160] should_fail_ex+0x265/0x280 [ 675.713790][T10160] should_fail+0xb/0x20 [ 675.713801][T10160] should_fail_usercopy+0x1a/0x20 [ 675.713815][T10160] strncpy_from_user+0x27/0x260 [ 675.713905][T10160] strncpy_from_bpfptr+0x43/0x50 [ 675.713921][T10160] bpf_prog_load+0x883/0x1140 [ 675.714008][T10160] ? security_bpf+0x2b/0x90 [ 675.714059][T10160] __sys_bpf+0x469/0x7c0 [ 675.714140][T10160] __x64_sys_bpf+0x41/0x50 [ 675.714150][T10160] x64_sys_call+0x28e1/0x3000 [ 675.714164][T10160] do_syscall_64+0xd8/0x2a0 [ 675.714262][T10160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.714274][T10160] RIP: 0033:0x7eff267af749 [ 675.714331][T10160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.714342][T10160] RSP: 002b:00007eff2520f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 675.714354][T10160] RAX: ffffffffffffffda RBX: 00007eff26a05fa0 RCX: 00007eff267af749 [ 675.714361][T10160] RDX: 00000000000000a3 RSI: 00002000000000c0 RDI: 0000000000000005 [ 675.714429][T10160] RBP: 00007eff2520f090 R08: 0000000000000000 R09: 0000000000000000 [ 675.714437][T10160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.714486][T10160] R13: 00007eff26a06038 R14: 00007eff26a05fa0 R15: 00007ffc16c2c2c8 [ 675.714497][T10160] [ 676.126549][T10213] EXT4-fs: Ignoring removed oldalloc option [ 676.132495][T10213] EXT4-fs: Ignoring removed nomblk_io_submit option [ 676.446775][T10247] set_capacity_and_notify: 6 callbacks suppressed [ 676.446793][T10247] loop0: detected capacity change from 0 to 512 [ 676.488079][T10251] FAULT_INJECTION: forcing a failure. [ 676.488079][T10251] name failslab, interval 1, probability 0, space 0, times 0 [ 676.500752][T10251] CPU: 1 UID: 0 PID: 10251 Comm: syz.5.11660 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 676.500782][T10251] Tainted: [W]=WARN [ 676.500790][T10251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 676.500803][T10251] Call Trace: [ 676.500809][T10251] [ 676.500818][T10251] __dump_stack+0x1d/0x30 [ 676.500842][T10251] dump_stack_lvl+0xe8/0x140 [ 676.500866][T10251] dump_stack+0x15/0x1b [ 676.500888][T10251] should_fail_ex+0x265/0x280 [ 676.500933][T10251] should_failslab+0x8c/0xb0 [ 676.500957][T10251] __kmalloc_cache_noprof+0x65/0x4c0 [ 676.500983][T10251] ? tipc_nametbl_lookup_mcast_sockets+0x37d/0x680 [ 676.501043][T10251] tipc_nametbl_lookup_mcast_sockets+0x37d/0x680 [ 676.501073][T10251] tipc_sk_mcast_rcv+0x384/0x920 [ 676.501152][T10251] tipc_mcast_xmit+0x769/0xcb0 [ 676.501208][T10251] ? tipc_msg_build+0x2fd/0x840 [ 676.501232][T10251] tipc_send_group_bcast+0x5d4/0x6b0 [ 676.501268][T10251] ? __pfx_woken_wake_function+0x10/0x10 [ 676.501326][T10251] __tipc_sendmsg+0x189/0x1b10 [ 676.501359][T10251] ? obj_cgroup_charge_account+0x122/0x1a0 [ 676.501391][T10251] ? __rcu_read_unlock+0x4f/0x70 [ 676.501413][T10251] ? avc_has_perm_noaudit+0xab/0x130 [ 676.501514][T10251] ? __rcu_read_unlock+0x4f/0x70 [ 676.501563][T10251] __tipc_sendstream+0xa1e/0xb20 [ 676.501662][T10251] ? _raw_spin_lock_bh+0x56/0xb0 [ 676.501685][T10251] ? _raw_spin_unlock_bh+0x36/0x40 [ 676.501751][T10251] tipc_send_packet+0x65/0x80 [ 676.501827][T10251] ? __pfx_tipc_send_packet+0x10/0x10 [ 676.501910][T10251] __sock_sendmsg+0x145/0x180 [ 676.502002][T10251] ____sys_sendmsg+0x31e/0x4a0 [ 676.502033][T10251] ___sys_sendmsg+0x17b/0x1d0 [ 676.502073][T10251] __x64_sys_sendmsg+0xd4/0x160 [ 676.502168][T10251] x64_sys_call+0x17ba/0x3000 [ 676.502194][T10251] do_syscall_64+0xd8/0x2a0 [ 676.502280][T10251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.502311][T10251] RIP: 0033:0x7f62d40bf749 [ 676.502328][T10251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 676.502347][T10251] RSP: 002b:00007f62d2b27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.502368][T10251] RAX: ffffffffffffffda RBX: 00007f62d4315fa0 RCX: 00007f62d40bf749 [ 676.502382][T10251] RDX: 0000000004008030 RSI: 0000200000000400 RDI: 0000000000000006 [ 676.502437][T10251] RBP: 00007f62d2b27090 R08: 0000000000000000 R09: 0000000000000000 [ 676.502448][T10251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.502495][T10251] R13: 00007f62d4316038 R14: 00007f62d4315fa0 R15: 00007ffc8b93bb48 [ 676.502515][T10251] [ 676.974324][ T29] kauditd_printk_skb: 865 callbacks suppressed [ 676.974338][ T29] audit: type=1326 audit(1445.585:45972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.003654][ T29] audit: type=1326 audit(1445.585:45973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.035376][ T29] audit: type=1326 audit(1445.645:45974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.106806][ T29] audit: type=1326 audit(1445.665:45975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.130107][ T29] audit: type=1326 audit(1445.665:45976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.153502][ T29] audit: type=1326 audit(1445.665:45977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.176773][ T29] audit: type=1326 audit(1445.665:45978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.199921][ T29] audit: type=1326 audit(1445.665:45979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.223152][ T29] audit: type=1326 audit(1445.665:45980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.246377][ T29] audit: type=1326 audit(1445.665:45981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10254 comm="syz.6.11661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35a999f749 code=0x7ffc0000 [ 677.306742][T10247] netlink: 'syz.0.11659': attribute type 10 has an invalid length. [ 677.313712][T10235] pim6reg: entered allmulticast mode [ 677.330045][T10228] pim6reg: left allmulticast mode [ 677.389163][T10279] loop0: detected capacity change from 0 to 512 [ 677.409157][T10279] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 677.421410][T10279] EXT4-fs (loop0): 1 truncate cleaned up [ 677.433335][T10279] Invalid ELF header magic: != ELF [ 677.555166][T10310] __nla_validate_parse: 25 callbacks suppressed [ 677.555185][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11675'. [ 677.611112][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11675'. [ 677.729165][T10353] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11676'. [ 677.751847][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11676'. [ 677.761004][T10353] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11676'. [ 677.995945][T10374] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 678.245410][T10402] Invalid ELF header magic: != ELF [ 678.404014][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11686'. [ 678.462393][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11686'. [ 678.526985][T10430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11687'. [ 678.536070][T10430] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11687'. [ 678.551798][T10432] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 678.591787][T10442] loop0: detected capacity change from 0 to 512 [ 678.598830][T10442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 678.611769][T10442] EXT4-fs (loop0): 1 truncate cleaned up [ 679.323930][T10492] team0 (unregistering): Port device team_slave_0 removed [ 679.347698][T10492] team0 (unregistering): Port device team_slave_1 removed [ 679.742741][ T3089] Bluetooth: hci0: Frame reassembly failed (-84) [ 680.224808][T10575] 0ªX¹¦À: renamed from caif0 [ 680.232727][T10575] 0ªX¹¦À: entered allmulticast mode [ 680.237988][T10575] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 681.773414][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 681.779449][ T3556] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 682.019532][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 682.019547][ T29] audit: type=1326 audit(1450.625:46276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.058979][ T29] audit: type=1326 audit(1450.635:46277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.082198][ T29] audit: type=1326 audit(1450.635:46278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.105419][ T29] audit: type=1326 audit(1450.635:46279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.128585][ T29] audit: type=1326 audit(1450.635:46280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.151785][ T29] audit: type=1326 audit(1450.665:46281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.174949][ T29] audit: type=1326 audit(1450.665:46282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.198112][ T29] audit: type=1326 audit(1450.665:46283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.221361][ T29] audit: type=1326 audit(1450.665:46284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.244562][ T29] audit: type=1326 audit(1450.665:46285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10763 comm="syz.2.11760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff267af749 code=0x7ffc0000 [ 682.679024][T10804] __nla_validate_parse: 40 callbacks suppressed [ 682.679084][T10804] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11772'. [ 682.732988][T10808] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11774'. [ 682.788116][T10815] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11777'. [ 682.797656][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11777'. [ 682.806741][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11777'. [ 682.822753][T10816] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11776'. [ 682.854295][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11776'. [ 682.863403][T10816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11776'. [ 682.880871][T10822] netlink: 664 bytes leftover after parsing attributes in process `+}[@'. [ 682.882757][T10818] vlan2: entered allmulticast mode [ 682.933434][T10812] loop1: detected capacity change from 0 to 512 [ 682.949113][T10812] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 682.990998][T10812] EXT4-fs (loop1): mount failed [ 683.123690][T10852] netlink: 3 bytes leftover after parsing attributes in process `syz.5.11781'. [ 683.153475][T10852] 0ªX¹¦À: renamed from caif0 [ 683.165068][T10852] 0ªX¹¦À: entered allmulticast mode [ 683.170321][T10852] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 683.723746][T10890] loop0: detected capacity change from 0 to 512 [ 683.735521][T10890] EXT4-fs mount: 26 callbacks suppressed [ 683.735538][T10890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.796979][ T9233] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.068750][T10926] loop0: detected capacity change from 0 to 512 [ 684.104749][T10926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.108439][T10925] loop1: detected capacity change from 0 to 4096 [ 684.153107][T10925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.176807][ T9233] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.212465][ T5643] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.293933][T10973] 0ªX¹¦À: renamed from caif0 [ 684.319913][T10973] 0ªX¹¦À: entered allmulticast mode [ 684.325229][T10973] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 685.234113][T11046] raw_sendmsg: syz.5.11837 forgot to set AF_INET. Fix it! [ 685.324652][T11064] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 685.324652][T11064] The task syz.5.11842 (11064) triggered the difference, watch for misbehavior. [ 685.413678][T11074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.422161][T11074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.678605][T11084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.687614][T11084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.095288][T11124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.104258][T11124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.138786][ T8636] ================================================================== [ 686.146912][ T8636] BUG: KCSAN: data-race in generic_fillattr / inode_add_bytes [ 686.154387][ T8636] [ 686.156716][ T8636] read-write to 0xffff88811a82a3e8 of 8 bytes by task 11130 on cpu 1: [ 686.164866][ T8636] inode_add_bytes+0x47/0xe0 [ 686.169469][ T8636] __dquot_alloc_space+0x180/0x8a0 [ 686.174602][ T8636] shmem_inode_acct_blocks+0x126/0x230 [ 686.180072][ T8636] shmem_get_folio_gfp+0x5a7/0xd50 [ 686.185189][ T8636] shmem_write_begin+0xfc/0x1f0 [ 686.190051][ T8636] generic_perform_write+0x184/0x490 [ 686.195349][ T8636] shmem_file_write_iter+0xc5/0xf0 [ 686.200482][ T8636] __kernel_write_iter+0x2d6/0x540 [ 686.205603][ T8636] dump_user_range+0x61e/0x8f0 [ 686.210385][ T8636] elf_core_dump+0x1de7/0x1f80 [ 686.215162][ T8636] coredump_write+0xacf/0xdf0 [ 686.219849][ T8636] vfs_coredump+0x24f7/0x2e60 [ 686.224533][ T8636] get_signal+0xd84/0xf70 [ 686.228877][ T8636] arch_do_signal_or_restart+0x96/0x450 [ 686.234434][ T8636] irqentry_exit+0xfb/0x560 [ 686.238949][ T8636] asm_exc_page_fault+0x26/0x30 [ 686.243806][ T8636] [ 686.246123][ T8636] read to 0xffff88811a82a3e8 of 8 bytes by task 8636 on cpu 0: [ 686.253666][ T8636] generic_fillattr+0x27d/0x340 [ 686.258526][ T8636] shmem_getattr+0x181/0x200 [ 686.263131][ T8636] vfs_getattr_nosec+0x146/0x1e0 [ 686.268071][ T8636] vfs_statx+0x113/0x390 [ 686.272319][ T8636] vfs_fstatat+0x115/0x170 [ 686.276733][ T8636] __se_sys_newfstatat+0x55/0x260 [ 686.281774][ T8636] __x64_sys_newfstatat+0x55/0x70 [ 686.286818][ T8636] x64_sys_call+0x111f/0x3000 [ 686.291512][ T8636] do_syscall_64+0xd8/0x2a0 [ 686.296022][ T8636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.301921][ T8636] [ 686.304245][ T8636] value changed: 0x0000000000000ce8 -> 0x0000000000000cf0 [ 686.311345][ T8636] [ 686.313662][ T8636] Reported by Kernel Concurrency Sanitizer on: [ 686.319811][ T8636] CPU: 0 UID: 0 PID: 8636 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 686.331273][ T8636] Tainted: [W]=WARN [ 686.335069][ T8636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.345126][ T8636] ==================================================================