last executing test programs: 3m49.232564716s ago: executing program 3 (id=1452): socket$kcm(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8002) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe80000000000000000000ffff0000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m49.149848473s ago: executing program 3 (id=1454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3m49.108794777s ago: executing program 3 (id=1455): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3m49.090220318s ago: executing program 3 (id=1457): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x600400) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000280), &(0x7f00000002c0)=""/64, 0x40}) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet(0xa, 0x1, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="400000002000120234b6250000000e0001000f004cc8ba7b07918b851e2729300000"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m48.760771929s ago: executing program 3 (id=1462): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x5e}]}}}}}}}, 0x0) 3m48.476790204s ago: executing program 3 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3m48.476682454s ago: executing program 32 (id=1465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3m15.22596688s ago: executing program 1 (id=1941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fd", 0x9d}], 0x1) close(0x4) 3m15.052516666s ago: executing program 1 (id=1943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0xffffff80, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x2}]}]}, 0x38}}, 0x0) 3m15.026750538s ago: executing program 1 (id=1945): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001280)={0x6, 0x11, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c80)='syzkaller\x00', 0xfffffff2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000011c0)={0x2, 0x10, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001200)=[r1, r1, 0xffffffffffffffff], &(0x7f0000001240)=[{0x4, 0x3, 0xc, 0x6}], 0x10, 0xa}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000400000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="b128c28fbaf6c8834cb8058b7c01"], 0x48) fcntl$getflags(r7, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000000000)='./bus\x00', 0x3a0cc0a, &(0x7f0000000b00)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYBLOB="e21c3011806a2c166ea609cca9f2cd04e4", @ANYRES8, @ANYRESDEC], 0x43, 0xa0e, &(0x7f00000000c0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xfffd, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0xfffffffc, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3m14.054956127s ago: executing program 1 (id=1962): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000000)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x3, 0x1}}, {@generic={0x8864, "11703067c7e064cc"}}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000200), 0x7, 0x600400) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000340)={&(0x7f0000000280), &(0x7f00000002c0)=""/64, 0x40}) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="400000002000120234b6250000000e0001000f004cc8ba7b07918b851e2729300000"], 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3m13.218708292s ago: executing program 1 (id=1974): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 3m12.300204946s ago: executing program 1 (id=1980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 3m12.294939246s ago: executing program 33 (id=1980): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x320, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe}}}}}}, 0x0) 1m25.990721634s ago: executing program 0 (id=3428): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x40000, 0x3c) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 1m25.92488152s ago: executing program 0 (id=3429): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000c863af69669ed4bf5b2a78c59ea619be6c2f6cbc03379f1c0c88e5f1f6abbb7fd3fab4a0edddeb406d6135182255f5dda650804d9578817268468e982d688f74119e8ff8b3de35bf5f23e571459814279171536ea33e653d8ecc9a9fd6f0e990f034a4bfdc04db", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000230000000000001bc657dd0200006d61637094ac3c915a789580080005004edb", @ANYRESHEX=r4, @ANYBLOB="080003"], 0x44}}, 0x2000c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10110001}, 0xc, &(0x7f00000015c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="39010443b7448c000001f846cac8bc5a803127eee1d20ab0409a2fee7cf60d452385bcf821748df1aa172af56b689d833e2c6ae433195c3819780229284976833372a8b1221b1cbf7115e8ce777e", @ANYRES16=r4, @ANYBLOB="000326bd7000fbdbdf25130000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000100000020000180140002006261746164765f736c6176655f30000008000300000000002000018008000300030000001400020069703665727370616e30000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1m25.794712401s ago: executing program 0 (id=3430): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 1m25.640219945s ago: executing program 0 (id=3434): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0x9}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xff09, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r5, 0x29, 0x32, &(0x7f0000000080)="0fe60ef0b0cc723a9da4e59820400777d7a48c471a4e11a05e866e9857f28c1ef1bdb1b84f2f32142e6c3c4b4d26d9f6eb515f76bc9ab6e2171108d53c96656751ef328b09522f0d08e2f4cf0d51190a604e8b6d754feb5f3d35e26d4cf7d553b318f9308ef8e0e5f732f3c0db1fa53d5e0fcfd5fbbb9cf6ce05e67dca87ce4be81ba2b282f4fc9615ed0810ef1b8d7101ed359a9df546e56894f814acb79c804b00d7640c9a8809c411f86adad36439e79972fa0c701b60b183276febc62aee8d5c", 0xc2) setsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f00000001c0)=0x1, 0x4) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000540)="390000fa461aa0fba8ab80679467df91c09e8a722e34d7e484893ffa560200130011186809fc071200000f0023ff3f2100000017705f0d872b2eb9a95e624656faf047145bc79e0b9971bc", 0x4b}], 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x60600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m24.707734419s ago: executing program 0 (id=3439): r0 = socket$rds(0x15, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r1], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x401}, 0x11) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f0000000000)='hrtimer_start\x00', r3}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) semop(0x0, &(0x7f0000000200)=[{0x4, 0xa7dd, 0x3000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) r4 = mq_open(&(0x7f00000001c0)='\x00', 0x800, 0x20, &(0x7f0000000340)={0x8, 0x8, 0x1}) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x981, 0x47, "0441920887e8d2b791f19dd026d76d7fcb3678", 0x4, 0x200}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x4) mq_timedsend(r4, &(0x7f0000000380), 0x0, 0xe2, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1806000000000000000000000000000095000000000000002de21270bde2c47510a3fe3d9fd2b3bb6c987dd438ddf0ad339b1490d713c3075af839f78e0a4f1f0d04e8b27f3edf936680432ad82258f37e2b1b3ea3fda018cfec34389948b8633410"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x82200, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.212714133s ago: executing program 0 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000dc110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000003157000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0xf, 0xcbb3df49568492d9, 0x893, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x8000) 1m24.212260034s ago: executing program 34 (id=3445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000dc110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000003157000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r2, 0xf, 0xcbb3df49568492d9, 0x893, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r1}, 0x18) socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r5 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000001c0)) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1803000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="840100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="80040000000000000a000100aaaaaaaaaa150000080004"], 0x318}}, 0x20040800) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}}, 0x8000) 2.525969373s ago: executing program 6 (id=4546): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltaction={0x24, 0x31, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000340)={[{@barrier}, {@jqfmt_vfsold}, {@data_ordered}, {@dax}, {@bsdgroups}, {@noinit_itable}, {@i_version}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2.374560926s ago: executing program 4 (id=4554): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_emit_ethernet(0x104, &(0x7f00000004c0)={@remote, @random="81fdb5e28cb1", @void, {@llc={0x4, {@llc={0xaa, 0xf4, "7b03", "ed8f685e8190dd709e029d95ba4c6babd19256adca1e2a668b59411b05d51ac8a1c9413f034aa7c580e444d687bcc146b1971ebf81876b88431fd2063a133afa7c539ef52f7ac92d9ba3a0b450cb125e6c4fd3d2c82c1a6980a32b4ef042b237a25bc1907597fdf288d03f8790bb905e80cc7015c6a6fe81559f3e918913e8e464dad8a7b623eb8bb7f9196ce3f05bc5caa2272d878da0de317c17139e401019033c2bbae7e13859fbc2c5a702a3e040e66a0b88224523a497e9b1a40103efd9e84b7c732e57b354aded66c2bfb1242a292e2edcad3a6f9226c7a703547e5e4d403c4dbf6f36ebc5375b160ab055195847b2"}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x1c7, 0x189, 0x453, 0xe02]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r5, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r5, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x8, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 2.269989506s ago: executing program 4 (id=4556): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 2.204897761s ago: executing program 6 (id=4558): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000001c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r2 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r8, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r8, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r11}, 0x10) r12 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r12, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) setsockopt$MRT_FLUSH(r12, 0x0, 0xd4, &(0x7f0000000340)=0x1, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r13, 0x0, 0x178}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.177986024s ago: executing program 4 (id=4560): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x7, 0x9, {{0x1e, 0x4, 0x0, 0x2c, 0x78, 0x67, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x9, [{@broadcast, 0x401}, {@local, 0x1}, {@rand_addr=0x64010102, 0x80}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x8, [{@multicast1, 0x6}, {@remote, 0x5d90}, {@loopback, 0xe}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x7, 0x51, [@multicast2]}, @timestamp={0x44, 0x10, 0xb7, 0x0, 0x6, [0x4, 0x8001, 0x6]}, @generic={0x7, 0xa, "b2821d12d2f0d866"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x8914, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x800}, 0x1005, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000004f692cc706057300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000400)=[@ioring_restriction_sqe_op={0x1, 0x2f}, @ioring_restriction_register_op={0x0, 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffff89d}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) 1.876833811s ago: executing program 4 (id=4563): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000640)='cpu--8\n&\f0\xed') setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x81, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r4, &(0x7f0000000100)=""/125, 0x7d) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x50) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r6, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x1, 0x22, 0x0) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0xd, &(0x7f0000000740)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}], &(0x7f00000002c0)='GPL\x00', 0x5, 0x39, &(0x7f00000007c0)=""/57, 0x41100, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x9, 0xd, 0x1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000008c0)=[r7, r7, r7, r7, r7, r7], &(0x7f0000000900)=[{0x1, 0x5, 0xb, 0xe}, {0x0, 0x1, 0x9, 0x3}, {0x4, 0x2, 0x4, 0x5}, {0x2, 0x1, 0xa, 0x6}, {0x4, 0x5, 0x3, 0x1}, {0x5, 0x5, 0xd, 0x6}, {0x3, 0x5, 0xa, 0x6}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00'}, 0x10) 1.416969712s ago: executing program 5 (id=4575): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x7, 0x9, {{0x1e, 0x4, 0x0, 0x2c, 0x78, 0x67, 0x0, 0x7f, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x1c, 0x3, 0x9, [{@broadcast, 0x401}, {@local, 0x1}, {@rand_addr=0x64010102, 0x80}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x8, [{@multicast1, 0x6}, {@remote, 0x5d90}, {@loopback, 0xe}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x7, 0x51, [@multicast2]}, @timestamp={0x44, 0x10, 0xb7, 0x0, 0x6, [0x4, 0x8001, 0x6]}, @generic={0x7, 0xa, "b2821d12d2f0d866"}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r0, 0x8914, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x800}, 0x1005, 0x2, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000004f692cc706057300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000400)=[@ioring_restriction_sqe_op={0x1, 0x2f}, @ioring_restriction_register_op={0x0, 0x1}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffff89d}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) 1.231571199s ago: executing program 7 (id=4578): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@private, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) r4 = getuid() syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@test_dummy_encryption_v1}, {@bh}, {@delalloc}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}], [{@smackfsroot={'smackfsroot', 0x3d, '[]}!'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r4}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/loop-control\x00'}}, {@dont_measure}, {@subj_type={'subj_type', 0x3d, 'debug_want_extra_isize'}}]}, 0x3, 0x58d, &(0x7f0000000d80)="$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") statx(r2, &(0x7f0000000080)='./file0\x00', 0x4000, 0x20, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r3, r4, r5) pselect6(0x7e, &(0x7f0000000100)={0x0, 0x0, 0x1000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.230641049s ago: executing program 6 (id=4580): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) syz_emit_ethernet(0x104, &(0x7f00000004c0)={@remote, @random="81fdb5e28cb1", @void, {@llc={0x4, {@llc={0xaa, 0xf4, "7b03", "ed8f685e8190dd709e029d95ba4c6babd19256adca1e2a668b59411b05d51ac8a1c9413f034aa7c580e444d687bcc146b1971ebf81876b88431fd2063a133afa7c539ef52f7ac92d9ba3a0b450cb125e6c4fd3d2c82c1a6980a32b4ef042b237a25bc1907597fdf288d03f8790bb905e80cc7015c6a6fe81559f3e918913e8e464dad8a7b623eb8bb7f9196ce3f05bc5caa2272d878da0de317c17139e401019033c2bbae7e13859fbc2c5a702a3e040e66a0b88224523a497e9b1a40103efd9e84b7c732e57b354aded66c2bfb1242a292e2edcad3a6f9226c7a703547e5e4d403c4dbf6f36ebc5375b160ab055195847b2"}}}}}, &(0x7f0000000040)={0x1, 0x1, [0x1c7, 0x189, 0x453, 0xe02]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x304, &(0x7f0000000300)={0x0, 0x8006d85, 0x400, 0x2, 0x200118}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r5, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f00000006c0)={0xfffffffffffffff7, r5, 0x2, {0x27fffffffffffff, 0x4}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x8, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20044800}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b04200000000000000002000000540004803c0001800a0001006c696d69740000002c0002800c000240000000000000000008000540000000000c00014000000000000000010800044000000001140001800b0001007470726f78790000040002800900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 1.184794713s ago: executing program 5 (id=4582): timer_create(0xb, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0xf) close(r5) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r8 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6020400) 1.149909937s ago: executing program 6 (id=4583): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) 1.119010329s ago: executing program 2 (id=4584): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000540)=ANY=[@ANYBLOB='('], &(0x7f00000002c0), 0x600) 1.10534545s ago: executing program 6 (id=4585): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) rename(&(0x7f0000000180)='./file1\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x2200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xd, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) 1.093791712s ago: executing program 2 (id=4586): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc9b55400040000ea", 0xc, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 1.038592566s ago: executing program 5 (id=4587): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000c863af69669ed4bf5b2a78c59ea619be6c2f6cbc03379f1c0c88e5f1f6abbb7fd3fab4a0edddeb406d6135182255f5dda650804d9578817268468e982d688f74119e8ff8b3de35bf5f23e571459814279171536ea33e653d8ecc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000230000000000001bc657dd0200006d61637094ac3c915a789580080005004edb", @ANYRESHEX=r4, @ANYBLOB="080003"], 0x44}}, 0x2000c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10110001}, 0xc, &(0x7f00000015c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="39010443b7448c000001f846cac8bc5a803127eee1d20ab0409a2fee7cf60d452385bcf821748df1aa172af56b689d833e2c6ae433195c3819780229284976833372a8b1221b1cbf7115e8ce777e", @ANYRES16=r4, @ANYBLOB="000326bd7000fbdbdf25130000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000100000020000180140002006261746164765f736c6176655f30000008000300000000002000018008000300030000001400020069703665727370616e30000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 952.875864ms ago: executing program 4 (id=4588): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x200, 0x19221, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x9, 0x8, 0x0, 0x996, 0x0, 0x0, 0x0, 0x14}, 0x0, 0x3, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f00000001c0)='./file2\x00', 0x2010010, &(0x7f0000000a80)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYBLOB="9d52a8b718e4e05f7bc50417a2be7401e70cad58d9d69cc9bfa90c2e20f8bd023ea6d263ba5af0be1f0f8320979a8741cd5ebf3b794f509827167494aad334ed5ae71b661246941bbc2a1d7bc6930393c910b60d59327a5637009607c2513cea528ca857d86962f50f378117a794060d4266c460b1af1014a419b16d3148d372e4b0b374c189f6b9cb4ade2b825db5fe32096b1c802e61b43a33b219eede58196dfab8140ddbdfb698fb1e9b4ec7ac92ed9c2a3f8f30060b2598e7de6214f6a7f4ab70d437ce4053550e107742ba713a0c46aa5e736b210a28d9ec36de62bee79aff315c731e", @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="70040000580001"], 0x470}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = socket(0x1, 0x5, 0x0) r6 = epoll_create1(0x80000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000001c0)={0x80000002}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a3100000000800c00018008000140ffffffff0c000280080001407f00000100"/68], 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 929.310966ms ago: executing program 2 (id=4589): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='skb_copy_datagram_iovec\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r4, 0x0) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x257) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x23, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 917.061467ms ago: executing program 5 (id=4590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000640)='cpu--8\n&\f0\xed') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r3, &(0x7f0000000100)=""/125, 0x7d) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 852.142373ms ago: executing program 2 (id=4591): r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, 0x0, 0x0) 851.960563ms ago: executing program 2 (id=4592): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r1, &(0x7f0000000080)='./file0\x00') (fail_nth: 8) 606.911705ms ago: executing program 2 (id=4593): prctl$PR_SET_DUMPABLE(0x4, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001ffa0000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0x0, 0x0}}, 0x10) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000180)) unshare(0x62040200) 391.658465ms ago: executing program 7 (id=4594): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000c863af69669ed4bf5b2a78c59ea619be6c2f6cbc03379f1c0c88e5f1f6abbb7fd3fab4a0edddeb406d6135182255f5dda650804d9578817268468e982d688f74119e8ff8b3de35bf5f23e571459814279171536ea33e653d8ecc9a9fd6f0e990f0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000230000000000001bc657dd0200006d61637094ac3c915a789580080005004edb", @ANYRESHEX=r4, @ANYBLOB="080003"], 0x44}}, 0x2000c014) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd2, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r6, 0x0, {0x0, 0x1, 0x3}}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10110001}, 0xc, &(0x7f00000015c0)={&(0x7f0000001980)=ANY=[@ANYBLOB="39010443b7448c000001f846cac8bc5a803127eee1d20ab0409a2fee7cf60d452385bcf821748df1aa172af56b689d833e2c6ae433195c3819780229284976833372a8b1221b1cbf7115e8ce777e", @ANYRES16=r4, @ANYBLOB="000326bd7000fbdbdf25130000003800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002006261746164763000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000100000020000180140002006261746164765f736c6176655f30000008000300000000002000018008000300030000001400020069703665727370616e30000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002b"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 305.004082ms ago: executing program 7 (id=4595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f00706879310000000005002000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40882) 249.906757ms ago: executing program 7 (id=4596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r2, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000540)=ANY=[@ANYBLOB='('], &(0x7f00000002c0), 0x600) 211.968121ms ago: executing program 7 (id=4597): timer_create(0xb, 0x0, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a0000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0xf) close(r5) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r7 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) r8 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x6c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x50, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "fd4e00353b526168899bdd206946aae8b62ca7be08680e84c6847f542f9c468f3f135a0ba038378cdc45fba8a78022"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}]}, 0x6c}}, 0x8000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6020400) 157.173315ms ago: executing program 4 (id=4598): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDENABIO(r0, 0x4b36) r1 = syz_open_dev$usbfs(&(0x7f0000000680), 0x77, 0x1581) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e120, 0x3, 0xfffe}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000640)='LX[X\x00.]%Jk\xe8\xd4M\xd7\xf9m\xa7%\xe5)J81`.\x7f7\xa6\'\x1f4\x06_0\xf3\x05\xc8\xcc\xf8\r:\r*w\x8d\xbd\x02\xd3F\x83\x82u3\xc7\x1bp\xa1=\xdb\x9e8H\a\xdc(\xb9\x84\f%\xb8\xd8\xd9\xa2`2\xc6V\xda\x14@\x12-\x94e\xca\xb8\xf8\x0e\xf4\xb2\x87J3\x9eucSYT\x81\xb2t\x13*\x8c\x8d\xdf\x17\xcc\xa7nO\xbb\x05\x95;\xcd\x10\x80\xfdx$\xc6CLk.\xe4Nin\xdaXH(\x97\xd1\x03\xe6\xec\x1d)\x98\xca\x83hy\x11\a\xda\xac\xfb{\xa6\xdd\x7f\xe2\xf5\xc4p=\x14v\x91\x92Hhd42\xbb\x00\x00\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000001c0)={0x2, 0x200, 0x9, 0x1, 0x10d8, 0x9}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20040017) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000180)="1a", 0xfffffffffffffea7, 0x4000, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x1}, 0x2}, 0x18) sendmmsg$inet(r2, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/168, 0xa8}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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") 95.788561ms ago: executing program 6 (id=4599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mlockall(0x7) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") 32.198346ms ago: executing program 5 (id=4600): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000f703"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 517.32µs ago: executing program 5 (id=4601): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000180)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x5e) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0xfffffffffffffff2) 0s ago: executing program 7 (id=4602): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa01, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r4, 0x0, 0x100000002}, 0x18) kernel console output (not intermixed with test programs): kb+0x109/0x150 [ 352.556099][T14926] ? nlmon_xmit+0x4f/0x60 [ 352.556116][T14926] ? consume_skb+0x49/0x150 [ 352.556189][T14926] ? nlmon_xmit+0x4f/0x60 [ 352.556214][T14926] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 352.556305][T14926] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 352.556336][T14926] ? __dev_queue_xmit+0x148/0x1ee0 [ 352.556432][T14926] ? ref_tracker_free+0x37d/0x3e0 [ 352.556490][T14926] ? __netlink_deliver_tap+0x4dc/0x500 [ 352.556527][T14926] netlink_unicast+0x5c0/0x690 [ 352.556614][T14926] netlink_sendmsg+0x58b/0x6b0 [ 352.556699][T14926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.556734][T14926] __sock_sendmsg+0x145/0x180 [ 352.556760][T14926] ____sys_sendmsg+0x31e/0x4a0 [ 352.556846][T14926] ___sys_sendmsg+0x17b/0x1d0 [ 352.556963][T14926] __x64_sys_sendmsg+0xd4/0x160 [ 352.556997][T14926] x64_sys_call+0x17ba/0x3000 [ 352.557072][T14926] do_syscall_64+0xca/0x2b0 [ 352.557112][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.557141][T14926] RIP: 0033:0x7fdf49b9f749 [ 352.557162][T14926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.557210][T14926] RSP: 002b:00007fdf485de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.557236][T14926] RAX: ffffffffffffffda RBX: 00007fdf49df6090 RCX: 00007fdf49b9f749 [ 352.557252][T14926] RDX: 0000000038000016 RSI: 00002000000001c0 RDI: 0000000000000006 [ 352.557266][T14926] RBP: 00007fdf485de090 R08: 0000000000000000 R09: 0000000000000000 [ 352.557278][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.557290][T14926] R13: 00007fdf49df6128 R14: 00007fdf49df6090 R15: 00007fffa6ec7c88 [ 352.557309][T14926] [ 352.948713][T14994] loop7: detected capacity change from 0 to 128 [ 352.966661][ T7727] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.983313][T14994] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.996537][T14994] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.016133][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 353.026624][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.037544][T15000] FAULT_INJECTION: forcing a failure. [ 353.037544][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 353.050331][T15000] CPU: 1 UID: 0 PID: 15000 Comm: syz.2.4029 Not tainted syzkaller #0 PREEMPT(voluntary) [ 353.050363][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 353.050378][T15000] Call Trace: [ 353.050386][T15000] [ 353.050394][T15000] __dump_stack+0x1d/0x30 [ 353.050419][T15000] dump_stack_lvl+0x95/0xd0 [ 353.050502][T15000] dump_stack+0x15/0x1b [ 353.050526][T15000] should_fail_ex+0x265/0x280 [ 353.050548][T15000] should_failslab+0x8c/0xb0 [ 353.050637][T15000] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 353.050668][T15000] ? sidtab_sid2str_get+0xa0/0x130 [ 353.050704][T15000] kmemdup_noprof+0x2b/0x70 [ 353.050757][T15000] sidtab_sid2str_get+0xa0/0x130 [ 353.050786][T15000] security_sid_to_context_core+0x1eb/0x2e0 [ 353.050823][T15000] security_sid_to_context+0x27/0x40 [ 353.050932][T15000] selinux_lsmprop_to_secctx+0x67/0xf0 [ 353.050968][T15000] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 353.050995][T15000] audit_log_subj_ctx+0xa4/0x3e0 [ 353.051072][T15000] ? skb_put+0xa9/0xf0 [ 353.051100][T15000] audit_log_task_context+0x48/0x70 [ 353.051121][T15000] audit_log_task+0xf4/0x250 [ 353.051254][T15000] ? kstrtouint+0x76/0xc0 [ 353.051290][T15000] audit_seccomp+0x61/0x100 [ 353.051320][T15000] ? __seccomp_filter+0x832/0x1260 [ 353.051354][T15000] __seccomp_filter+0x843/0x1260 [ 353.051450][T15000] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 353.051553][T15000] ? vfs_write+0x7e8/0x960 [ 353.051576][T15000] __secure_computing+0x82/0x150 [ 353.051638][T15000] syscall_trace_enter+0xcf/0x1e0 [ 353.051663][T15000] do_syscall_64+0xa4/0x2b0 [ 353.051766][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.051801][T15000] RIP: 0033:0x7fdf49b9f749 [ 353.051817][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.051912][T15000] RSP: 002b:00007fdf485ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 353.051932][T15000] RAX: ffffffffffffffda RBX: 00007fdf49df5fa0 RCX: 00007fdf49b9f749 [ 353.051946][T15000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 353.052031][T15000] RBP: 00007fdf485ff090 R08: 0000000000000000 R09: 0000000000000000 [ 353.052045][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.052059][T15000] R13: 00007fdf49df6038 R14: 00007fdf49df5fa0 R15: 00007fffa6ec7c88 [ 353.052079][T15000] [ 353.292284][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 353.292300][ T29] audit: type=1326 audit(1767911088.460:11946): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.319667][ T29] audit: type=1326 audit(1767911088.710:11947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdf49b9e15c code=0x7ffc0000 [ 353.343126][ T29] audit: type=1326 audit(1767911088.710:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf49b9e1ff code=0x7ffc0000 [ 353.366721][ T29] audit: type=1326 audit(1767911088.710:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdf49b9e3aa code=0x7ffc0000 [ 353.390183][ T29] audit: type=1326 audit(1767911088.710:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.413887][ T29] audit: type=1326 audit(1767911088.710:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.447948][ T29] audit: type=1400 audit(1767911088.860:11952): avc: denied { append } for pid=15004 comm="syz.4.4030" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 353.523853][T15011] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 353.531439][T15011] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 353.595893][ T29] audit: type=1326 audit(1767911089.010:11953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.619569][ T29] audit: type=1326 audit(1767911089.020:11954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.643182][ T29] audit: type=1326 audit(1767911089.020:11955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15007 comm="syz.2.4032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 353.740018][T15005] loop4: detected capacity change from 0 to 128 [ 353.787089][T15009] netlink: 'syz.5.4028': attribute type 1 has an invalid length. [ 353.794861][T15009] netlink: 'syz.5.4028': attribute type 1 has an invalid length. [ 353.843799][T15011] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 353.941699][T15005] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.973565][T15005] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 354.317862][T13526] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.483046][T15039] loop7: detected capacity change from 0 to 512 [ 354.497753][T15039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.513928][T15039] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.576109][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.591625][T15050] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 354.599337][T15050] vhci_hcd vhci_hcd.2: invalid port number 96 [ 354.605676][T15050] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 354.605946][T15052] 9pnet_virtio: no channels available for device 127.0.0.1 [ 355.152097][T15062] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 355.169218][T15062] vhci_hcd vhci_hcd.2: invalid port number 96 [ 355.175589][T15062] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 355.269161][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4053'. [ 355.278402][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4053'. [ 355.375253][T15081] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.382737][T15081] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 355.460731][T15081] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 355.603364][ T3533] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 355.620080][ T3533] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 355.775100][T15102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15102 comm=syz.5.4065 [ 356.345915][ T4187] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 356.374461][ T4187] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.397185][T15117] loop5: detected capacity change from 0 to 2048 [ 356.410312][T15117] EXT4-fs: dax option not supported [ 356.580330][T15132] FAULT_INJECTION: forcing a failure. [ 356.580330][T15132] name failslab, interval 1, probability 0, space 0, times 0 [ 356.593015][T15132] CPU: 0 UID: 0 PID: 15132 Comm: syz.6.4076 Not tainted syzkaller #0 PREEMPT(voluntary) [ 356.593047][T15132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 356.593062][T15132] Call Trace: [ 356.593067][T15132] [ 356.593074][T15132] __dump_stack+0x1d/0x30 [ 356.593171][T15132] dump_stack_lvl+0x95/0xd0 [ 356.593232][T15132] dump_stack+0x15/0x1b [ 356.593254][T15132] should_fail_ex+0x265/0x280 [ 356.593281][T15132] should_failslab+0x8c/0xb0 [ 356.593307][T15132] kmem_cache_alloc_noprof+0x69/0x4b0 [ 356.593476][T15132] ? security_inode_alloc+0x37/0x100 [ 356.593549][T15132] security_inode_alloc+0x37/0x100 [ 356.593573][T15132] inode_init_always_gfp+0x4b7/0x500 [ 356.593596][T15132] ? __pfx_proc_alloc_inode+0x10/0x10 [ 356.593632][T15132] alloc_inode+0x58/0x170 [ 356.593656][T15132] new_inode+0x1d/0xe0 [ 356.593708][T15132] proc_pid_make_inode+0x1f/0xd0 [ 356.593733][T15132] proc_pident_instantiate+0x44/0x180 [ 356.593760][T15132] proc_pident_lookup+0x115/0x1a0 [ 356.593837][T15132] proc_tgid_base_lookup+0x2b/0x40 [ 356.593918][T15132] __lookup_slow+0x193/0x250 [ 356.593950][T15132] lookup_slow+0x3c/0x60 [ 356.593975][T15132] link_path_walk+0x946/0xe30 [ 356.594059][T15132] path_openat+0x1c0/0x23b0 [ 356.594089][T15132] ? _parse_integer_limit+0x170/0x190 [ 356.594180][T15132] do_filp_open+0x109/0x230 [ 356.594220][T15132] ? __pfx_kfree_link+0x10/0x10 [ 356.594245][T15132] do_sys_openat2+0xa6/0x150 [ 356.594352][T15132] __x64_sys_openat+0xf2/0x120 [ 356.594392][T15132] x64_sys_call+0x2b07/0x3000 [ 356.594479][T15132] do_syscall_64+0xca/0x2b0 [ 356.594514][T15132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.594534][T15132] RIP: 0033:0x7f384d25df90 [ 356.594574][T15132] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 356.594614][T15132] RSP: 002b:00007f384bcbef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 356.594703][T15132] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f384d25df90 [ 356.594715][T15132] RDX: 0000000000000002 RSI: 00007f384bcbefa0 RDI: 00000000ffffff9c [ 356.594746][T15132] RBP: 00007f384bcbefa0 R08: 0000000000000000 R09: 0000000000000000 [ 356.594764][T15132] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 356.594780][T15132] R13: 00007f384d4b6038 R14: 00007f384d4b5fa0 R15: 00007ffcb152ef48 [ 356.594885][T15132] [ 357.221114][T15149] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.229848][T15149] vhci_hcd vhci_hcd.2: invalid port number 96 [ 357.236140][T15149] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 357.270397][ T3504] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 357.278394][ T3504] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.535951][T15173] FAULT_INJECTION: forcing a failure. [ 357.535951][T15173] name failslab, interval 1, probability 0, space 0, times 0 [ 357.548847][T15173] CPU: 0 UID: 0 PID: 15173 Comm: syz.5.4094 Not tainted syzkaller #0 PREEMPT(voluntary) [ 357.548881][T15173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 357.548897][T15173] Call Trace: [ 357.548940][T15173] [ 357.548949][T15173] __dump_stack+0x1d/0x30 [ 357.548976][T15173] dump_stack_lvl+0x95/0xd0 [ 357.549058][T15173] dump_stack+0x15/0x1b [ 357.549085][T15173] should_fail_ex+0x265/0x280 [ 357.549115][T15173] should_failslab+0x8c/0xb0 [ 357.549173][T15173] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 357.549202][T15173] ? __alloc_skb+0x2ff/0x4b0 [ 357.549277][T15173] __alloc_skb+0x2ff/0x4b0 [ 357.549307][T15173] tipc_msg_create+0x47/0x230 [ 357.549348][T15173] ? path_openat+0x1e82/0x23b0 [ 357.549385][T15173] tipc_group_proto_xmit+0xb7/0x2f0 [ 357.549424][T15173] tipc_group_delete+0x97/0x290 [ 357.549454][T15173] tipc_sk_leave+0xa9/0x270 [ 357.549485][T15173] tipc_release+0x83/0xcd0 [ 357.549572][T15173] ? proc_fail_nth_write+0x13b/0x160 [ 357.549605][T15173] ? locks_remove_posix+0x1b4/0x300 [ 357.549636][T15173] sock_close+0x6b/0x150 [ 357.549666][T15173] ? __pfx_sock_close+0x10/0x10 [ 357.549771][T15173] __fput+0x29b/0x650 [ 357.549798][T15173] fput_close_sync+0xad/0x190 [ 357.549885][T15173] __x64_sys_close+0x56/0xf0 [ 357.549918][T15173] x64_sys_call+0x2c25/0x3000 [ 357.549983][T15173] do_syscall_64+0xca/0x2b0 [ 357.550025][T15173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.550050][T15173] RIP: 0033:0x7fe322f4f749 [ 357.550069][T15173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.550090][T15173] RSP: 002b:00007fe3219b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 357.550130][T15173] RAX: ffffffffffffffda RBX: 00007fe3231a5fa0 RCX: 00007fe322f4f749 [ 357.550146][T15173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 357.550161][T15173] RBP: 00007fe3219b7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.550175][T15173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.550191][T15173] R13: 00007fe3231a6038 R14: 00007fe3231a5fa0 R15: 00007ffdc6e58f68 [ 357.550214][T15173] [ 357.631812][T15181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15181 comm=syz.2.4093 [ 357.674123][T15174] infiniband !yz!: set active [ 357.829060][T15174] infiniband !yz!: added team_slave_0 [ 357.864842][T15187] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4097'. [ 357.868215][T15174] RDS/IB: !yz!: added [ 357.879289][T15174] smc: adding ib device !yz! with port count 1 [ 357.885841][T15174] smc: ib device !yz! port 1 has no pnetid [ 357.893892][T11984] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 357.914776][T15180] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 357.937536][T15188] loop6: detected capacity change from 0 to 2048 [ 357.944731][T11984] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 357.960005][T15180] vhci_hcd vhci_hcd.2: invalid port number 96 [ 357.966203][T15180] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 357.967922][T15188] EXT4-fs: dax option not supported [ 357.991084][T15192] loop4: detected capacity change from 0 to 2048 [ 358.056016][T15192] loop4: p3 < > p4 < > [ 358.060237][T15192] loop4: partition table partially beyond EOD, truncated [ 358.067474][T15192] loop4: p3 start 4284289 is beyond EOD, truncated [ 358.092818][T15192] netlink: 372 bytes leftover after parsing attributes in process `syz.4.4100'. [ 358.526687][T15223] FAULT_INJECTION: forcing a failure. [ 358.526687][T15223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.539778][T15223] CPU: 0 UID: 0 PID: 15223 Comm: syz.6.4108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 358.539810][T15223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.539825][T15223] Call Trace: [ 358.539831][T15223] [ 358.539839][T15223] __dump_stack+0x1d/0x30 [ 358.539918][T15223] dump_stack_lvl+0x95/0xd0 [ 358.539943][T15223] dump_stack+0x15/0x1b [ 358.539960][T15223] should_fail_ex+0x265/0x280 [ 358.539981][T15223] should_fail+0xb/0x20 [ 358.539998][T15223] should_fail_usercopy+0x1a/0x20 [ 358.540062][T15223] strncpy_from_user+0x27/0x260 [ 358.540178][T15223] strncpy_from_user_nofault+0x68/0xf0 [ 358.540213][T15223] bpf_probe_read_user_str+0x2a/0x70 [ 358.540242][T15223] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 358.540260][T15223] bpf_trace_run4+0x117/0x1e0 [ 358.540306][T15223] __traceiter_sched_switch+0x3f/0x60 [ 358.540325][T15223] __schedule+0xb0f/0xcd0 [ 358.540346][T15223] ? bpf_trace_run4+0x105/0x1e0 [ 358.540410][T15223] ? bpf_trace_printk+0xd6/0x1c0 [ 358.540444][T15223] __cond_resched+0x31/0x60 [ 358.540503][T15223] mutex_lock+0x22/0x90 [ 358.540533][T15223] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 358.540582][T15223] rtnl_lock+0x15/0x20 [ 358.540639][T15223] tcx_link_attach+0x69/0x540 [ 358.540720][T15223] ? __fget_files+0x184/0x1c0 [ 358.540754][T15223] link_create+0x512/0x690 [ 358.540785][T15223] __sys_bpf+0x628/0x7c0 [ 358.540815][T15223] __x64_sys_bpf+0x41/0x50 [ 358.540904][T15223] x64_sys_call+0x28e1/0x3000 [ 358.540928][T15223] do_syscall_64+0xca/0x2b0 [ 358.540965][T15223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.540993][T15223] RIP: 0033:0x7f384d25f749 [ 358.541090][T15223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.541108][T15223] RSP: 002b:00007f384bc7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.541126][T15223] RAX: ffffffffffffffda RBX: 00007f384d4b6180 RCX: 00007f384d25f749 [ 358.541140][T15223] RDX: 0000000000000020 RSI: 0000200000000a40 RDI: 000000000000001c [ 358.541194][T15223] RBP: 00007f384bc7d090 R08: 0000000000000000 R09: 0000000000000000 [ 358.541218][T15223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.541230][T15223] R13: 00007f384d4b6218 R14: 00007f384d4b6180 R15: 00007ffcb152ef48 [ 358.541248][T15223] [ 359.188618][T15229] loop7: detected capacity change from 0 to 2048 [ 359.222762][T15229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 359.256465][T15237] netlink: 'syz.6.4112': attribute type 13 has an invalid length. [ 359.306741][ T3481] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 359.315647][ T3481] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.418975][ T311] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.427997][ T311] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.436553][ T311] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.444997][ T311] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.625296][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4115'. [ 359.767050][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 359.767064][ T29] audit: type=1326 audit(1767911095.190:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe322f4f749 code=0x7ffc0000 [ 359.806924][T15254] syzkaller0: entered promiscuous mode [ 359.812498][T15254] syzkaller0: entered allmulticast mode [ 359.818456][T15253] loop5: detected capacity change from 0 to 128 [ 359.845314][ T29] audit: type=1326 audit(1767911095.220:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe322f4f749 code=0x7ffc0000 [ 359.846217][T15253] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.869033][ T29] audit: type=1326 audit(1767911095.220:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe322f4f749 code=0x7ffc0000 [ 359.904401][ T29] audit: type=1326 audit(1767911095.230:12137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe322f4f749 code=0x7ffc0000 [ 359.928033][ T29] audit: type=1326 audit(1767911095.230:12138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe322f4f783 code=0x7ffc0000 [ 359.935907][T15253] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.951506][ T29] audit: type=1326 audit(1767911095.230:12139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe322f4e1ff code=0x7ffc0000 [ 359.951556][ T29] audit: type=1326 audit(1767911095.230:12140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe322f4f7d7 code=0x7ffc0000 [ 359.951581][ T29] audit: type=1326 audit(1767911095.240:12141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe322f4df90 code=0x7ffc0000 [ 360.031365][ T29] audit: type=1326 audit(1767911095.240:12142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe322f4f34b code=0x7ffc0000 [ 360.054987][ T29] audit: type=1326 audit(1767911095.240:12143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15250 comm="syz.5.4118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe322f4e3aa code=0x7ffc0000 [ 360.176019][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 360.185316][ T311] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.256082][T15263] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4121'. [ 360.457705][T15263] ip6t_srh: unknown srh match flags 4000 [ 360.613238][ T3481] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 360.658324][T15278] loop6: detected capacity change from 0 to 2048 [ 360.675817][ T3481] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.697837][T15278] EXT4-fs: dax option not supported [ 360.940417][T15284] FAULT_INJECTION: forcing a failure. [ 360.940417][T15284] name failslab, interval 1, probability 0, space 0, times 0 [ 360.953153][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.6.4129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 360.953184][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.953232][T15284] Call Trace: [ 360.953238][T15284] [ 360.953245][T15284] __dump_stack+0x1d/0x30 [ 360.953267][T15284] dump_stack_lvl+0x95/0xd0 [ 360.953292][T15284] dump_stack+0x15/0x1b [ 360.953316][T15284] should_fail_ex+0x265/0x280 [ 360.953391][T15284] should_failslab+0x8c/0xb0 [ 360.953435][T15284] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 360.953463][T15284] ? __alloc_skb+0x2ff/0x4b0 [ 360.953492][T15284] __alloc_skb+0x2ff/0x4b0 [ 360.953518][T15284] ? __alloc_skb+0x228/0x4b0 [ 360.953624][T15284] netlink_alloc_large_skb+0xbf/0xf0 [ 360.953657][T15284] netlink_sendmsg+0x3cf/0x6b0 [ 360.953725][T15284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.953763][T15284] __sock_sendmsg+0x145/0x180 [ 360.953785][T15284] ____sys_sendmsg+0x345/0x4a0 [ 360.953899][T15284] ___sys_sendmsg+0x17b/0x1d0 [ 360.953952][T15284] __sys_sendmmsg+0x178/0x300 [ 360.954042][T15284] __x64_sys_sendmmsg+0x57/0x70 [ 360.954079][T15284] x64_sys_call+0x1e28/0x3000 [ 360.954111][T15284] do_syscall_64+0xca/0x2b0 [ 360.954170][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.954208][T15284] RIP: 0033:0x7f384d25f749 [ 360.954313][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.954335][T15284] RSP: 002b:00007f384bcbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.954357][T15284] RAX: ffffffffffffffda RBX: 00007f384d4b5fa0 RCX: 00007f384d25f749 [ 360.954497][T15284] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 360.954508][T15284] RBP: 00007f384bcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 360.954519][T15284] R10: 0600000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.954532][T15284] R13: 00007f384d4b6038 R14: 00007f384d4b5fa0 R15: 00007ffcb152ef48 [ 360.954556][T15284] [ 361.194374][T15286] loop7: detected capacity change from 0 to 128 [ 361.324438][T15298] syzkaller0: entered promiscuous mode [ 361.330062][T15298] syzkaller0: entered allmulticast mode [ 361.351629][T15286] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.364272][T15286] ext4 filesystem being mounted at /162/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.405753][T15300] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.413093][T15300] vhci_hcd vhci_hcd.2: invalid port number 96 [ 361.419401][T15300] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 361.444631][T15302] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.446085][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.453340][T15302] vhci_hcd vhci_hcd.2: invalid port number 96 [ 361.467117][T15302] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 361.529487][T15311] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 361.536985][T15311] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.577936][T15311] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 361.608271][T15313] 9p: Could not find request transport: rd [ 361.643266][T15317] pim6reg: entered allmulticast mode [ 361.782339][T15317] pim6reg: left allmulticast mode [ 362.091358][T15345] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 362.098804][T15345] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 362.187997][T15345] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 362.279070][T12266] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.337001][T12266] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.397316][T12266] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.421334][T15319] chnl_net:caif_netlink_parms(): no params data found [ 362.428472][T15350] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4146'. [ 362.456089][T15350] ip6gre1: entered allmulticast mode [ 362.645052][T12266] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.691461][T15359] netlink: 'syz.6.4147': attribute type 13 has an invalid length. [ 362.707477][T15319] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.714652][T15319] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.725352][T15361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4150'. [ 362.740996][T15319] bridge_slave_0: entered allmulticast mode [ 362.856310][T15319] bridge_slave_0: entered promiscuous mode [ 362.863408][T15319] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.870586][T15319] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.878239][T15319] bridge_slave_1: entered allmulticast mode [ 362.884886][T15319] bridge_slave_1: entered promiscuous mode [ 362.928138][T15319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.065536][T15368] syzkaller0: entered promiscuous mode [ 363.071204][T15368] syzkaller0: entered allmulticast mode [ 363.097081][T15319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.285858][T12266] bridge_slave_1: left allmulticast mode [ 363.291576][T12266] bridge_slave_1: left promiscuous mode [ 363.297287][T12266] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.322375][T12266] bridge_slave_0: left promiscuous mode [ 363.328115][T12266] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.602318][T12266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.620915][T12266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.633521][T12266] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 363.654421][T12266] bond0 (unregistering): Released all slaves [ 363.668273][T12266] bond1 (unregistering): Released all slaves [ 363.700825][T15319] team0: Port device team_slave_0 added [ 363.711033][T15319] team0: Port device team_slave_1 added [ 363.777317][T12266] hsr_slave_0: left promiscuous mode [ 363.787458][T12266] hsr_slave_1: left promiscuous mode [ 363.798687][T12266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.806134][T12266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.819064][T12266] veth1_macvtap: left promiscuous mode [ 363.824591][T12266] veth0_macvtap: left promiscuous mode [ 363.830198][T12266] veth1_vlan: left promiscuous mode [ 363.835501][T12266] veth0_vlan: left promiscuous mode [ 363.926781][T12266] team0 (unregistering): Port device team_slave_1 removed [ 363.938131][T12266] team0 (unregistering): Port device team_slave_0 removed [ 364.004913][T15319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.011964][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.037909][T15319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.120538][T15390] loop6: detected capacity change from 0 to 512 [ 364.135730][T15390] EXT4-fs: Ignoring removed i_version option [ 364.144191][T15390] EXT4-fs: journaled quota format not specified [ 364.158761][T15319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.165775][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.191766][T15319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.313610][T15319] hsr_slave_0: entered promiscuous mode [ 364.323296][T15319] hsr_slave_1: entered promiscuous mode [ 364.330926][T15319] debugfs: 'hsr0' already exists in 'hsr' [ 364.336741][T15319] Cannot create hsr debugfs directory [ 364.468319][T15397] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 364.475836][T15397] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 364.512537][T15397] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 364.767426][T15411] loop6: detected capacity change from 0 to 1024 [ 364.774205][T15411] EXT4-fs: Ignoring removed nomblk_io_submit option [ 364.798914][T15411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.844985][T15319] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.908736][T15319] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.918400][T15319] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.929341][T15319] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.971400][T15319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.986025][T15319] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.996724][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.003915][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.016558][T11751] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.023652][T11751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.041047][T15425] netlink: 'syz.6.4165': attribute type 10 has an invalid length. [ 365.095628][T15428] netlink: 'syz.6.4165': attribute type 10 has an invalid length. [ 365.123395][T15425] bond0: (slave dummy0): Releasing backup interface [ 365.138355][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4166'. [ 365.145862][T15425] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 365.169503][T15425] team0: Failed to send options change via netlink (err -105) [ 365.177136][T15425] team0: Port device dummy0 added [ 365.185065][T15428] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 365.202971][T15428] team0: Failed to send options change via netlink (err -105) [ 365.212170][T15428] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 365.290670][T15428] team0: Port device dummy0 removed [ 365.319426][T15428] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 365.331420][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.341422][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.347974][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.425376][T15427] infiniband syz2: set down [ 365.429971][T15427] infiniband syz2: added ip6_vti0 [ 365.437382][ T3533] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.448774][T15427] RDS/IB: syz2: added [ 365.452908][T15427] smc: adding ib device syz2 with port count 1 [ 365.459719][T15427] smc: ib device syz2 port 1 has no pnetid [ 365.468927][ T3533] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.484402][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.586471][T15319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.632700][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.695925][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.768309][T15449] 9p: Could not find request transport: rdm [ 365.780802][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.855000][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.862973][T15319] veth0_vlan: entered promiscuous mode [ 365.880674][T15319] veth1_vlan: entered promiscuous mode [ 365.891095][T15461] loop7: detected capacity change from 0 to 128 [ 365.912422][T15461] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.931622][T15461] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 365.937311][T15319] veth0_macvtap: entered promiscuous mode [ 365.971698][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.972624][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 365.988577][T15319] veth1_macvtap: entered promiscuous mode [ 366.008057][T15319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.031002][T15319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.057838][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.065347][T11751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.082950][T11751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.096956][T11751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.125355][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.134953][T15468] loop7: detected capacity change from 0 to 2048 [ 366.143637][T11751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.154715][T15468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 366.185539][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.220477][T15427] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.578447][T15480] syzkaller0: entered promiscuous mode [ 366.583997][T15480] syzkaller0: entered allmulticast mode [ 366.629042][T15484] syzkaller0: entered promiscuous mode [ 366.634650][T15484] syzkaller0: entered allmulticast mode [ 366.667314][T15486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4181'. [ 366.676496][T15486] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4181'. [ 366.686630][T15486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4181'. [ 366.699625][T15486] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4181'. [ 366.708818][T15486] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4181'. [ 366.717804][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 366.717818][ T29] audit: type=1326 audit(1767911102.130:12231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.747988][ T29] audit: type=1326 audit(1767911102.150:12232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.771736][ T29] audit: type=1326 audit(1767911102.150:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.795417][ T29] audit: type=1326 audit(1767911102.150:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.819105][ T29] audit: type=1326 audit(1767911102.150:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.842690][ T29] audit: type=1326 audit(1767911102.150:12236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.866341][ T29] audit: type=1326 audit(1767911102.150:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15488 comm="syz.2.4182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 366.911235][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 366.920851][T15494] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 366.928332][T15494] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.010406][T15494] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 367.023138][ T29] audit: type=1400 audit(367.009:12238): avc: denied { append } for pid=15505 comm="syz.7.4190" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 367.067897][T15513] loop5: detected capacity change from 0 to 128 [ 367.096540][T15516] loop5: detected capacity change from 0 to 128 [ 367.210565][T15521] loop5: detected capacity change from 0 to 2048 [ 367.227230][T15521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 367.780619][T15527] loop4: detected capacity change from 0 to 512 [ 367.806837][T15527] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 367.815091][T15527] EXT4-fs (loop4): orphan cleanup on readonly fs [ 367.823298][T15527] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4198: corrupted inode contents [ 367.844882][T15527] EXT4-fs (loop4): Remounting filesystem read-only [ 367.852405][T15527] EXT4-fs (loop4): 1 truncate cleaned up [ 367.858202][ T388] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 367.868807][ T388] Quota error (device loop4): write_blk: dquota write failed [ 367.876349][ T388] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 367.886450][ T388] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 367.897286][ T388] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 367.907879][T15527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.946729][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.985544][T15319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 368.013318][T15543] SELinux: Context system_u:object is not valid (left unmapped). [ 368.073492][T15548] loop4: detected capacity change from 0 to 1024 [ 368.108682][T15548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 368.128208][T15548] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.4202: lblock 0 mapped to illegal pblock 0 (length 6) [ 368.141881][T15548] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 368.154214][T15548] EXT4-fs (loop4): This should not happen!! Data will be lost [ 368.154214][T15548] [ 368.223100][T15555] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: comm syz.4.4202: lblock 0 mapped to illegal pblock 0 (length 1) [ 368.265494][T15555] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.4202: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 368.282461][T15557] loop6: detected capacity change from 0 to 128 [ 368.315321][T15555] EXT4-fs error (device loop4) in ext4_setattr:6035: Corrupt filesystem [ 368.371452][T15558] netlink: 'syz.2.4208': attribute type 10 has an invalid length. [ 368.382671][T15558] bond0: (slave dummy0): Releasing backup interface [ 368.393417][T15557] msdos: Bad value for 'gid' [ 368.398120][T15557] msdos: Bad value for 'gid' [ 368.403047][T15558] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 368.421889][T15558] team0: Failed to send options change via netlink (err -105) [ 368.429466][T15558] team0: Port device dummy0 added [ 368.440530][T15559] netlink: 'syz.2.4208': attribute type 10 has an invalid length. [ 368.465125][T15559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 368.476865][T15559] team0: Failed to send options change via netlink (err -105) [ 368.484573][T15559] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 368.499137][T15559] team0: Port device dummy0 removed [ 368.541145][T15559] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 368.852993][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 369.066221][T15581] loop5: detected capacity change from 0 to 2048 [ 369.078933][T15581] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 369.435727][T15588] netlink: 'syz.2.4220': attribute type 10 has an invalid length. [ 369.451525][T15588] bond0: (slave dummy0): Releasing backup interface [ 369.462559][T15588] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 369.471758][T15588] team0: Failed to send options change via netlink (err -105) [ 369.479346][T15588] team0: Port device dummy0 added [ 369.513863][T15596] netlink: 'syz.2.4220': attribute type 10 has an invalid length. [ 369.539252][T15596] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 369.582804][T15596] team0: Failed to send options change via netlink (err -105) [ 369.632558][T15596] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 369.646411][T15601] EXT4-fs (loop7): can't mount with data=, fs mounted w/o journal [ 369.669519][T15596] team0: Port device dummy0 removed [ 369.864531][T15604] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 369.872188][T15604] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 369.895817][T15596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 369.947726][T15319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 370.029005][T15604] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 370.385758][T15599] ip6_vti0 speed is unknown, defaulting to 1000 [ 370.428194][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'. [ 370.486817][T15619] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 370.494166][T15619] vhci_hcd vhci_hcd.2: invalid port number 96 [ 370.500387][T15619] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 370.532016][T15611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4228'. [ 370.554757][T15611] netlink: 'syz.2.4228': attribute type 1 has an invalid length. [ 370.638749][T15634] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4235'. [ 370.877453][T15651] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 370.885017][T15651] vhci_hcd vhci_hcd.2: invalid port number 96 [ 370.891165][T15651] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 370.911072][T15657] 9p: Could not find request transport: r Cj̖P=ý?}X [ 371.128835][T13859] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 371.139007][T15667] set_capacity_and_notify: 1 callbacks suppressed [ 371.139025][T15667] loop7: detected capacity change from 0 to 2048 [ 371.153434][T13859] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.238811][T15667] EXT4-fs: dax option not supported [ 371.633571][T15672] FAULT_INJECTION: forcing a failure. [ 371.633571][T15672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.646815][T15672] CPU: 0 UID: 0 PID: 15672 Comm: syz.5.4249 Not tainted syzkaller #0 PREEMPT(voluntary) [ 371.646848][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 371.646862][T15672] Call Trace: [ 371.646871][T15672] [ 371.646882][T15672] __dump_stack+0x1d/0x30 [ 371.646965][T15672] dump_stack_lvl+0x95/0xd0 [ 371.647060][T15672] dump_stack+0x15/0x1b [ 371.647085][T15672] should_fail_ex+0x265/0x280 [ 371.647113][T15672] should_fail+0xb/0x20 [ 371.647137][T15672] should_fail_usercopy+0x1a/0x20 [ 371.647225][T15672] _copy_from_user+0x1c/0xb0 [ 371.647257][T15672] sctp_getsockopt_connectx3+0xda/0x300 [ 371.647288][T15672] sctp_getsockopt+0x910/0xaa0 [ 371.647319][T15672] sock_common_getsockopt+0x60/0x70 [ 371.647422][T15672] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 371.647451][T15672] do_sock_getsockopt+0x1c4/0x210 [ 371.647480][T15672] __x64_sys_getsockopt+0x11e/0x1a0 [ 371.647576][T15672] x64_sys_call+0x2dc7/0x3000 [ 371.647625][T15672] do_syscall_64+0xca/0x2b0 [ 371.647719][T15672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.647742][T15672] RIP: 0033:0x7fcb9700f749 [ 371.647797][T15672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.647822][T15672] RSP: 002b:00007fcb95a77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 371.647844][T15672] RAX: ffffffffffffffda RBX: 00007fcb97265fa0 RCX: 00007fcb9700f749 [ 371.647909][T15672] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 371.647926][T15672] RBP: 00007fcb95a77090 R08: 0000200000000140 R09: 0000000000000000 [ 371.648085][T15672] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 371.648101][T15672] R13: 00007fcb97266038 R14: 00007fcb97265fa0 R15: 00007ffe886c2b28 [ 371.648128][T15672] [ 371.964203][T15674] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4250'. [ 372.041106][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 372.041122][ T29] audit: type=1400 audit(372.019:12327): avc: denied { bind } for pid=15675 comm="syz.5.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 372.231495][T15679] loop5: detected capacity change from 0 to 1024 [ 372.286920][T15679] EXT4-fs: inline encryption not supported [ 372.293045][T15679] journal_path: Non-blockdev passed as './file1' [ 372.299442][T15679] EXT4-fs: error: could not find journal device path [ 372.327609][ T29] audit: type=1400 audit(372.309:12328): avc: denied { bind } for pid=15682 comm="syz.7.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 372.357941][T15683] FAULT_INJECTION: forcing a failure. [ 372.357941][T15683] name failslab, interval 1, probability 0, space 0, times 0 [ 372.370792][T15683] CPU: 0 UID: 0 PID: 15683 Comm: syz.7.4253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 372.370882][T15683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.370895][T15683] Call Trace: [ 372.370902][T15683] [ 372.370910][T15683] __dump_stack+0x1d/0x30 [ 372.370979][T15683] dump_stack_lvl+0x95/0xd0 [ 372.371002][T15683] dump_stack+0x15/0x1b [ 372.371033][T15683] should_fail_ex+0x265/0x280 [ 372.371056][T15683] should_failslab+0x8c/0xb0 [ 372.371108][T15683] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 372.371133][T15683] ? __alloc_skb+0x2ff/0x4b0 [ 372.371162][T15683] __alloc_skb+0x2ff/0x4b0 [ 372.371191][T15683] ? __alloc_skb+0x228/0x4b0 [ 372.371242][T15683] netlink_alloc_large_skb+0xbf/0xf0 [ 372.371278][T15683] netlink_sendmsg+0x3cf/0x6b0 [ 372.371372][T15683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.371414][T15683] __sock_sendmsg+0x145/0x180 [ 372.371438][T15683] ____sys_sendmsg+0x31e/0x4a0 [ 372.371504][T15683] ___sys_sendmsg+0x17b/0x1d0 [ 372.371558][T15683] __x64_sys_sendmsg+0xd4/0x160 [ 372.371599][T15683] x64_sys_call+0x17ba/0x3000 [ 372.371638][T15683] do_syscall_64+0xca/0x2b0 [ 372.371674][T15683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.371696][T15683] RIP: 0033:0x7f57e9c6f749 [ 372.371711][T15683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.371729][T15683] RSP: 002b:00007f57e86cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.371797][T15683] RAX: ffffffffffffffda RBX: 00007f57e9ec5fa0 RCX: 00007f57e9c6f749 [ 372.371856][T15683] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 372.371928][T15683] RBP: 00007f57e86cf090 R08: 0000000000000000 R09: 0000000000000000 [ 372.371942][T15683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.371954][T15683] R13: 00007f57e9ec6038 R14: 00007f57e9ec5fa0 R15: 00007fff832b13d8 [ 372.371973][T15683] [ 372.603470][T15676] macsec1: entered allmulticast mode [ 372.608935][T15676] macvlan0: entered allmulticast mode [ 372.614340][T15676] veth1_vlan: entered allmulticast mode [ 372.627009][T15676] macvlan0: left allmulticast mode [ 372.632245][T15676] veth1_vlan: left allmulticast mode [ 372.739880][ T29] audit: type=1326 audit(372.719:12329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 372.763007][ T29] audit: type=1326 audit(372.719:12330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 372.786135][ T29] audit: type=1326 audit(372.719:12331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 372.801704][ T3481] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 372.809327][ T29] audit: type=1326 audit(372.719:12332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 372.845583][ T3481] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.860557][T15690] loop7: detected capacity change from 0 to 2048 [ 372.874661][T15691] loop5: detected capacity change from 0 to 128 [ 372.900300][T15691] msdos: Bad value for 'gid' [ 372.904972][T15691] msdos: Bad value for 'gid' [ 372.934072][T15690] EXT4-fs: dax option not supported [ 372.955880][T15691] netlink: 1116 bytes leftover after parsing attributes in process `syz.5.4256'. [ 372.979218][ T29] audit: type=1326 audit(372.719:12333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 373.002344][ T29] audit: type=1326 audit(372.739:12334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcb9700f783 code=0x7ffc0000 [ 373.025232][ T29] audit: type=1326 audit(372.739:12335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcb9700e1ff code=0x7ffc0000 [ 373.048130][ T29] audit: type=1326 audit(372.739:12336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15689 comm="syz.5.4256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcb9700f7d7 code=0x7ffc0000 [ 373.132561][T15691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4256'. [ 373.564595][T15706] loop4: detected capacity change from 0 to 1024 [ 373.586132][T15706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.618481][T15706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.757160][T15711] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 373.764792][T15711] vhci_hcd vhci_hcd.2: invalid port number 96 [ 373.771029][T15711] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 373.798387][T15713] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4263'. [ 373.851175][T15717] netlink: 'syz.4.4261': attribute type 10 has an invalid length. [ 373.862384][T15717] bond0: (slave dummy0): Releasing backup interface [ 373.881743][T15717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 373.907498][T15717] team0: Failed to send options change via netlink (err -105) [ 373.915053][T15717] team0: Port device dummy0 added [ 374.206871][T15717] netlink: 'syz.4.4261': attribute type 10 has an invalid length. [ 374.216293][T15717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.243751][T15737] loop7: detected capacity change from 0 to 2048 [ 374.253843][T15717] team0: Failed to send options change via netlink (err -105) [ 374.279114][T15717] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 374.317162][T15737] loop7: p1 p2 p3 [ 374.351288][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4268'. [ 374.360859][T15717] team0: Port device dummy0 removed [ 374.440121][T15748] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.469097][T15717] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.475497][T15748] vhci_hcd vhci_hcd.2: invalid port number 96 [ 374.483778][T15748] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 374.532178][T15744] team0 (unregistering): Port device team_slave_0 removed [ 374.579491][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.589131][T15744] team0 (unregistering): Port device team_slave_1 removed [ 374.768019][T15767] loop4: detected capacity change from 0 to 1024 [ 374.775532][T15767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.820541][T15761] ip6_vti0 speed is unknown, defaulting to 1000 [ 374.827208][T15770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.836133][T15770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.880495][T15776] loop6: detected capacity change from 0 to 128 [ 374.896217][T15767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.944524][T15780] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4281'. [ 374.999423][T15781] netlink: 'syz.4.4277': attribute type 10 has an invalid length. [ 375.020204][T15781] bond0: (slave dummy0): Releasing backup interface [ 375.044040][T15785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.058720][T15781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 375.067781][T15785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.075362][T15781] team0: Failed to send options change via netlink (err -105) [ 375.079387][T15785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.083015][T15781] team0: Port device dummy0 added [ 375.097298][T15785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.106558][T15785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.115516][T15785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.124719][T15785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.134000][T15785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.144747][T15789] loop5: detected capacity change from 0 to 1024 [ 375.150251][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4282'. [ 375.152439][T15789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 375.172049][T15785] macvtap1: entered promiscuous mode [ 375.177448][T15785] team0: entered promiscuous mode [ 375.182744][T15785] macvtap1: entered allmulticast mode [ 375.188566][T15785] team0: entered allmulticast mode [ 375.194526][T15785] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 375.212175][T15790] team0: left allmulticast mode [ 375.217142][T15790] team0: left promiscuous mode [ 375.223272][T15789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.225606][T15781] netlink: 'syz.4.4277': attribute type 10 has an invalid length. [ 375.262467][T15781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 375.285985][T15781] team0: Failed to send options change via netlink (err -105) [ 375.302095][T15781] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 375.320231][T15794] netlink: 'syz.5.4284': attribute type 10 has an invalid length. [ 375.338138][T15781] team0: Port device dummy0 removed [ 375.355284][T15781] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.375378][T15795] netlink: 'syz.5.4284': attribute type 10 has an invalid length. [ 375.395767][T15795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.614065][T15767] syz.4.4277 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 375.628313][T15767] CPU: 1 UID: 0 PID: 15767 Comm: syz.4.4277 Not tainted syzkaller #0 PREEMPT(voluntary) [ 375.628339][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.628351][T15767] Call Trace: [ 375.628357][T15767] [ 375.628365][T15767] __dump_stack+0x1d/0x30 [ 375.628388][T15767] dump_stack_lvl+0x95/0xd0 [ 375.628482][T15767] dump_stack+0x15/0x1b [ 375.628500][T15767] dump_header+0x81/0x240 [ 375.628518][T15767] oom_kill_process+0x295/0x350 [ 375.628538][T15767] out_of_memory+0x97b/0xb80 [ 375.628632][T15767] try_charge_memcg+0x610/0xa10 [ 375.628670][T15767] obj_cgroup_charge_pages+0xa6/0x150 [ 375.628696][T15767] __memcg_kmem_charge_page+0x9f/0x170 [ 375.628739][T15767] __alloc_frozen_pages_noprof+0x18f/0x360 [ 375.628851][T15767] alloc_pages_mpol+0xb3/0x260 [ 375.628880][T15767] alloc_pages_noprof+0x90/0x130 [ 375.628906][T15767] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 375.629000][T15767] __kvmalloc_node_noprof+0x492/0x6b0 [ 375.629107][T15767] ? ip_set_alloc+0x24/0x30 [ 375.629156][T15767] ? ip_set_alloc+0x24/0x30 [ 375.629195][T15767] ip_set_alloc+0x24/0x30 [ 375.629293][T15767] hash_netiface_create+0x282/0x740 [ 375.629330][T15767] ? __pfx_hash_netiface_create+0x10/0x10 [ 375.629435][T15767] ip_set_create+0x3cc/0x970 [ 375.629484][T15767] ? __nla_parse+0x40/0x60 [ 375.629508][T15767] nfnetlink_rcv_msg+0x4c6/0x590 [ 375.629608][T15767] netlink_rcv_skb+0x123/0x220 [ 375.629633][T15767] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 375.629663][T15767] nfnetlink_rcv+0x167/0x16c0 [ 375.629691][T15767] ? kmem_cache_free+0xe3/0x3a0 [ 375.629713][T15767] ? __kfree_skb+0x109/0x150 [ 375.629734][T15767] ? nlmon_xmit+0x4f/0x60 [ 375.629750][T15767] ? consume_skb+0x49/0x150 [ 375.629774][T15767] ? nlmon_xmit+0x4f/0x60 [ 375.629790][T15767] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 375.629836][T15767] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 375.629873][T15767] ? __dev_queue_xmit+0x148/0x1ee0 [ 375.629934][T15767] ? ref_tracker_free+0x37d/0x3e0 [ 375.629960][T15767] ? __netlink_deliver_tap+0x4dc/0x500 [ 375.630056][T15767] netlink_unicast+0x5c0/0x690 [ 375.630083][T15767] netlink_sendmsg+0x58b/0x6b0 [ 375.630126][T15767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.630154][T15767] __sock_sendmsg+0x145/0x180 [ 375.630171][T15767] ____sys_sendmsg+0x31e/0x4a0 [ 375.630271][T15767] ___sys_sendmsg+0x17b/0x1d0 [ 375.630385][T15767] __x64_sys_sendmsg+0xd4/0x160 [ 375.630414][T15767] x64_sys_call+0x17ba/0x3000 [ 375.630493][T15767] do_syscall_64+0xca/0x2b0 [ 375.630595][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.630614][T15767] RIP: 0033:0x7f09baf5f749 [ 375.630628][T15767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.630644][T15767] RSP: 002b:00007f09b99bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.630661][T15767] RAX: ffffffffffffffda RBX: 00007f09bb1b5fa0 RCX: 00007f09baf5f749 [ 375.630692][T15767] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 375.630703][T15767] RBP: 00007f09bafe3f91 R08: 0000000000000000 R09: 0000000000000000 [ 375.630714][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.630725][T15767] R13: 00007f09bb1b6038 R14: 00007f09bb1b5fa0 R15: 00007ffe38c34628 [ 375.630742][T15767] [ 375.630748][T15767] memory: usage 307200kB, limit 307200kB, failcnt 4510 [ 375.961622][T15767] memory+swap: usage 307896kB, limit 9007199254740988kB, failcnt 0 [ 375.969558][T15767] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 375.976893][T15767] Memory cgroup stats for /syz4: [ 375.994896][T15767] cache 8192 [ 376.003139][T15767] rss 4096 [ 376.006214][T15767] shmem 0 [ 376.009217][T15767] mapped_file 0 [ 376.012687][T15767] dirty 0 [ 376.015768][T15767] writeback 0 [ 376.019065][T15767] workingset_refault_anon 1308 [ 376.023847][T15767] workingset_refault_file 4043 [ 376.028717][T15767] swap 712704 [ 376.032115][T15767] swapcached 24576 [ 376.032125][T15767] pgpgin 189321 [ 376.032133][T15767] pgpgout 189310 [ 376.032141][T15767] pgfault 230181 [ 376.046510][T15767] pgmajfault 815 [ 376.050076][T15767] inactive_anon 24576 [ 376.054080][T15767] active_anon 0 [ 376.057659][T15767] inactive_file 16384 [ 376.061652][T15767] active_file 4096 [ 376.065412][T15767] unevictable 0 [ 376.068966][T15767] hierarchical_memory_limit 314572800 [ 376.074358][T15767] hierarchical_memsw_limit 9223372036854771712 [ 376.080635][T15767] total_cache 8192 [ 376.084429][T15767] total_rss 4096 [ 376.088109][T15767] total_shmem 0 [ 376.091669][T15767] total_mapped_file 0 [ 376.095861][T15767] total_dirty 0 [ 376.099158][T15804] netlink: 'syz.7.4288': attribute type 10 has an invalid length. [ 376.099563][T15767] total_writeback 0 [ 376.107944][T15804] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.111206][T15767] total_workingset_refault_anon 1308 [ 376.111221][T15767] total_workingset_refault_file 4043 [ 376.111233][T15767] total_swap 712704 [ 376.118478][T15804] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.126136][T15804] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.129934][T15767] total_swapcached 24576 [ 376.133868][T15804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.140804][T15767] total_pgpgin 189321 [ 376.148168][T15804] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.152125][T15767] total_pgpgout 189310 [ 376.159464][T15804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.163417][T15767] total_pgfault 230181 [ 376.177972][T15804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 376.181951][T15767] total_pgmajfault 815 [ 376.188049][T15805] bridge0: port 3(syz_tun) entered blocking state [ 376.194782][T15767] total_inactive_anon 24576 [ 376.194792][T15767] total_active_anon 0 [ 376.194802][T15767] total_inactive_file 16384 [ 376.199366][T15805] bridge0: port 3(syz_tun) entered disabled state [ 376.205489][T15767] total_active_file 4096 [ 376.205503][T15767] total_unevictable 0 [ 376.205520][T15767] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 376.212813][T15805] syz_tun: entered allmulticast mode [ 376.214014][T15767] ,cpuset=/ [ 376.219970][T15805] syz_tun: entered promiscuous mode [ 376.224994][T15767] ,mems_allowed=0 [ 376.230906][T15804] FAULT_INJECTION: forcing a failure. [ 376.230906][T15804] name failslab, interval 1, probability 0, space 0, times 0 [ 376.233233][T15767] ,oom_memcg=/syz4 [ 376.240363][T15804] CPU: 0 UID: 0 PID: 15804 Comm: syz.7.4288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 376.240503][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.240537][T15804] Call Trace: [ 376.240563][T15804] [ 376.240586][T15804] __dump_stack+0x1d/0x30 [ 376.240706][T15804] dump_stack_lvl+0x95/0xd0 [ 376.240783][T15804] dump_stack+0x15/0x1b [ 376.240845][T15804] should_fail_ex+0x265/0x280 [ 376.240928][T15804] should_failslab+0x8c/0xb0 [ 376.241029][T15804] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 376.241106][T15804] ? __alloc_skb+0x2ff/0x4b0 [ 376.241187][T15804] __alloc_skb+0x2ff/0x4b0 [ 376.241290][T15804] ? __alloc_skb+0x228/0x4b0 [ 376.241364][T15804] netlink_alloc_large_skb+0xbf/0xf0 [ 376.241530][T15804] netlink_sendmsg+0x3cf/0x6b0 [ 376.241639][T15804] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.241757][T15804] __sock_sendmsg+0x145/0x180 [ 376.241873][T15804] ____sys_sendmsg+0x31e/0x4a0 [ 376.242035][T15804] ___sys_sendmsg+0x17b/0x1d0 [ 376.242217][T15804] __x64_sys_sendmsg+0xd4/0x160 [ 376.242334][T15804] x64_sys_call+0x17ba/0x3000 [ 376.242456][T15804] do_syscall_64+0xca/0x2b0 [ 376.242570][T15804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.242645][T15804] RIP: 0033:0x7f57e9c6f749 [ 376.242707][T15804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.242773][T15804] RSP: 002b:00007f57e86cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.242792][T15804] RAX: ffffffffffffffda RBX: 00007f57e9ec5fa0 RCX: 00007f57e9c6f749 [ 376.242891][T15804] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000008 [ 376.242926][T15804] RBP: 00007f57e86cf090 R08: 0000000000000000 R09: 0000000000000000 [ 376.243028][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.243068][T15804] R13: 00007f57e9ec6038 R14: 00007f57e9ec5fa0 R15: 00007fff832b13d8 [ 376.243136][T15804] [ 376.245098][T15805] bridge0: port 3(syz_tun) entered blocking state [ 376.245618][T15767] ,task_memcg= [ 376.248723][T15805] bridge0: port 3(syz_tun) entered forwarding state [ 376.253889][T15767] /syz4,task=syz.4.4277,pid=15764,uid=0 [ 376.253987][T15767] Memory cgroup out of memory: Killed process 15764 (syz.4.4277) total-vm:96148kB, anon-rss:1264kB, file-rss:22488kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 376.294810][T15804] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 376.572145][T15809] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.579913][T15809] vhci_hcd vhci_hcd.2: invalid port number 96 [ 376.586120][T15809] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 376.609036][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.642500][T15319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.701643][T15819] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 376.715348][T15819] vhci_hcd vhci_hcd.2: invalid port number 96 [ 376.721516][T15819] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 376.847132][T15813] ip6_vti0 speed is unknown, defaulting to 1000 [ 376.948577][T15816] netlink: 'syz.5.4292': attribute type 1 has an invalid length. [ 376.956400][T15816] netlink: 'syz.5.4292': attribute type 1 has an invalid length. [ 377.088532][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 377.088547][ T29] audit: type=1326 audit(377.070:12509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.5.4292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 377.254185][ T29] audit: type=1326 audit(377.110:12510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.5.4292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 377.277243][ T29] audit: type=1326 audit(377.110:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.5.4292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 377.465773][T15830] loop7: detected capacity change from 0 to 512 [ 377.513819][T15830] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 377.552796][T15830] EXT4-fs (loop7): orphan cleanup on readonly fs [ 377.600541][T15830] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4296: corrupted inode contents [ 377.690166][T15830] EXT4-fs (loop7): Remounting filesystem read-only [ 377.730283][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4297'. [ 377.743370][ T29] audit: type=1400 audit(377.720:12512): avc: denied { write } for pid=15833 comm="syz.2.4298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 377.762740][ T29] audit: type=1400 audit(377.720:12513): avc: denied { ioctl } for pid=15833 comm="syz.2.4298" path="socket:[53114]" dev="sockfs" ino=53114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 377.775641][T15830] EXT4-fs (loop7): 1 truncate cleaned up [ 377.797458][ T52] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.808067][ T52] Quota error (device loop7): write_blk: dquota write failed [ 377.815502][ T52] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 377.825593][ T52] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.836175][ T52] Quota error (device loop7): write_blk: dquota write failed [ 377.837413][T15835] syz2: rxe_newlink: already configured on ip6_vti0 [ 377.843636][ T52] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 377.975217][ T52] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 377.985491][ T52] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 377.996675][T15846] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 378.022596][T15846] vhci_hcd vhci_hcd.2: invalid port number 96 [ 378.022569][T15830] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.041607][T15846] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 378.075473][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.100782][T15844] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.153275][T15854] FAULT_INJECTION: forcing a failure. [ 378.153275][T15854] name failslab, interval 1, probability 0, space 0, times 0 [ 378.165957][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.4.4305 Not tainted syzkaller #0 PREEMPT(voluntary) [ 378.165987][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 378.166003][T15854] Call Trace: [ 378.166011][T15854] [ 378.166055][T15854] __dump_stack+0x1d/0x30 [ 378.166086][T15854] dump_stack_lvl+0x95/0xd0 [ 378.166107][T15854] dump_stack+0x15/0x1b [ 378.166128][T15854] should_fail_ex+0x265/0x280 [ 378.166160][T15854] should_failslab+0x8c/0xb0 [ 378.166185][T15854] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 378.166277][T15854] ? __alloc_skb+0x2ff/0x4b0 [ 378.166325][T15854] __alloc_skb+0x2ff/0x4b0 [ 378.166347][T15854] ? __alloc_skb+0x228/0x4b0 [ 378.166371][T15854] audit_log_start+0x3a0/0x720 [ 378.166397][T15854] ? kstrtouint+0x76/0xc0 [ 378.166446][T15854] audit_seccomp+0x48/0x100 [ 378.166486][T15854] ? __seccomp_filter+0x832/0x1260 [ 378.166521][T15854] __seccomp_filter+0x843/0x1260 [ 378.166551][T15854] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 378.166635][T15854] ? vfs_write+0x7e8/0x960 [ 378.166658][T15854] ? __rcu_read_unlock+0x4f/0x70 [ 378.166684][T15854] ? __fget_files+0x184/0x1c0 [ 378.166830][T15854] __secure_computing+0x82/0x150 [ 378.166857][T15854] syscall_trace_enter+0xcf/0x1e0 [ 378.166888][T15854] do_syscall_64+0xa4/0x2b0 [ 378.166928][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.166975][T15854] RIP: 0033:0x7f09baf5f749 [ 378.167050][T15854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.167074][T15854] RSP: 002b:00007f09b99bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000087 [ 378.167093][T15854] RAX: ffffffffffffffda RBX: 00007f09bb1b5fa0 RCX: 00007f09baf5f749 [ 378.167153][T15854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000800000 [ 378.167171][T15854] RBP: 00007f09b99bf090 R08: 0000000000000000 R09: 0000000000000000 [ 378.167184][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.167196][T15854] R13: 00007f09bb1b6038 R14: 00007f09bb1b5fa0 R15: 00007ffe38c34628 [ 378.167215][T15854] [ 378.636207][T15873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.644858][T15873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.658066][T15866] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.736669][T15875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4312'. [ 378.900926][T15877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4313'. [ 378.987960][T15879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 379.020601][T15879] syz2: rxe_newlink: already configured on ip6_vti0 [ 379.113788][T15883] loop7: detected capacity change from 0 to 512 [ 379.227253][T15886] syzkaller0: entered promiscuous mode [ 379.232808][T15886] syzkaller0: entered allmulticast mode [ 379.322006][T15882] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.540991][T15895] @: renamed from vlan0 (while UP) [ 379.629104][T15902] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 379.636943][T15902] vhci_hcd vhci_hcd.2: invalid port number 96 [ 379.643074][T15902] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 379.686900][T15893] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.696012][T15911] 9p: Bad value for 'rfdno' [ 379.818373][T15915] FAULT_INJECTION: forcing a failure. [ 379.818373][T15915] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.831622][T15915] CPU: 1 UID: 0 PID: 15915 Comm: syz.4.4325 Not tainted syzkaller #0 PREEMPT(voluntary) [ 379.831652][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 379.831665][T15915] Call Trace: [ 379.831672][T15915] [ 379.831682][T15915] __dump_stack+0x1d/0x30 [ 379.831714][T15915] dump_stack_lvl+0x95/0xd0 [ 379.831743][T15915] dump_stack+0x15/0x1b [ 379.831779][T15915] should_fail_ex+0x265/0x280 [ 379.831803][T15915] should_fail+0xb/0x20 [ 379.831828][T15915] should_fail_usercopy+0x1a/0x20 [ 379.831860][T15915] _copy_to_user+0x20/0xa0 [ 379.831976][T15915] simple_read_from_buffer+0xb5/0x130 [ 379.832021][T15915] proc_fail_nth_read+0x10e/0x150 [ 379.832052][T15915] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 379.832079][T15915] vfs_read+0x1a8/0x770 [ 379.832136][T15915] ? __rcu_read_unlock+0x4f/0x70 [ 379.832163][T15915] ? __fget_files+0x184/0x1c0 [ 379.832204][T15915] ? mutex_lock+0x58/0x90 [ 379.832278][T15915] ksys_read+0xda/0x1a0 [ 379.832302][T15915] __x64_sys_read+0x40/0x50 [ 379.832343][T15915] x64_sys_call+0x2889/0x3000 [ 379.832472][T15915] do_syscall_64+0xca/0x2b0 [ 379.832519][T15915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.832541][T15915] RIP: 0033:0x7f09baf5e15c [ 379.832559][T15915] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 379.832588][T15915] RSP: 002b:00007f09b99bf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 379.832607][T15915] RAX: ffffffffffffffda RBX: 00007f09bb1b5fa0 RCX: 00007f09baf5e15c [ 379.832659][T15915] RDX: 000000000000000f RSI: 00007f09b99bf0a0 RDI: 0000000000000004 [ 379.832672][T15915] RBP: 00007f09b99bf090 R08: 0000000000000000 R09: 0000000000000000 [ 379.832685][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.832698][T15915] R13: 00007f09bb1b6038 R14: 00007f09bb1b5fa0 R15: 00007ffe38c34628 [ 379.832723][T15915] [ 380.060847][T15918] syzkaller0: entered promiscuous mode [ 380.066478][T15918] syzkaller0: entered allmulticast mode [ 380.229556][T15932] loop7: detected capacity change from 0 to 1024 [ 380.266422][T15932] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 380.378078][T15940] FAULT_INJECTION: forcing a failure. [ 380.378078][T15940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.379696][T15932] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.4332: lblock 0 mapped to illegal pblock 0 (length 6) [ 380.391266][T15940] CPU: 1 UID: 0 PID: 15940 Comm: syz.5.4333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 380.391298][T15940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 380.391311][T15940] Call Trace: [ 380.391319][T15940] [ 380.391327][T15940] __dump_stack+0x1d/0x30 [ 380.391546][T15940] dump_stack_lvl+0x95/0xd0 [ 380.391623][T15940] dump_stack+0x15/0x1b [ 380.391685][T15940] should_fail_ex+0x265/0x280 [ 380.391790][T15940] should_fail+0xb/0x20 [ 380.391837][T15940] should_fail_usercopy+0x1a/0x20 [ 380.391916][T15940] _copy_to_user+0x20/0xa0 [ 380.392011][T15940] simple_read_from_buffer+0xb5/0x130 [ 380.392082][T15940] proc_fail_nth_read+0x10e/0x150 [ 380.392187][T15940] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.392271][T15940] vfs_read+0x1a8/0x770 [ 380.392330][T15940] ? __rcu_read_unlock+0x4f/0x70 [ 380.392395][T15940] ? __fget_files+0x184/0x1c0 [ 380.392467][T15940] ? mutex_lock+0x58/0x90 [ 380.392561][T15940] ksys_read+0xda/0x1a0 [ 380.392631][T15940] __x64_sys_read+0x40/0x50 [ 380.392696][T15940] x64_sys_call+0x2889/0x3000 [ 380.392831][T15940] do_syscall_64+0xca/0x2b0 [ 380.393028][T15940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.393100][T15940] RIP: 0033:0x7fcb9700e15c [ 380.393261][T15940] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 380.393280][T15940] RSP: 002b:00007fcb95a56030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.393299][T15940] RAX: ffffffffffffffda RBX: 00007fcb97266090 RCX: 00007fcb9700e15c [ 380.393311][T15940] RDX: 000000000000000f RSI: 00007fcb95a560a0 RDI: 0000000000000006 [ 380.393339][T15940] RBP: 00007fcb95a56090 R08: 0000000000000000 R09: 0000000000000000 [ 380.393411][T15940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.393463][T15940] R13: 00007fcb97266128 R14: 00007fcb97266090 R15: 00007ffe886c2b28 [ 380.393519][T15940] [ 380.597609][T15932] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 380.610073][T15932] EXT4-fs (loop7): This should not happen!! Data will be lost [ 380.610073][T15932] [ 380.622845][T15943] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #15: comm syz.7.4332: lblock 0 mapped to illegal pblock 0 (length 1) [ 380.646864][T15943] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.4332: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 380.669621][T15943] EXT4-fs error (device loop7) in ext4_setattr:6035: Corrupt filesystem [ 380.726425][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.784287][T15947] loop7: detected capacity change from 0 to 128 [ 380.826772][T15947] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.940671][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 381.082541][T15953] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.237856][T15966] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 381.253054][T15960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4340'. [ 381.262098][T15960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4340'. [ 381.282853][T15966] vhci_hcd vhci_hcd.2: invalid port number 96 [ 381.289391][T15966] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 381.320682][T16008] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.361426][T16011] syzkaller0: entered promiscuous mode [ 381.367102][T16011] syzkaller0: entered allmulticast mode [ 381.399439][T16008] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.481362][T16008] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.650536][T16008] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.679183][T16010] netlink: 'syz.4.4343': attribute type 1 has an invalid length. [ 381.687083][T16010] netlink: 'syz.4.4343': attribute type 1 has an invalid length. [ 381.759471][T16004] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.778542][T16004] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.787264][T16004] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.816905][T16004] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.106675][T16040] ip6_vti0 speed is unknown, defaulting to 1000 [ 382.143600][ T29] kauditd_printk_skb: 105 callbacks suppressed [ 382.143677][ T29] audit: type=1326 audit(382.120:12616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 382.172964][ T29] audit: type=1326 audit(382.120:12617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16007 comm="syz.4.4343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 382.337117][T16044] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 382.344905][T16044] vhci_hcd vhci_hcd.2: invalid port number 96 [ 382.351087][T16044] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 382.362029][T16046] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 382.375319][T16046] vhci_hcd vhci_hcd.2: invalid port number 96 [ 382.381557][T16046] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 382.420609][T16049] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 382.428092][T16049] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 382.439790][T16049] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 382.516560][T12536] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 382.524642][T12536] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.543503][T16054] loop4: detected capacity change from 0 to 2048 [ 382.569851][T16054] EXT4-fs: dax option not supported [ 382.969032][ T29] audit: type=1326 audit(382.950:12618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.013694][T16071] syzkaller0: entered promiscuous mode [ 383.019375][T16071] syzkaller0: entered allmulticast mode [ 383.025119][ T29] audit: type=1326 audit(382.980:12619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.048133][ T29] audit: type=1326 audit(382.980:12620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.071294][ T29] audit: type=1326 audit(382.980:12621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.094358][ T29] audit: type=1326 audit(382.980:12622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.117589][ T29] audit: type=1326 audit(382.980:12623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.140715][ T29] audit: type=1326 audit(382.980:12624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.163969][ T29] audit: type=1326 audit(382.980:12625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16067 comm="syz.4.4363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09baf5f749 code=0x7ffc0000 [ 383.211245][T16074] netlink: 'syz.2.4366': attribute type 21 has an invalid length. [ 383.264801][T16077] loop4: detected capacity change from 0 to 512 [ 383.273197][T16077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 383.289222][T16080] syzkaller0: entered promiscuous mode [ 383.294753][T16080] syzkaller0: entered allmulticast mode [ 383.342626][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4369'. [ 383.352866][T16082] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 383.407157][T16084] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 383.414684][T16084] vhci_hcd vhci_hcd.2: invalid port number 96 [ 383.420812][T16084] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 383.445055][T16088] loop6: detected capacity change from 0 to 1024 [ 383.486133][T16088] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 383.529169][T16089] EXT4-fs (loop4): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 383.531815][T16098] vxcan1: entered allmulticast mode [ 383.592036][T16099] netlink: 'syz.2.4373': attribute type 21 has an invalid length. [ 383.600720][T16088] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.4372: lblock 0 mapped to illegal pblock 0 (length 6) [ 383.634211][T16099] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4373'. [ 383.648720][T16088] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 383.661123][T16088] EXT4-fs (loop6): This should not happen!! Data will be lost [ 383.661123][T16088] [ 383.677573][T16088] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #15: comm syz.6.4372: lblock 0 mapped to illegal pblock 0 (length 1) [ 383.765432][T16088] EXT4-fs error (device loop6): ext4_ext_remove_space:2955: inode #15: comm syz.6.4372: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 383.816415][T16088] EXT4-fs error (device loop6) in ext4_setattr:6035: Corrupt filesystem [ 383.850970][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 383.873331][T16104] serio: Serial port ptm0 [ 383.904080][T16106] loop6: detected capacity change from 0 to 128 [ 383.924579][T16106] msdos: Bad value for 'gid' [ 383.929242][T16106] msdos: Bad value for 'gid' [ 383.976147][T16106] netlink: 1116 bytes leftover after parsing attributes in process `syz.6.4376'. [ 384.023332][T16106] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4376'. [ 384.086285][T16109] syzkaller0: entered promiscuous mode [ 384.091858][T16109] syzkaller0: entered allmulticast mode [ 384.182693][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.223879][T16111] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 384.231450][T16111] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.267358][T16111] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 384.291915][T16115] loop6: detected capacity change from 0 to 128 [ 384.300332][T16115] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 384.339097][ T9105] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.351667][T16113] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4380'. [ 384.364473][T16113] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 384.426837][T16121] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.434355][T16121] vhci_hcd vhci_hcd.2: invalid port number 96 [ 384.440743][T16121] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 384.455861][T16123] syzkaller0: entered promiscuous mode [ 384.461375][T16123] syzkaller0: entered allmulticast mode [ 384.512535][T16126] ip6_vti0 speed is unknown, defaulting to 1000 [ 384.779936][T16144] loop5: detected capacity change from 0 to 1024 [ 384.789156][T16144] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 384.790172][T16146] syzkaller0: entered promiscuous mode [ 384.800162][T16144] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 384.805662][T16146] syzkaller0: entered allmulticast mode [ 384.822164][T16144] JBD2: no valid journal superblock found [ 384.828034][T16144] EXT4-fs (loop5): Could not load journal inode [ 385.012816][T11984] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 385.025687][T11984] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 385.230208][T16158] loop4: detected capacity change from 0 to 2048 [ 385.277698][T16158] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 385.362724][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.386019][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.540770][T16173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.549851][T16173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.624689][T16177] syzkaller0: entered promiscuous mode [ 385.630256][T16177] syzkaller0: entered allmulticast mode [ 385.750509][T16183] loop7: detected capacity change from 0 to 128 [ 385.769802][T16183] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.816196][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.967326][T13526] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 386.057791][T16190] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.320034][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4413'. [ 386.333827][T16205] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 386.736574][T11984] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 386.748690][T11984] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 387.182066][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 387.182082][ T29] audit: type=1326 audit(387.160:13001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.216151][T16231] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 387.218717][ T29] audit: type=1326 audit(387.190:13002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.223593][T16231] vhci_hcd vhci_hcd.2: invalid port number 96 [ 387.246655][ T29] audit: type=1326 audit(387.190:13003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.252862][T16231] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 387.276233][ T29] audit: type=1326 audit(387.190:13004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.306771][ T29] audit: type=1326 audit(387.190:13005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.329833][ T29] audit: type=1326 audit(387.190:13006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.352765][ T29] audit: type=1326 audit(387.190:13007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.375741][ T29] audit: type=1326 audit(387.190:13008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.398779][ T29] audit: type=1326 audit(387.190:13009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.421755][ T29] audit: type=1326 audit(387.190:13010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16234 comm="syz.2.4423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf49b9f749 code=0x7ffc0000 [ 387.484266][T16242] loop4: detected capacity change from 0 to 128 [ 387.491356][T16242] msdos: Bad value for 'gid' [ 387.496067][T16242] msdos: Bad value for 'gid' [ 387.505935][T16242] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.4425'. [ 387.588125][T16244] ip6_vti0 speed is unknown, defaulting to 1000 [ 387.627062][T16247] loop5: detected capacity change from 0 to 128 [ 387.636810][T16247] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.664048][T15319] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.718955][T16252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4428'. [ 387.729771][T16252] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 387.922620][T16269] loop7: detected capacity change from 0 to 128 [ 387.930128][T16269] msdos: Bad value for 'gid' [ 387.934787][T16269] msdos: Bad value for 'gid' [ 387.944293][T16269] netlink: 1116 bytes leftover after parsing attributes in process `syz.7.4435'. [ 388.244850][T16280] loop7: detected capacity change from 0 to 128 [ 388.253190][T16280] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.279491][T13342] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.374053][T16167] delete_channel: no stack [ 388.392927][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4441'. [ 388.403069][T16286] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 388.478201][T16292] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.495306][T16292] vhci_hcd vhci_hcd.2: invalid port number 96 [ 388.501457][T16292] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 388.836081][ T3504] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 388.862329][ T3504] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 388.888826][T16301] loop4: detected capacity change from 0 to 2048 [ 388.908759][T16301] EXT4-fs: dax option not supported [ 388.916600][T16303] loop5: detected capacity change from 0 to 128 [ 388.935760][T16303] msdos: Bad value for 'gid' [ 388.940517][T16303] msdos: Bad value for 'gid' [ 388.971191][T16303] netlink: 1116 bytes leftover after parsing attributes in process `syz.5.4447'. [ 389.290261][T16316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4453'. [ 389.300261][T16316] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 389.353017][T16318] loop5: detected capacity change from 0 to 512 [ 389.366163][T16318] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.379460][T16318] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4454: invalid indirect mapped block 4294967295 (level 0) [ 389.394025][T16318] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.4454: invalid indirect mapped block 4294967295 (level 1) [ 389.409046][T16318] EXT4-fs (loop5): 1 orphan inode deleted [ 389.414847][T16318] EXT4-fs (loop5): 1 truncate cleaned up [ 389.460125][ T3481] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 389.475659][ T3481] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 389.485372][T16318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.499318][T16326] loop6: detected capacity change from 0 to 2048 [ 389.507530][T16326] EXT4-fs: dax option not supported [ 389.523861][T15319] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.747403][T16323] loop4: detected capacity change from 0 to 32768 [ 389.757630][T16334] loop6: detected capacity change from 0 to 128 [ 389.764746][T16334] msdos: Bad value for 'gid' [ 389.769405][T16334] msdos: Bad value for 'gid' [ 389.775583][T16323] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 389.781758][T16323] loop4: p1 start 460800 is beyond EOD, truncated [ 389.788290][T16323] loop4: p2 size 83886080 extends beyond EOD, truncated [ 389.797412][T16334] netlink: 1116 bytes leftover after parsing attributes in process `syz.6.4459'. [ 389.808147][T16323] loop4: p5 start 460800 is beyond EOD, truncated [ 389.814649][T16323] loop4: p6 size 83886080 extends beyond EOD, truncated [ 389.958636][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'. [ 389.980702][T16345] syz2: rxe_newlink: already configured on ip6_vti0 [ 390.008633][T16347] netlink: 24 bytes leftover after parsing attributes in process `wޣ'. [ 390.030677][T16350] loop4: detected capacity change from 0 to 128 [ 390.039486][T16350] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.065464][T13526] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.088561][ T3504] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 390.097069][ T3504] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.126653][T16347] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 390.138061][T16347] EXT4-fs (loop7): orphan cleanup on readonly fs [ 390.145017][T16347] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm wޣ: Failed to acquire dquot type 1 [ 390.156988][T16347] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm wޣ: bg 0: block 40: padding at end of block bitmap is not set [ 390.172311][T16347] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 390.181731][T16347] EXT4-fs (loop7): 1 truncate cleaned up [ 390.188113][T16347] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 390.232053][T13342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.254399][T11984] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 390.258862][T16362] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.269270][T16362] vhci_hcd vhci_hcd.2: invalid port number 96 [ 390.275611][T16362] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 390.281420][T11984] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.315626][T16364] EXT4-fs: dax option not supported [ 390.341086][T16367] syzkaller0: entered promiscuous mode [ 390.346767][T16367] syzkaller0: entered allmulticast mode [ 390.455458][T16375] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4474'. [ 390.473212][T16375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.480681][T16375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.494933][T16375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.502472][T16375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.583275][T16383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4477'. [ 390.595899][T16383] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 390.687125][ T3504] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 390.695054][ T3504] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 390.710119][T16391] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.717520][T16391] vhci_hcd vhci_hcd.2: invalid port number 96 [ 390.723622][T16391] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 390.735340][T16393] bridge0: entered promiscuous mode [ 390.740602][T16393] macsec1: entered promiscuous mode [ 390.772811][T16393] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 390.790622][T16398] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 390.798178][T16398] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 390.806948][T15319] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.818617][T16398] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 390.850342][T16402] syzkaller0: entered promiscuous mode [ 390.855910][T16402] syzkaller0: entered allmulticast mode [ 390.990942][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4489'. [ 391.003096][T16409] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 391.057639][T16416] syzkaller0: entered promiscuous mode [ 391.063155][T16416] syzkaller0: entered allmulticast mode [ 391.131424][T16423] FAULT_INJECTION: forcing a failure. [ 391.131424][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 391.144237][T16423] CPU: 1 UID: 0 PID: 16423 Comm: syz.2.4494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 391.144265][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 391.144281][T16423] Call Trace: [ 391.144290][T16423] [ 391.144299][T16423] __dump_stack+0x1d/0x30 [ 391.144363][T16423] dump_stack_lvl+0x95/0xd0 [ 391.144413][T16423] dump_stack+0x15/0x1b [ 391.144547][T16423] should_fail_ex+0x265/0x280 [ 391.144578][T16423] should_failslab+0x8c/0xb0 [ 391.144621][T16423] __kmalloc_cache_noprof+0x65/0x4c0 [ 391.144652][T16423] ? sg_read+0x3ce/0xcb0 [ 391.144694][T16423] sg_read+0x3ce/0xcb0 [ 391.144806][T16423] ? __pfx_sg_read+0x10/0x10 [ 391.144847][T16423] vfs_read+0x1a8/0x770 [ 391.144879][T16423] ? __rcu_read_unlock+0x4f/0x70 [ 391.144913][T16423] ? __fget_files+0x184/0x1c0 [ 391.145040][T16423] ksys_read+0xda/0x1a0 [ 391.145076][T16423] __x64_sys_read+0x40/0x50 [ 391.145097][T16423] x64_sys_call+0x2889/0x3000 [ 391.145127][T16423] do_syscall_64+0xca/0x2b0 [ 391.145219][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.145285][T16423] RIP: 0033:0x7fdf49b9f749 [ 391.145302][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.145325][T16423] RSP: 002b:00007fdf485ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.145349][T16423] RAX: ffffffffffffffda RBX: 00007fdf49df5fa0 RCX: 00007fdf49b9f749 [ 391.145410][T16423] RDX: 00000000fffffeea RSI: 0000200000001400 RDI: 0000000000000003 [ 391.145425][T16423] RBP: 00007fdf485ff090 R08: 0000000000000000 R09: 0000000000000000 [ 391.145439][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.145454][T16423] R13: 00007fdf49df6038 R14: 00007fdf49df5fa0 R15: 00007fffa6ec7c88 [ 391.145484][T16423] [ 391.338348][T16427] msdos: Bad value for 'gid' [ 391.342984][T16427] msdos: Bad value for 'gid' [ 391.387300][T16429] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.394749][T16429] vhci_hcd vhci_hcd.2: invalid port number 96 [ 391.400894][T16429] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 391.444797][T16431] syzkaller0: entered promiscuous mode [ 391.450488][T16431] syzkaller0: entered allmulticast mode [ 391.482871][T16439] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 391.573303][T16449] syzkaller0: entered promiscuous mode [ 391.579079][T16449] syzkaller0: entered allmulticast mode [ 391.648768][T16454] msdos: Bad value for 'gid' [ 391.653497][T16454] msdos: Bad value for 'gid' [ 391.744974][T16468] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 391.759791][T16463] netlink: 'syz.4.4513': attribute type 7 has an invalid length. [ 391.780005][T16470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 391.789439][T16470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 391.801057][T16470] Symlink component flag not implemented [ 391.806945][T16470] Symlink component flag not implemented [ 391.814102][T16470] Symlink component flag not implemented (7) [ 391.820184][T16470] Symlink component flag not implemented (116) [ 391.881668][T16476] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 391.889295][T16476] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.937034][T16470] infiniband syz!: set down [ 391.941630][T16470] infiniband syz!: added team_slave_0 [ 391.960199][T16470] RDS/IB: syz!: added [ 391.964474][T16470] smc: adding ib device syz! with port count 1 [ 391.971033][T16470] smc: ib device syz! port 1 has no pnetid [ 392.397381][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 392.397396][ T29] audit: type=1326 audit(392.380:13816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.429676][ T29] audit: type=1326 audit(392.420:13817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.452799][ T29] audit: type=1326 audit(392.420:13818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.475811][ T29] audit: type=1326 audit(392.420:13819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.498838][ T29] audit: type=1326 audit(392.420:13820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.521918][ T29] audit: type=1326 audit(392.420:13821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.544813][ T29] audit: type=1326 audit(392.420:13822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.567863][ T29] audit: type=1326 audit(392.420:13823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.590782][ T29] audit: type=1326 audit(392.420:13824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.613849][ T29] audit: type=1326 audit(392.420:13825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16482 comm="syz.5.4521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb9700f749 code=0x7ffc0000 [ 392.856626][T16504] set_capacity_and_notify: 6 callbacks suppressed [ 392.856645][T16504] loop7: detected capacity change from 0 to 2048 [ 392.870543][T16503] FAULT_INJECTION: forcing a failure. [ 392.870543][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.883702][T16503] CPU: 1 UID: 0 PID: 16503 Comm: syz.4.4530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.883731][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.883743][T16503] Call Trace: [ 392.883749][T16503] [ 392.883755][T16503] __dump_stack+0x1d/0x30 [ 392.883797][T16503] dump_stack_lvl+0x95/0xd0 [ 392.883821][T16503] dump_stack+0x15/0x1b [ 392.883919][T16503] should_fail_ex+0x265/0x280 [ 392.883947][T16503] should_fail+0xb/0x20 [ 392.883970][T16503] should_fail_usercopy+0x1a/0x20 [ 392.884072][T16503] _copy_from_user+0x1c/0xb0 [ 392.884104][T16503] addrconf_del_ifaddr+0x5d/0xe0 [ 392.884136][T16503] inet6_ioctl+0x84/0x190 [ 392.884160][T16503] ? ioctl_has_perm+0x255/0x2a0 [ 392.884239][T16503] sock_do_ioctl+0x73/0x220 [ 392.884280][T16503] sock_ioctl+0x41b/0x610 [ 392.884385][T16503] ? __pfx_sock_ioctl+0x10/0x10 [ 392.884473][T16503] __se_sys_ioctl+0xce/0x140 [ 392.884510][T16503] __x64_sys_ioctl+0x43/0x50 [ 392.884595][T16503] x64_sys_call+0x14b0/0x3000 [ 392.884661][T16503] do_syscall_64+0xca/0x2b0 [ 392.884745][T16503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.884771][T16503] RIP: 0033:0x7f09baf5f749 [ 392.884786][T16503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.884804][T16503] RSP: 002b:00007f09b99bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.884828][T16503] RAX: ffffffffffffffda RBX: 00007f09bb1b5fa0 RCX: 00007f09baf5f749 [ 392.884841][T16503] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000008 [ 392.884858][T16503] RBP: 00007f09b99bf090 R08: 0000000000000000 R09: 0000000000000000 [ 392.884873][T16503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.884889][T16503] R13: 00007f09bb1b6038 R14: 00007f09bb1b5fa0 R15: 00007ffe38c34628 [ 392.884910][T16503] [ 393.071259][T16504] EXT4-fs: dax option not supported [ 393.288274][T16522] loop6: detected capacity change from 0 to 128 [ 393.295151][T16522] msdos: Bad value for 'gid' [ 393.299841][T16522] msdos: Bad value for 'gid' [ 393.362743][T16529] FAULT_INJECTION: forcing a failure. [ 393.362743][T16529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.375879][T16529] CPU: 0 UID: 0 PID: 16529 Comm: syz.5.4540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 393.375910][T16529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.375926][T16529] Call Trace: [ 393.375993][T16529] [ 393.376020][T16529] __dump_stack+0x1d/0x30 [ 393.376045][T16529] dump_stack_lvl+0x95/0xd0 [ 393.376068][T16529] dump_stack+0x15/0x1b [ 393.376088][T16529] should_fail_ex+0x265/0x280 [ 393.376138][T16529] should_fail+0xb/0x20 [ 393.376213][T16529] should_fail_usercopy+0x1a/0x20 [ 393.376292][T16529] _copy_from_user+0x1c/0xb0 [ 393.376321][T16529] ___sys_sendmsg+0xc1/0x1d0 [ 393.376371][T16529] __x64_sys_sendmsg+0xd4/0x160 [ 393.376425][T16529] x64_sys_call+0x17ba/0x3000 [ 393.376451][T16529] do_syscall_64+0xca/0x2b0 [ 393.376488][T16529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.376511][T16529] RIP: 0033:0x7fcb9700f749 [ 393.376607][T16529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.376657][T16529] RSP: 002b:00007fcb95a77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.376677][T16529] RAX: ffffffffffffffda RBX: 00007fcb97265fa0 RCX: 00007fcb9700f749 [ 393.376690][T16529] RDX: 0000000000004810 RSI: 00002000000002c0 RDI: 0000000000000008 [ 393.376703][T16529] RBP: 00007fcb95a77090 R08: 0000000000000000 R09: 0000000000000000 [ 393.376716][T16529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.376729][T16529] R13: 00007fcb97266038 R14: 00007fcb97265fa0 R15: 00007ffe886c2b28 [ 393.376749][T16529] [ 393.599054][T16538] syzkaller0: entered promiscuous mode [ 393.604577][T16538] syzkaller0: entered allmulticast mode [ 393.617540][T16535] tipc: Started in network mode [ 393.622474][T16535] tipc: Node identity 82aacb06dec2, cluster identity 4711 [ 393.629775][T16535] tipc: Enabled bearer , priority 0 [ 393.637723][ T310] tipc: Resetting bearer [ 393.649802][T16540] FAULT_INJECTION: forcing a failure. [ 393.649802][T16540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.663113][T16540] CPU: 1 UID: 0 PID: 16540 Comm: syz.6.4544 Not tainted syzkaller #0 PREEMPT(voluntary) [ 393.663136][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.663148][T16540] Call Trace: [ 393.663251][T16540] [ 393.663271][T16540] __dump_stack+0x1d/0x30 [ 393.663301][T16540] dump_stack_lvl+0x95/0xd0 [ 393.663326][T16540] dump_stack+0x15/0x1b [ 393.663428][T16540] should_fail_ex+0x265/0x280 [ 393.663446][T16540] should_fail+0xb/0x20 [ 393.663466][T16540] should_fail_usercopy+0x1a/0x20 [ 393.663486][T16540] _copy_from_user+0x1c/0xb0 [ 393.663626][T16540] do_semtimedop+0x153/0x220 [ 393.663656][T16540] __x64_sys_semop+0x41/0x50 [ 393.663671][T16540] x64_sys_call+0x2d17/0x3000 [ 393.663691][T16540] do_syscall_64+0xca/0x2b0 [ 393.663727][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.663744][T16540] RIP: 0033:0x7f384d25f749 [ 393.663756][T16540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.663777][T16540] RSP: 002b:00007f384bcbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 393.663793][T16540] RAX: ffffffffffffffda RBX: 00007f384d4b5fa0 RCX: 00007f384d25f749 [ 393.663803][T16540] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000000 [ 393.663813][T16540] RBP: 00007f384bcbf090 R08: 0000000000000000 R09: 0000000000000000 [ 393.663823][T16540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.663833][T16540] R13: 00007f384d4b6038 R14: 00007f384d4b5fa0 R15: 00007ffcb152ef48 [ 393.663849][T16540] [ 393.824279][T16533] tipc: Resetting bearer [ 393.840393][T16533] tipc: Disabling bearer [ 393.938801][T16552] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 393.954154][T16552] vhci_hcd vhci_hcd.2: invalid port number 96 [ 393.960457][T16552] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 393.975003][T16555] loop6: detected capacity change from 0 to 2048 [ 393.985077][T16557] loop7: detected capacity change from 0 to 128 [ 394.027205][T16555] EXT4-fs: dax option not supported [ 394.034212][T16557] msdos: Bad value for 'gid' [ 394.039130][T16557] msdos: Bad value for 'gid' [ 394.059284][T16557] __nla_validate_parse: 18 callbacks suppressed [ 394.059376][T16557] netlink: 1116 bytes leftover after parsing attributes in process `syz.7.4551'. [ 394.098392][T16557] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4551'. [ 394.233128][T16576] syzkaller0: entered promiscuous mode [ 394.238795][T16576] syzkaller0: entered allmulticast mode [ 394.264844][T16582] netlink: 'syz.6.4558': attribute type 10 has an invalid length. [ 394.273688][T16582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4558'. [ 394.285054][T16582] dummy0: entered promiscuous mode [ 394.290722][T16582] dummy0: entered allmulticast mode [ 394.434810][T16582] bond0: (slave dummy0): Releasing backup interface [ 394.498357][T16582] bridge0: port 1(dummy0) entered blocking state [ 394.505747][T16582] bridge0: port 1(dummy0) entered disabled state [ 394.767315][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4569'. [ 394.786312][T16609] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 394.912845][T16619] syzkaller0: entered promiscuous mode [ 394.918458][T16619] syzkaller0: entered allmulticast mode [ 395.176202][T16631] loop7: detected capacity change from 0 to 1024 [ 395.193169][T16631] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 395.227811][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4582'. [ 395.238115][T16642] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 395.262272][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4583'. [ 395.327430][T16650] syzkaller0: entered promiscuous mode [ 395.327488][T16652] loop6: detected capacity change from 0 to 1024 [ 395.328420][T16652] EXT4-fs: Ignoring removed nomblk_io_submit option [ 395.333036][T16650] syzkaller0: entered allmulticast mode [ 395.366212][T16652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.425525][T16659] loop4: detected capacity change from 0 to 128 [ 395.434217][T16659] msdos: Bad value for 'gid' [ 395.438908][T16659] msdos: Bad value for 'gid' [ 395.449803][T16659] netlink: 1116 bytes leftover after parsing attributes in process `syz.4.4588'. [ 395.520584][T16666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4588'. [ 395.533700][T16668] FAULT_INJECTION: forcing a failure. [ 395.533700][T16668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 395.547041][T16668] CPU: 1 UID: 0 PID: 16668 Comm: syz.2.4592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 395.547124][T16668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 395.547140][T16668] Call Trace: [ 395.547148][T16668] [ 395.547158][T16668] __dump_stack+0x1d/0x30 [ 395.547189][T16668] dump_stack_lvl+0x95/0xd0 [ 395.547249][T16668] dump_stack+0x15/0x1b [ 395.547276][T16668] should_fail_ex+0x265/0x280 [ 395.547307][T16668] should_fail_alloc_page+0xf2/0x100 [ 395.547343][T16668] __alloc_frozen_pages_noprof+0x109/0x360 [ 395.547411][T16668] alloc_pages_mpol+0xb3/0x260 [ 395.547452][T16668] folio_alloc_noprof+0x97/0x150 [ 395.547533][T16668] filemap_alloc_folio_noprof+0x93/0x230 [ 395.547565][T16668] __filemap_get_folio_mpol+0x295/0x650 [ 395.547600][T16668] simple_write_begin+0x48/0x370 [ 395.547643][T16668] ? selinux_inode_init_security+0x33f/0x3c0 [ 395.547754][T16668] page_symlink+0x15e/0x290 [ 395.547790][T16668] ramfs_symlink+0x132/0x1b0 [ 395.547898][T16668] vfs_symlink+0x1b4/0x1f0 [ 395.547959][T16668] do_symlinkat+0xf0/0x470 [ 395.547989][T16668] __x64_sys_symlinkat+0x5a/0x70 [ 395.548015][T16668] x64_sys_call+0x2a36/0x3000 [ 395.548100][T16668] do_syscall_64+0xca/0x2b0 [ 395.548174][T16668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.548203][T16668] RIP: 0033:0x7fdf49b9f749 [ 395.548222][T16668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.548326][T16668] RSP: 002b:00007fdf485ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 395.548358][T16668] RAX: ffffffffffffffda RBX: 00007fdf49df5fa0 RCX: 00007fdf49b9f749 [ 395.548375][T16668] RDX: 0000200000000080 RSI: 0000000000000004 RDI: 0000200000000400 [ 395.548387][T16668] RBP: 00007fdf485ff090 R08: 0000000000000000 R09: 0000000000000000 [ 395.548399][T16668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.548411][T16668] R13: 00007fdf49df6038 R14: 00007fdf49df5fa0 R15: 00007fffa6ec7c88 [ 395.548537][T16668] [ 395.937174][T16672] netlink: 'syz.6.4585': attribute type 10 has an invalid length. [ 395.946108][T16672] dummy0: left allmulticast mode [ 395.951197][T16672] dummy0: left promiscuous mode [ 395.956478][T16672] bridge0: port 1(dummy0) entered disabled state [ 395.976402][T16672] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 395.986082][T16672] team0: Failed to send options change via netlink (err -105) [ 395.993666][T16672] team0: Port device dummy0 added [ 396.015151][T16675] netlink: 'syz.6.4585': attribute type 10 has an invalid length. [ 396.064758][T16674] ip6_vti0 speed is unknown, defaulting to 1000 [ 396.129074][T16680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4595'. [ 396.167335][T16675] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 396.203568][T16675] team0: Port device dummy0 removed [ 396.211984][T16675] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 396.222395][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4597'. [ 396.232536][T16684] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 396.262694][T16686] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 396.270175][T16686] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 396.307739][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.414098][T16695] loop6: detected capacity change from 0 to 2048 [ 396.466360][T16698] ================================================================== [ 396.474520][T16698] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 396.481936][T16698] [ 396.484272][T16698] write to 0xffff8881698f2000 of 4096 bytes by task 16697 on cpu 0: [ 396.492262][T16698] _copy_from_iter+0x106/0xe70 [ 396.497050][T16698] copy_page_from_iter+0x178/0x2a0 [ 396.502194][T16698] process_vm_rw+0x659/0x960 [ 396.506822][T16698] __x64_sys_process_vm_writev+0x78/0x90 [ 396.512482][T16698] x64_sys_call+0x27ef/0x3000 [ 396.517188][T16698] do_syscall_64+0xca/0x2b0 [ 396.521741][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.527667][T16698] [ 396.530027][T16698] write to 0xffff8881698f2000 of 4096 bytes by task 16698 on cpu 1: [ 396.538028][T16698] _copy_from_iter+0x106/0xe70 [ 396.542826][T16698] copy_page_from_iter+0x178/0x2a0 [ 396.547973][T16698] process_vm_rw+0x659/0x960 [ 396.552587][T16698] __x64_sys_process_vm_writev+0x78/0x90 [ 396.558245][T16698] x64_sys_call+0x27ef/0x3000 [ 396.562953][T16698] do_syscall_64+0xca/0x2b0 [ 396.567501][T16698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.573435][T16698] [ 396.575780][T16698] Reported by Kernel Concurrency Sanitizer on: [ 396.581957][T16698] CPU: 1 UID: 0 PID: 16698 Comm: syz.7.4602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 396.591789][T16698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 396.601872][T16698] ================================================================== [ 396.613965][T16695] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 397.182048][ T9105] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.