last executing test programs: 8.391867364s ago: executing program 3 (id=3772): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x1, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x0, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0xa902}, {0x3}, {}, {0x0, 0x400, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6, 0x0, 0xfffffffe}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5155}, {}, {0x6e5000cb, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x3, 0x2}, {}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2ff1}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x80}, {0xfffffffd}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x1}, {0x400, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe, 0x0, 0xb5}, {0x0, 0x2}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00, 0x6a76d8f4}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x100000, 0x0, 0x8}, {0x9}, {0x9}, {0x0, 0x7fffffff}, {0x3}, {0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xf8, 0x80000000}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {0x122}, {0x0, 0x8}, {0x80000000, 0x3, 0x6a}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x200}], [{}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x5, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0xe}, {0x4}, {0x0, 0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000640)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000006b0000006b000000080000000f0000000000000803000000000000000100000d000000000000000001000000051000000000000700000000050000000200008f0300000005000000090000020400000004000000060000001eb4000055adec14be287b2edd46df80000000000000000300000000020000000200000007000000d920a61c0cadf0bd84c20f8b38cf6a306600878cc9cf4da36538402f46b9fca132f8690447183be3dc9c25ac"], &(0x7f0000000580)=""/141, 0x8c, 0x8d, 0x0, 0x200, 0x10000, @value=r1}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x109301) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYRESHEX=r3], 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x40040) write$binfmt_script(r5, &(0x7f0000002f80)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x2007, &(0x7f0000000980)=0x0) io_destroy(r8) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 8.061209147s ago: executing program 3 (id=3776): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x9c}}, 0x24000000) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000380)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4e21, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x4, "7d2a58d3d1bc393120755ad8990b341b6ff9f05db886db33106e8efa063df1e6", "56e26192849126844cc7efd176799a6b", {"851ccfcb40a41b613bc37f85d55a3b1d", "1d5284e7f0b7f82004c1ad9ea28c4798"}}}}}}}}, 0x0) timer_create(0x6, 0x0, &(0x7f00000008c0)) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4f62, 0x7, @local, 0x8}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 7.196739633s ago: executing program 3 (id=3790): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, 0x0}}], 0x1, 0x4044) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000240)=@fragment={0x33, 0x0, 0x4d, 0x1, 0x0, 0x5, 0x68}, 0x8) 7.145526998s ago: executing program 3 (id=3792): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') (fail_nth: 1) 7.060142537s ago: executing program 3 (id=3794): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000540)={@loopback, @private=0xa010102, 0xffffffffffffffff, "c4deb42e38e4e5d6166e4d205ffafab8bbb275c2d0e9082cf7de42e6d357d633", 0x1, 0xa5, 0x5}, 0x3c) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x1a4, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) rt_sigaction(0x6, 0x0, 0x0, 0x8, &(0x7f0000001300)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semget$private(0x0, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000280)={'veth0\x00', {0x2, 0x4e20, @empty}}) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2e}}], 0x1, 0x0, 0x0) 3.342629987s ago: executing program 3 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 3.342447597s ago: executing program 32 (id=3850): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x8, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 2.170893234s ago: executing program 1 (id=3869): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 2.025554258s ago: executing program 1 (id=3871): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) close(0x3) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x2000, @loopback, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r2, r3, 0x0, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x66}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4aa3f378686018d5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xb2, 0x7, 0x1, 0x0, "cc23b916730b74d04aafdf1bfd41ebb6ec71270b792acfbf878070e91cc71d334eb7cee17a16fae517ae5e69887deeb70c4243366e16248c211e2805b8c10edc7c076d9f7fb049a436ce9122b707fb25f3397ac3202613e08a874307bfe1b062570c760d38c93e351599c2f41a82528e25c0fcbf2d24b9bded789c7179dae5fedbb2ee8c3f97adf61da598873608afadefaae278cabc7336dfaa14fe571f1125047dd7a589b9eb46603e7c44fa59"}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "9c5349317ff21714018d691841afc51a5288a9edbd69f58953221eafa91e5c2bde2d2547a1f57dc2ef1d94d24bfeae9595a70181f938d02715"}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10001}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b8}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_emit_ethernet(0xfcd, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) r6 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbec76987bc82ecbe0a1d72f8e4cca4561c04d9a60e6711b36cd81977fbb0c5f5a19e8fcb43c183e481ffffd243ed4b1e8d5610e22232a654403ad79ae6059f5eeb2ba04c8c95f8ec7260a4aa6ae3604989c6048d3814bd75fe7e28490012ba", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ppoll(&(0x7f0000000140)=[{r4, 0x4000}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1) 1.598983521s ago: executing program 2 (id=3874): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents64(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0], 0xfe, 0x2b7, &(0x7f0000001340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x6, 0x5, {0xe, 0x6d, 0xc, 0xb, 0x5, 0x9, 0x8, 0xffff7fff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 1.522228779s ago: executing program 2 (id=3875): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='afs_notify_call\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x646a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000340)=[{0x1e, 0x7f, 0x48, 0xfd, @time={0x9, 0x6}, {0x0, 0xff}, {0x6}, @result}, {0x1, 0x7f, 0xa, 0x0, @time={0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, @time=@tick=0x2}], 0x38) r5 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x1}, 0xc}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/254, 0x9f, 0xfe, 0x0, 0x1, 0x10000}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="270e28bd700000000000042fd000"], 0x14}, 0x1, 0x40030000000000}, 0x4000) inotify_init1(0x0) 1.490423961s ago: executing program 2 (id=3876): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='afs_notify_call\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x646a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000340)=[{0x1e, 0x7f, 0x48, 0xfd, @time={0x9, 0x6}, {0x0, 0xff}, {0x6}, @result}, {0x1, 0x7f, 0xa, 0x0, @time={0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, @time=@tick=0x2}], 0x38) r5 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x1}, 0xc}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb0100180000000000000080000000800000000700000008800000040000060400000003000000ff0100000c00000028000000030000000300001005000000080000000300000000000008000000000f00000003000004020000000900000001000000000000000f00000003000000030000000000000004000000080000000d0000000000000c0200000007000000000000070000000000115f00003000817ff0faa6c6977324ce277d67ae690c30bc658462049c0fbad29c13848b6084f54a11c4fae11ebc3dd68bbd0df542baaf0d84729684be1bf29b83cea6830d79bb4074e484871f092ca1056743efc5283e8fbcf9654a4944542f4a3c7dd6a308443625a3fd045e12c73e039bed240b19617fa4b5b8b6edb48a"], &(0x7f0000000f40)=""/254, 0x9f, 0xfe, 0x0, 0x1, 0x10000}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 1.456879615s ago: executing program 2 (id=3877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x0, 0x4}, {0xfff3, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 1.40066154s ago: executing program 2 (id=3878): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) 1.299150071s ago: executing program 0 (id=3879): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xf, @mcast2, 0x7}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x4, 0x0, {0xa, 0x4f62, 0x7, @local, 0x8}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1.251873815s ago: executing program 0 (id=3880): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 989.019112ms ago: executing program 1 (id=3883): socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00') 825.965828ms ago: executing program 0 (id=3885): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xb8, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x66}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4aa3f378686018d5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x110, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xb2, 0x7, 0x1, 0x0, "cc23b916730b74d04aafdf1bfd41ebb6ec71270b792acfbf878070e91cc71d334eb7cee17a16fae517ae5e69887deeb70c4243366e16248c211e2805b8c10edc7c076d9f7fb049a436ce9122b707fb25f3397ac3202613e08a874307bfe1b062570c760d38c93e351599c2f41a82528e25c0fcbf2d24b9bded789c7179dae5fedbb2ee8c3f97adf61da598873608afadefaae278cabc7336dfaa14fe571f1125047dd7a589b9eb46603e7c44fa59"}, @NFTA_RULE_USERDATA={0x3a, 0x7, 0x1, 0x0, "9c5349317ff21714018d691841afc51a5288a9edbd69f58953221eafa91e5c2bde2d2547a1f57dc2ef1d94d24bfeae9595a70181f938"}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10001}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2c4}, 0x1, 0x0, 0x0, 0x850}, 0x0) 771.629983ms ago: executing program 1 (id=3886): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x3, 0x300) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 768.240344ms ago: executing program 0 (id=3887): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='afs_notify_call\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x646a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000340)=[{0x1e, 0x7f, 0x48, 0xfd, @time={0x9, 0x6}, {0x0, 0xff}, {0x6}, @result}, {0x1, 0x7f, 0xa, 0x0, @time={0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, @time=@tick=0x2}], 0x38) r5 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x1}, 0xc}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/254, 0x9f, 0xfe, 0x0, 0x1, 0x10000}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8, @ANYBLOB="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", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 685.643502ms ago: executing program 0 (id=3888): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000540)={@loopback, @private=0xa010102, 0xffffffffffffffff, "c4deb42e38e4e5d6166e4d205ffafab8bbb275c2d0e9082cf7de42e6d357d633", 0x1, 0xa5, 0x5}, 0x3c) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x1b0, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x60, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x11c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) rt_sigaction(0x6, 0x0, 0x0, 0x8, &(0x7f0000001300)) semget$private(0x0, 0x6, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000280)={'veth0\x00', {0x2, 0x4e20, @empty}}) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000002c0)=""/182, 0xb6}], 0x2e}}], 0x1, 0x0, 0x0) 488.807851ms ago: executing program 2 (id=3890): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000000090001007379fbff000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000004213c0000000c00000000000000004b43085d866d85293061c8000073797a310000000009dc010073797a3000000000100003800c0000800400018004000a801400000010b60b483b000100001941523922cb012a407f000000000000000000"], 0xc0}}, 0x40088) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) write(r3, &(0x7f00000001c0)="f1", 0x1) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 487.844202ms ago: executing program 1 (id=3899): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='afs_notify_call\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x646a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000340)=[{0x1e, 0x7f, 0x48, 0xfd, @time={0x9, 0x6}, {0x0, 0xff}, {0x6}, @result}, {0x1, 0x7f, 0xa, 0x0, @time={0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, @time=@tick=0x2}], 0x38) r5 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x1}, 0xc}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/254, 0x9f, 0xfe, 0x0, 0x1, 0x10000}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8, @ANYBLOB="e92c0d2756fc18b91aec4db1b5c638c83705e461795fedc3ce97e16e7abbdaf090a14c8245cef05d6d6e0ee7289368a97055d9c5668af6068605883fe5d10a9d91ccf2698fede0077fa594de081325c9bfe90c66f30765fcdb8d469d1c150ac2574451aba63fd54ef057c14832f28a07ce2cf857027ca3b1a45404b2f4b744f9be2d8bc327a3ba327acbe01bc14c2b7de01624365a1dd6c4ab636305408731a8cdb4065a37e681e037bc1503f555ded6414b944be87745183dfd0f6e2ad4ef5eff84dabb8de799a361c6e64f4611127abc40faf2f1a64f42f024c11cff90382a51f0a4ff93a30a721344fd977c69b40ca194d56d2a96ca922337c5febb3eb9ffdf0828baa42d4d6a128ae8ec288d4dd4b79eab6498f974b089e9e80c8a6e71d5201aa2e138fc24015fbbb48b75ba87fa22a5c1fc777fe4728bc5904de7ec9b3abb545250d3306eb58cd3de160169ea554becd47b95eb26d709be96a5b20de1ed23b7bd6eb4e3723bfd22be322a16cfbc0af2dfdde03099dd91d2daccfa5d7da4669932a80b3e0d5ec58ac18f3359ef929277a8e6b37b71d49802c479bb92ca5009ab88399ba57e66c6f8f87541d9531252e4c71462df25b2e5abf6020d97e72f1dcaa6255328835347e3451254d0d1ff8c77d198187eae66a6b51bddb1e148890f25489f6b89ea895edb75a0ba69faaf0adf2a93cff6b33256fc7557cc3d7f892942f7b710339d1ad572e38eb49ed259130ce7fec768c76a4daa258aa83ea18238160d371737cec4e6f1d80267b4b34bd2b05bbda6bdcafefd1b2c11a3ea453c53215a556e956968a8e0356b869ca5c32b9179ccafdec0ec2cf1853631e176d48158132a78ada540c457704b6cebd518f2071837cda2a640d2de9139ee0507605e577424abd18d074c9fb903606306eefa3f5f9933014594634dcaa7603df6815e85e137d49483f0792de1cd8ce15c8a3915127c4100a25af40d95158a4b9bab57a38f6d53372d1509a6f429f5979eb55b1622a8a2f6da28a74c963ac998ca8f2c183bf93bd2b1293186d0dd29dc5f28a0345ca2bd414e95edc2e1b628ec11c763113a617a50d7eaee6cff6badab14c0d4bd8de02f564bdb18e4e00e63a4fcd1deeec775e6610b283034fa6c9cbab95ec23209fede667abfe8a70dd792a0de053c77b0ef60b030de42fab3a97a57f7e6d1298f84ec39278c9f6edef1aa409c84cb534c1df9fc48d37715deaec47eb52e722cbdab23ec5d2e2aac63fabaddc1f63395e95133f1a306fc866a07f475002a051f53eca48f4319cddceca1effb9dc2424c9032c9a2b6d1674164cc114b93416d32017623fa6c8daf10d394da6dce7f41f784c65fb33c9f7db33fc02c5a08a69d3680709ded14bfe8e472ee86723c044f8ebe2de7b0549fb369dcc993b92b5d06d5feee74aca74a2bf6008c70f42d68d4296ef7473ca8158ee53722907bfe63ac2a259c419f03bd95e46e0d0295da318b7be3e109b2a993be5ef734df34a38949af86dff495c7b1dd4c12ab4ee544c8840ad27588c8f0d89a5e47c8418d4fe9e4660b7fe514e286dbb8527fe6f9e12029c9e19fb78954fdfe83fc92907c99b091b3521485c166967e9d9f86ec6501ee458063d4e3f2b1442003afcbae6d2894a68f528f0ffef0a12228980ef139b2534b6075c2820df8ecf90248733d95bfc953bb193f108a8fe3c3ed7895ad881f149a805c7924c93b30e41f5c3f80b086c1875a2e516806f30e7e0eec2dc533ba66fe125a2c412bf5615fa2e7d3518c613644ae27f22e2c44b7ed7d113c068a3a89e2e80cd383f89d21770dc38c6dcc7e677ee6a5aff8ea979c2224fac26d2b2756073b9779d36eb50d63890d63a5a04b3548ad2385d8e3db50df5498c0cdaac3d0a184a8c1b2a5bef838ae293b87ad0de4fde0ad90b7d65edd9b7b1570b45355b3fa1fc785d0bdfed1f2db23ff2afbbab6deb7a910f603656ce2df925f378d4e779e5828397591e996ca78093c41a5c4c3214f7e413a5db19aeb2ddb426c8d73650c577eb3403fdd329bd5d21366e91f837ddbe461fca999985ad8f4f3b3d9198b1ca0d9123b595d07f8a19b3c1463b79241582c806582f865dd471a161c41a6ba5670ab62430b0cef95e915e0a2c55ec08651ffffbc8544c23e4b43d7ceef4ea382d4e0f095e5feacf9514922889acca7bbe45e30cdef854c314ba19efa3c4bc05e02ad0562348a155061e5271c76d2c58c87ab3567e82e9ef2d67794d6e1a59ac307db0b362c828ebabb1e2b7af807caa5a0731d6d5af0eaee383a9930b416e20d6bd8f5cc5febedc3d29da5ecb3b701dd20bb0825d47a94b661e82694052d4531c198b2c3a09624cad9137193db16972624381cce3c42c7e3dc235721856e48cef3c5060a2b364cf833f51cd0bc7757cb17d764c722c6b8eaee54b90d470a494c5e7a9ceb50a7981c576b84704d8aab3e6fb45fd4a2efdba5982888a21552fd12a52c0f7217c618688d13c98445d64d49a800bb6033ac2e182ef707195519aa20fc14810cb4723ec587be806c8eb8a25f9b13f17a24c8c19a71e7f7aba8ae6628185d83f90820696c8d8a214f81fdd21b8d54150c564309233c8faa5ad7dcd0d7e7b3ed615c4a8d40daa9c9203717ea48ebf90a377be46f0ccbf824b5b481eab2b273f6150a7b67f7b2c5a766af1b94c9b31bd1df64fc0e11bd950bd11309be3d759a8f77dbe1dd1ec4c48dc6df3b75f3554770959ef176796399e01b57abb71ccfe5eac28d347a750d18aa052f6a6c287c847cdd6908d1c80ea3aa6f256f7276939da721c6f4b9930eed7fb4c7fde800f66e719f51bd8977aeb6a211bfc5280367a829f0bd39ba53afd4692e66d9734c91e7676d23b1b24644cf8057f7abe2a4c75b40fa3e664804eb415ef039d89685045d102ba64dcd17ba7b725a8619d44239ae4f4bd82cc06335aefb5a623af0be5598c306f16efdb186a4a663f53b5442c7f098211945d9f2391d3270b8976322d7e67072a51f88d983b178b86fdb99be29db8eef3527dec155ee81be815c3dce11e240e69a57adb29850c0e3b16f7a9776b87d0669794c70f6e5b281a4d89546e8ab0177a679d3b496589b6e6c7aff7ccf607d9d182dab32978f13d9232151578fec5344b27723b3b0a7495f1b1178d7017150dbc956cba466b48f5e27274c93329cc37b9b5aaa1a7c348285e10d2faa99a93211367588628b204a7e2856ec4d3c84766533851c977706f5ee9daea8671297f192a370a9e53c609f3cce4e77fa7b2c2363c1f7513758a44ea6fb8225f500a14961d23e6924823eebbfe4315843f69882f13bb4d1588bbd5011ac5f4d95eb650adacd09d78ac45028ec394385fd428251cbce475e07ea4136878962b85f3758f224e5e4e41098041e0670113b35d21b56b3b8f7c250a84d99296de885552b94dc490603c33a3dbaa041e1838a08eb8bc4d349729d89ffa13f895e74b07dfad60c5ec134b9ae5d5f79d38557c3ea75d997f8828839762abc45c85a0dd304cb86015dc01a6ed578580df87bb0da2bf2d250b5d8d76889397285a367e564c22dc1149e5d79796edf09fb62c0560184f20a3ed102adeeebfc6b3ca12ae073bb322746039aadfb29b0220c255909d724eb8e755b9b7538b888e6d0c5ab40c50a98234de9577a8a5f24d85816a4e3831c6471419a1e5bb617db2550aa840d35c0ec1f88402af508802df4ecb6eb20acde7c53d22e8b7f4f1b5a44a71f971ce84d58827c8f32174c49484832706020e8bdbd48849971b2fb9e8b0a5ea420455474e422662edf795af7fea4a7fc645da7daeeef9acdb703b44adee41d957d35c651f884addd192265d6a63211f821c29787636a48b27d4a0d3d5fd617e9ae1f16edc504c9cd2060498f64ac7bc72598dce4e70c6c9bb56dcd0726393bbe68f64851e470d8ba2e25475f6eecf4297cfd2b4d6d2f39bb18312e0fc67a7868dcbfd2d0e570a757feaddf867a10445fc27b3702a7856cf87bbd61abd0fa812836d1e0d9963c6a3eb267199f6c1844f7ecf8d3f8a75b9fe94401940794a75d3924d38e1dc596827710a7be413725a37901705a71446285bcc6478d7f8723e389659487be766ee5769f35648b7cfa81756e0e1664797ce53d86834ea4ed97ee2df38616e85e07a956d8dbd67edd77c943d679884a0c6714a2e2b1d2e5b54eb5545cb1f3933ff9c967d78f8e799a06d057d9023208d4494f7c2578294f18ddba9b5bd922cee0568e2d96625ba5417edd88fbea55e9081bb881c4e2b0f1dcfed5e8b0aaee0779c355729e78a80ac1c77a1d41f3fe34dda943222dcbae4700ae75529e2c7a2523798dfaefd2df8c6f404dfebfa0a948aa7d692adf38240a42c0d89f6d967f0388a8e32c13ea93da03def2fdd911fcd3abe6f142151af15311f2bbacdc51ba01babcfafd63bd7073108f0a1d8f2558802704688525ff92baad73c6cd59742b8d988b661f6ac2713ea193483c923cb8724debca81ebd8eded724cbf2db63419af87c7653db811e3737d45ad931176a27a599fa2c8b28ef3b2a42e214e510c39756a95a73f97eb31ffdaa105a174088f70e6122754e727aae8be41266873c1508b8b50d9829371c172984a4d1abc4396df1664ef00e09200e6b0a022fdcd4f5e390b6f4a98fb1fdaaf9584fa3a465785dcf714900d7653c287eedf5cf8530745f7b88a875d4592a2547912a7971536b4de8f6c2b0b45fc103f628729fc1dd58d6e4d734a898a28c888b6bd87fe38497b670ff543989ae0f1ba133f9c5bf42162e14484a11f675d7a603f051c37a9089e2830f377132e91cd37ed89f7e7dc62f63df0cf5b673204850dcaf2d389499177d3120484e2ddcb6e423823bc7f0e73154faeb7297ce805775906b743ac26892cc10b27b0a93e4c18771bdb7fd2669f946710dc17b26f70d02ad747a723beab7d7ed7ef516e86256ab822bd2a6b35fcc705decc88c68a4bb226e33fb794778a26c907718e5f05e216af09877740a1d22cf5e6c0bac7dcb710de5d7ae4f977569a6ba01f112c49cd048ffe4bd956ec3aebc5d5c07c679c05cd5d8ebf3636fb851019410806acd56ee2ba3233ae0371370495351e9ac26da0a251bd3f0f24e772be968a06f50f6c3b1aa5868ca637a92651f52a6467e21142eab3818e5dde4ff2553f8a87a7ceea16a47a0fb558ba64242ec1a2beed66e60d1d3c773b87b78785aba1ba59f93a9f570fc8cea3924020c994007bf63197cc71a572202b2095900b47c135a0fa3f97da59884bc16320fde18be67d06241467afbf290625f80ff8be20bc6c79613cb2022b7d9e9e150098ea38160a3e0fbb30f7630b4c6bfabda8ee6e14f1a84d739e77392573a26d6dc89039ae906dae4670e85594f5b71a89b7434c859489886d56cf69b40c7fc83505b1cb0400485ea9187accde3104ed4e5f7baad1d7fd15638f47ee8b9eb428a9f84b119c6a1a8a9a1e97e07a047f4e6a4708161bf9241f7a546e8752f2e03ddd7345acca05d49ef02e47ebb02a81c7ed8f2e034809ba72de36d3c9d992de86b0e694ea0dca11e5ec608d6b1e8db64d6df11903bd2ecdc93363f64d80c3a038a48c14f4f81405e3846368dfc68555a2ca8a9b30a3f5bf8fcb78be2cb9b2bd8614b6f3ec8b46d7bf619c113a988d67f90d289c09bbd9f41952a534e6adb2fe0cd571eefc118bc7e094413810f67072285f910fbd4b1b8e21ed879e399c2e08ea0830be3d1dcc1b25367916d13fdcb64f93f7f55244d54117ed93895f706f748981284bab", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 455.529815ms ago: executing program 5 (id=3859): r0 = socket$unix(0x1, 0x2, 0x0) r1 = msgget$private(0x0, 0x193) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x10000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) msgsnd(r1, &(0x7f0000000040)=ANY=[], 0x8, 0x0) msgsnd(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x3000) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x5, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r2, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 423.686588ms ago: executing program 1 (id=3892): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) close(0x3) io_uring_setup(0x6b9e, &(0x7f0000000240)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x4000159}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e1d, 0x2000, @loopback, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x3d9a, 0x4) sendfile(r2, r3, 0x0, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x38, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x66}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x48, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4aa3f378686018d5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x114, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xb2, 0x7, 0x1, 0x0, "cc23b916730b74d04aafdf1bfd41ebb6ec71270b792acfbf878070e91cc71d334eb7cee17a16fae517ae5e69887deeb70c4243366e16248c211e2805b8c10edc7c076d9f7fb049a436ce9122b707fb25f3397ac3202613e08a874307bfe1b062570c760d38c93e351599c2f41a82528e25c0fcbf2d24b9bded789c7179dae5fedbb2ee8c3f97adf61da598873608afadefaae278cabc7336dfaa14fe571f1125047dd7a589b9eb46603e7c44fa59"}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "9c5349317ff21714018d691841afc51a5288a9edbd69f58953221eafa91e5c2bde2d2547a1f57dc2ef1d94d24bfeae9595a70181f938d02715"}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10001}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14}}, 0x2b8}, 0x1, 0x0, 0x0, 0x850}, 0x0) syz_emit_ethernet(0xfcd, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2b00, 0x0) r5 = creat(&(0x7f0000000340)='./file0\x00', 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) r6 = syz_pidfd_open(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c7766646e6f3dbec76987bc82ecbe0a1d72f8e4cca4561c04d9a60e6711b36cd81977fbb0c5f5a19e8fcb43c183e481ffffd243ed4b1e8d5610e22232a654403ad79ae6059f5eeb2ba04c8c95f8ec7260a4aa6ae3604989c6048d3814bd75fe7e28490012ba", @ANYRESHEX=r6, @ANYBLOB=',\x00']) ppoll(&(0x7f0000000140)=[{r4, 0x4000}], 0x1, 0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x297}], 0x1) 422.798888ms ago: executing program 4 (id=3893): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000980)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) 388.777931ms ago: executing program 4 (id=3894): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) timer_getoverrun(r0) 351.655605ms ago: executing program 4 (id=3895): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000700)='afs_notify_call\x00'}, 0x18) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x646a40) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000340)=[{0x1e, 0x7f, 0x48, 0xfd, @time={0x9, 0x6}, {0x0, 0xff}, {0x6}, @result}, {0x1, 0x7f, 0xa, 0x0, @time={0x0, 0x8}, {0x3, 0x1}, {0x1, 0xa}, @time=@tick=0x2}], 0x38) r5 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0xffffffff, 0x1}, 0xc}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/254, 0x9f, 0xfe, 0x0, 0x1, 0x10000}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x400240, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x19, 0xc, &(0x7f0000001900)=ANY=[@ANYRES8, @ANYBLOB, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_init1(0x0) 310.547009ms ago: executing program 4 (id=3896): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 77.819872ms ago: executing program 0 (id=3897): munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') write(r0, &(0x7f0000000000)="1546b2000000000000008043f3526b13f78ada17aefbbfc13bc888a3a46e8f0e809292ee0739b4", 0x27) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0x0, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0900000000000000000000000000000000000000e2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000e00004017000e401c04"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000580000005800000004000000010000000000008e"], 0x0, 0x74, 0x0, 0x1, 0x9}, 0x28) pause() 77.002072ms ago: executing program 4 (id=3898): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents64(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f0000000d40)=ANY=[@ANYRES16=0x0], 0xfe, 0x2b7, &(0x7f0000001340)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x6, 0x5, {0xe, 0x6d, 0xc, 0xb, 0x5, 0x9, 0x8, 0xffff7fff}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 0s ago: executing program 4 (id=3900): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syncfs(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t pid=12717 comm="syz.4.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd71cfcdc2a code=0x7ffc0000 [ 205.775219][T12725] loop4: detected capacity change from 0 to 512 [ 205.875785][T12725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.892664][T12725] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.923173][T12734] bridge0: port 3(gretap0) entered blocking state [ 205.929676][T12734] bridge0: port 3(gretap0) entered disabled state [ 205.951134][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.963272][T12734] gretap0: entered allmulticast mode [ 205.969462][T12734] gretap0: entered promiscuous mode [ 205.975999][T12734] gretap0: left allmulticast mode [ 205.981271][T12734] gretap0: left promiscuous mode [ 205.986440][T12734] bridge0: port 3(gretap0) entered disabled state [ 206.019334][T12738] netlink: 'syz.1.3328': attribute type 10 has an invalid length. [ 206.027252][T12738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3328'. [ 206.041156][T12738] dummy0: entered promiscuous mode [ 206.055372][T12738] bond0: (slave dummy0): Releasing backup interface [ 206.064435][T12738] bridge0: port 3(dummy0) entered blocking state [ 206.064788][T12741] 9pnet_fd: Insufficient options for proto=fd [ 206.071048][T12738] bridge0: port 3(dummy0) entered disabled state [ 206.087899][T12738] dummy0: entered allmulticast mode [ 206.115709][T12744] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 206.139625][T12744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 206.148919][T12744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3329'. [ 206.159756][T12744] bond3 (unregistering): Released all slaves [ 206.169385][T12740] 9pnet: Could not find request transport: fd p3 [ 206.697473][T12779] loop2: p3 size 54016 extends beyond EOD, truncated [ 206.761640][T12783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3342'. [ 206.770632][T12783] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3342'. [ 206.849221][T12798] binfmt_misc: register: failed to install interpreter file ./file0 [ 206.883977][T12802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12802 comm=syz.3.3350 [ 206.927468][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3352'. [ 206.943036][T12806] dummy0: entered promiscuous mode [ 206.954159][T12806] bond0: (slave dummy0): Releasing backup interface [ 206.974197][T12806] bridge0: port 1(dummy0) entered blocking state [ 206.980624][T12806] bridge0: port 1(dummy0) entered disabled state [ 206.987225][T12806] dummy0: entered allmulticast mode [ 207.015863][T12810] FAULT_INJECTION: forcing a failure. [ 207.015863][T12810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.029042][T12810] CPU: 0 UID: 0 PID: 12810 Comm: syz.3.3354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.029127][T12810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.029139][T12810] Call Trace: [ 207.029225][T12810] [ 207.029246][T12810] __dump_stack+0x1d/0x30 [ 207.029280][T12810] dump_stack_lvl+0xe8/0x140 [ 207.029308][T12810] dump_stack+0x15/0x1b [ 207.029350][T12810] should_fail_ex+0x265/0x280 [ 207.029378][T12810] should_fail+0xb/0x20 [ 207.029492][T12810] should_fail_usercopy+0x1a/0x20 [ 207.029535][T12810] _copy_to_user+0x20/0xa0 [ 207.029560][T12810] simple_read_from_buffer+0xb5/0x130 [ 207.029599][T12810] proc_fail_nth_read+0x10e/0x150 [ 207.029627][T12810] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.029715][T12810] vfs_read+0x1a8/0x770 [ 207.029764][T12810] ? __rcu_read_unlock+0x4f/0x70 [ 207.029797][T12810] ? __fget_files+0x184/0x1c0 [ 207.029881][T12810] ksys_read+0xda/0x1a0 [ 207.029951][T12810] __x64_sys_read+0x40/0x50 [ 207.029974][T12810] x64_sys_call+0x27c0/0x3000 [ 207.030055][T12810] do_syscall_64+0xd2/0x200 [ 207.030103][T12810] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 207.030153][T12810] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 207.030185][T12810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.030229][T12810] RIP: 0033:0x7fdbd1e6d9dc [ 207.030249][T12810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.030270][T12810] RSP: 002b:00007fdbd08cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.030292][T12810] RAX: ffffffffffffffda RBX: 00007fdbd20c5fa0 RCX: 00007fdbd1e6d9dc [ 207.030355][T12810] RDX: 000000000000000f RSI: 00007fdbd08cf0a0 RDI: 0000000000000003 [ 207.030369][T12810] RBP: 00007fdbd08cf090 R08: 0000000000000000 R09: 0000000000000000 [ 207.030384][T12810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.030396][T12810] R13: 00007fdbd20c6038 R14: 00007fdbd20c5fa0 R15: 00007ffc10edf0d8 [ 207.030417][T12810] [ 207.069914][T12812] infiniband syz1: set down [ 207.234115][T12812] infiniband syz1: added syz_tun [ 207.251153][T12812] RDS/IB: syz1: added [ 207.255194][T12812] smc: adding ib device syz1 with port count 1 [ 207.261410][T12812] smc: ib device syz1 port 1 has no pnetid [ 207.380789][T12831] loop3: detected capacity change from 0 to 512 [ 207.391084][T12831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 207.436258][T12831] vhci_hcd: invalid port number 96 [ 207.441458][T12831] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 207.493176][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.502561][T12834] bond0: (slave dummy0): Releasing backup interface [ 207.516290][T12834] team0: Port device dummy0 added [ 207.607255][T12853] vhci_hcd: invalid port number 254 [ 207.635820][T12855] vhci_hcd: invalid port number 254 [ 207.654584][T12849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3367'. [ 207.719290][T12866] binfmt_misc: register: failed to install interpreter file ./file0 [ 207.723433][T12868] loop2: detected capacity change from 0 to 512 [ 207.755365][T12868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.757694][T12874] loop0: detected capacity change from 0 to 512 [ 207.775481][T12868] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.789815][T12874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.820950][T12874] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.028416][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.269322][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.291573][T12884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3379'. [ 208.341552][T12884] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3379'. [ 208.405067][T12892] vhci_hcd: invalid port number 254 [ 208.708259][T12921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3392'. [ 208.716239][T12922] 9pnet_fd: Insufficient options for proto=fd [ 208.752866][T12926] vhci_hcd: invalid port number 254 [ 208.781498][T12929] vhci_hcd: invalid port number 254 [ 208.797476][T12931] loop3: detected capacity change from 0 to 512 [ 208.831926][T12931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.844716][T12931] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.892303][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.098568][T12962] FAULT_INJECTION: forcing a failure. [ 209.098568][T12962] name failslab, interval 1, probability 0, space 0, times 0 [ 209.111342][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.1.3405 Not tainted syzkaller #0 PREEMPT(voluntary) [ 209.111439][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.111455][T12962] Call Trace: [ 209.111463][T12962] [ 209.111473][T12962] __dump_stack+0x1d/0x30 [ 209.111508][T12962] dump_stack_lvl+0xe8/0x140 [ 209.111542][T12962] dump_stack+0x15/0x1b [ 209.111651][T12962] should_fail_ex+0x265/0x280 [ 209.111741][T12962] should_failslab+0x8c/0xb0 [ 209.111762][T12962] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 209.111790][T12962] ? __alloc_skb+0x101/0x320 [ 209.111857][T12962] __alloc_skb+0x101/0x320 [ 209.111887][T12962] netlink_ack+0xfd/0x500 [ 209.111919][T12962] ? avc_has_perm_noaudit+0x1b1/0x200 [ 209.112031][T12962] netlink_rcv_skb+0x192/0x220 [ 209.112060][T12962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.112123][T12962] rtnetlink_rcv+0x1c/0x30 [ 209.112154][T12962] netlink_unicast+0x5c0/0x690 [ 209.112187][T12962] netlink_sendmsg+0x58b/0x6b0 [ 209.112282][T12962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.112386][T12962] __sock_sendmsg+0x145/0x180 [ 209.112407][T12962] ____sys_sendmsg+0x31e/0x4e0 [ 209.112436][T12962] ___sys_sendmsg+0x17b/0x1d0 [ 209.112485][T12962] __x64_sys_sendmsg+0xd4/0x160 [ 209.112516][T12962] x64_sys_call+0x191e/0x3000 [ 209.112602][T12962] do_syscall_64+0xd2/0x200 [ 209.112632][T12962] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 209.112655][T12962] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 209.112680][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.112737][T12962] RIP: 0033:0x7fb957d0efc9 [ 209.112756][T12962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.112828][T12962] RSP: 002b:00007fb956777038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.112848][T12962] RAX: ffffffffffffffda RBX: 00007fb957f65fa0 RCX: 00007fb957d0efc9 [ 209.112864][T12962] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000003 [ 209.112879][T12962] RBP: 00007fb956777090 R08: 0000000000000000 R09: 0000000000000000 [ 209.112894][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.112909][T12962] R13: 00007fb957f66038 R14: 00007fb957f65fa0 R15: 00007fff69f5af18 [ 209.112959][T12962] [ 209.414215][T12970] vhci_hcd: invalid port number 254 [ 209.551630][T12978] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.614130][T12978] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.682321][T12978] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.692829][T12985] sctp: [Deprecated]: syz.4.3410 (pid 12985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 209.692829][T12985] Use struct sctp_sack_info instead [ 209.762335][T12978] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.842038][T12024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.853867][T12024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.875829][T12024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.899107][T12024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.082679][T13005] vhci_hcd: invalid port number 254 [ 210.158716][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 210.158735][ T29] audit: type=1326 audit(1761037713.288:15575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e15a7efc9 code=0x7ffc0000 [ 210.190328][ T29] audit: type=1326 audit(1761037713.288:15576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e15a7efc9 code=0x7ffc0000 [ 210.197052][T13011] 9pnet_fd: Insufficient options for proto=fd [ 210.215186][ T29] audit: type=1326 audit(1761037713.328:15577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e15a80ee7 code=0x7ffc0000 [ 210.243753][ T29] audit: type=1326 audit(1761037713.328:15578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7e15a80e5c code=0x7ffc0000 [ 210.267370][ T29] audit: type=1326 audit(1761037713.328:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e15a80d94 code=0x7ffc0000 [ 210.290983][ T29] audit: type=1326 audit(1761037713.328:15580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f7e15a80d94 code=0x7ffc0000 [ 210.314513][ T29] audit: type=1326 audit(1761037713.328:15581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7e15a7dc2a code=0x7ffc0000 [ 210.337940][ T29] audit: type=1326 audit(1761037713.328:15582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e15a7efc9 code=0x7ffc0000 [ 210.361584][ T29] audit: type=1326 audit(1761037713.328:15583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e15a7efc9 code=0x7ffc0000 [ 210.385535][ T29] audit: type=1326 audit(1761037713.348:15584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13009 comm="syz.2.3424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e15a7d810 code=0x7ffc0000 [ 210.462224][T13019] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.492850][T13019] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.546437][T13019] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.575564][T13019] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.639402][T12024] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.650521][T12024] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.661732][T12024] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.680389][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.692165][T13027] vlan2: entered allmulticast mode [ 210.732779][T13031] FAULT_INJECTION: forcing a failure. [ 210.732779][T13031] name failslab, interval 1, probability 0, space 0, times 0 [ 210.745585][T13031] CPU: 1 UID: 0 PID: 13031 Comm: syz.3.3432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 210.745693][T13031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.745709][T13031] Call Trace: [ 210.745716][T13031] [ 210.745725][T13031] __dump_stack+0x1d/0x30 [ 210.745762][T13031] dump_stack_lvl+0xe8/0x140 [ 210.745876][T13031] dump_stack+0x15/0x1b [ 210.745908][T13031] should_fail_ex+0x265/0x280 [ 210.745964][T13031] should_failslab+0x8c/0xb0 [ 210.745984][T13031] kmem_cache_alloc_noprof+0x50/0x480 [ 210.746005][T13031] ? security_file_alloc+0x32/0x100 [ 210.746071][T13031] security_file_alloc+0x32/0x100 [ 210.746089][T13031] init_file+0x5c/0x1d0 [ 210.746118][T13031] alloc_empty_file+0x8b/0x200 [ 210.746150][T13031] path_openat+0x68/0x2170 [ 210.746286][T13031] ? try_charge_memcg+0x215/0xa10 [ 210.746326][T13031] ? css_rstat_updated+0xb7/0x240 [ 210.746361][T13031] ? css_rstat_updated+0xb7/0x240 [ 210.746444][T13031] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 210.746545][T13031] ? css_rstat_updated+0xb7/0x240 [ 210.746629][T13031] do_filp_open+0x109/0x230 [ 210.746710][T13031] do_sys_openat2+0xa6/0x110 [ 210.746789][T13031] __x64_sys_openat+0xf2/0x120 [ 210.746823][T13031] x64_sys_call+0x2eab/0x3000 [ 210.746859][T13031] do_syscall_64+0xd2/0x200 [ 210.746886][T13031] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.746929][T13031] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 210.746961][T13031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.747126][T13031] RIP: 0033:0x7fdbd1e6d810 [ 210.747143][T13031] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 210.747162][T13031] RSP: 002b:00007fdbd08ccef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 210.747199][T13031] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdbd1e6d810 [ 210.747213][T13031] RDX: 0000000000000002 RSI: 00007fdbd1ef1c6c RDI: 00000000ffffff9c [ 210.747227][T13031] RBP: 00007fdbd1ef1c6c R08: 0000000000000000 R09: 0000000000000000 [ 210.747241][T13031] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 210.747255][T13031] R13: 000000000000002d R14: 0000200000000040 R15: 00007ffc10edf0d8 [ 210.747277][T13031] [ 211.047539][T13041] loop0: detected capacity change from 0 to 512 [ 211.074500][T13041] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 211.081977][T13044] veth2: entered promiscuous mode [ 211.089396][T13044] veth2: entered allmulticast mode [ 211.108690][T13041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 211.123735][T13041] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 211.137705][T13041] EXT4-fs (loop0): 1 truncate cleaned up [ 211.144772][T13041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.176747][T13041] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 211.196082][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.212041][T13056] validate_nla: 3 callbacks suppressed [ 211.212056][T13056] netlink: 'syz.1.3442': attribute type 10 has an invalid length. [ 211.225481][T13056] __nla_validate_parse: 2 callbacks suppressed [ 211.225493][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3442'. [ 211.264351][T13058] loop2: detected capacity change from 0 to 256 [ 211.271290][T13058] vfat: Unknown parameter 'õå?ä`ë€7XÈc öU»Aæ`'GGÈN©L‘‘à.­Ô [ 211.271290][T13058] _wÊÃõ)B´¬4%ñh’¨ßWÔ³ù"·eÜZÙ“Cî/ÕÃýÆð!®]&NõæÑKYR ö•¨-Ùøo_•!ñ|š' [ 211.277845][T13060] vhci_hcd: invalid port number 254 [ 211.354108][T13058] loop2: detected capacity change from 0 to 8192 [ 211.418434][T13075] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 1044) [ 211.426782][T13075] FAT-fs (loop2): Filesystem has been set read-only [ 211.434152][T13076] 9pnet_fd: Insufficient options for proto=fd [ 211.851483][T13090] FAULT_INJECTION: forcing a failure. [ 211.851483][T13090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.864813][T13090] CPU: 0 UID: 0 PID: 13090 Comm: syz.3.3452 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.864851][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.864865][T13090] Call Trace: [ 211.864870][T13090] [ 211.864877][T13090] __dump_stack+0x1d/0x30 [ 211.864910][T13090] dump_stack_lvl+0xe8/0x140 [ 211.865044][T13090] dump_stack+0x15/0x1b [ 211.865143][T13090] should_fail_ex+0x265/0x280 [ 211.865172][T13090] should_fail+0xb/0x20 [ 211.865206][T13090] should_fail_usercopy+0x1a/0x20 [ 211.865291][T13090] _copy_from_user+0x1c/0xb0 [ 211.865386][T13090] restore_altstack+0x4b/0x2d0 [ 211.865413][T13090] ? __set_task_blocked+0x23a/0x2a0 [ 211.865456][T13090] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 211.865490][T13090] ? _raw_spin_unlock_irq+0x26/0x50 [ 211.865574][T13090] ? signal_setup_done+0x266/0x290 [ 211.865611][T13090] ? xfd_validate_state+0x45/0xf0 [ 211.865717][T13090] ? fpu__clear_user_states+0x63/0x1e0 [ 211.865746][T13090] ? fpregs_mark_activate+0x66/0x140 [ 211.865774][T13090] ? fpu__clear_user_states+0x63/0x1e0 [ 211.865802][T13090] ? arch_do_signal_or_restart+0x2b5/0x440 [ 211.865919][T13090] ? __rcu_read_unlock+0x4f/0x70 [ 211.865954][T13090] x64_sys_call+0x2d4b/0x3000 [ 211.866055][T13090] do_syscall_64+0xd2/0x200 [ 211.866091][T13090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.866173][T13090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.866207][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.866233][T13090] RIP: 0033:0x7fdbd1e0b099 [ 211.866252][T13090] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 211.866273][T13090] RSP: 002b:00007fdbd08cea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 211.866325][T13090] RAX: ffffffffffffffda RBX: 00007fdbd20c5fa0 RCX: 00007fdbd1e0b099 [ 211.866339][T13090] RDX: 00007fdbd08cea80 RSI: 00007fdbd08cebb0 RDI: 0000000000000021 [ 211.866355][T13090] RBP: 00007fdbd08cf090 R08: 0000000000000000 R09: 0000000000000000 [ 211.866370][T13090] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 211.866385][T13090] R13: 00007fdbd20c6038 R14: 00007fdbd20c5fa0 R15: 00007ffc10edf0d8 [ 211.866402][T13090] [ 212.136397][T13096] vhci_hcd: invalid port number 254 [ 212.183592][T13098] netlink: 'syz.2.3455': attribute type 10 has an invalid length. [ 212.191575][T13098] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3455'. [ 212.214737][T13098] bridge0: port 3(dummy0) entered blocking state [ 212.221173][T13098] bridge0: port 3(dummy0) entered forwarding state [ 212.245552][T13103] vhci_hcd: invalid port number 254 [ 212.341432][T13107] vhci_hcd: invalid port number 254 [ 212.364405][T13113] loop0: detected capacity change from 0 to 512 [ 212.396041][T13113] loop0: detected capacity change from 0 to 128 [ 212.418545][T13113] vfat: Unknown parameter 'ÿÿfile0' [ 212.464141][T13119] loop4: detected capacity change from 0 to 256 [ 212.561370][T13128] vhci_hcd: invalid port number 254 [ 212.722348][T13120] chnl_net:caif_netlink_parms(): no params data found [ 212.766817][T13120] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.773968][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.781208][T13120] bridge_slave_0: entered allmulticast mode [ 212.787732][T13120] bridge_slave_0: entered promiscuous mode [ 212.794522][T13120] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.801663][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.808841][T13120] bridge_slave_1: entered allmulticast mode [ 212.815237][T13120] bridge_slave_1: entered promiscuous mode [ 212.832950][T13120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.843519][T13120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.862812][T13120] team0: Port device team_slave_0 added [ 212.869276][T13120] team0: Port device team_slave_1 added [ 212.885080][T13120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.892077][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.918052][T13120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.929515][T13120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.936487][T13120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.962413][T13120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.989522][T13120] hsr_slave_0: entered promiscuous mode [ 212.995714][T13120] hsr_slave_1: entered promiscuous mode [ 213.001519][T13120] debugfs: 'hsr0' already exists in 'hsr' [ 213.007244][T13120] Cannot create hsr debugfs directory [ 213.064037][T13120] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.082049][T13150] netlink: 'syz.0.3471': attribute type 10 has an invalid length. [ 213.089922][T13150] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3471'. [ 213.099075][T13150] dummy0: entered promiscuous mode [ 213.104973][T13150] bond0: (slave dummy0): Releasing backup interface [ 213.112810][T13150] bridge0: port 1(dummy0) entered blocking state [ 213.119209][T13150] bridge0: port 1(dummy0) entered disabled state [ 213.125773][T13150] dummy0: entered allmulticast mode [ 213.133035][T13120] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.190187][T13156] loop0: detected capacity change from 0 to 512 [ 213.202486][T13120] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.203256][T13156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.225196][T13156] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.267087][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.277554][T13120] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.294611][T13161] netlink: 'syz.0.3475': attribute type 1 has an invalid length. [ 213.307584][T13161] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.323463][T13161] bond7: (slave geneve2): making interface the new active one [ 213.332670][T13161] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 213.341560][T12030] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.347018][T13164] loop4: detected capacity change from 0 to 512 [ 213.364624][T12030] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.380535][T12030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.382833][T13168] netlink: 'syz.1.3478': attribute type 1 has an invalid length. [ 213.390894][T12030] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.411218][T13164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.424641][T13168] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.428855][T13164] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.447244][T13168] bond3: (slave geneve2): making interface the new active one [ 213.456143][T13168] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 213.475477][T13167] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.490947][T12030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.502282][T12030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.505707][T13175] vhci_hcd: invalid port number 254 [ 213.510494][T12030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.542528][T12024] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.552055][T13167] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.579650][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.614269][T13188] netlink: 'syz.4.3483': attribute type 10 has an invalid length. [ 213.622297][T13188] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3483'. [ 213.631795][T13188] dummy0: entered promiscuous mode [ 213.636755][T13193] loop3: detected capacity change from 0 to 512 [ 213.644059][T13193] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 213.644546][T13188] team0: Port device dummy0 removed [ 213.655836][T13193] EXT4-fs (loop3): 1 truncate cleaned up [ 213.659548][T13188] bridge0: port 1(dummy0) entered blocking state [ 213.665762][T13193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.671390][T13188] bridge0: port 1(dummy0) entered disabled state [ 213.688137][T13193] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.3486: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 213.690059][T13188] dummy0: entered allmulticast mode [ 213.710304][T13193] EXT4-fs (loop3): Remounting filesystem read-only [ 213.721799][T13193] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.3486: Deleting old file: nlink 4, error=-117 [ 213.735623][T13167] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.749645][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.787208][T13200] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 213.791374][T13202] vhci_hcd: invalid port number 254 [ 213.802066][T13167] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.846046][T13206] loop3: detected capacity change from 0 to 512 [ 213.852633][T12031] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.864047][T12031] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.872753][T13206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.880585][T12031] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.885838][T13206] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.898232][T12031] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.967000][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.073880][T13226] netlink: 'syz.0.3498': attribute type 10 has an invalid length. [ 214.081816][T13226] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3498'. [ 214.114597][T13228] netlink: 'syz.4.3499': attribute type 30 has an invalid length. [ 214.128346][T13120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.148153][T13233] loop0: detected capacity change from 0 to 512 [ 214.156062][T13120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.165902][T13120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.175153][T13233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.175309][T13120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.195428][T13233] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.242109][T13120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.255056][T13120] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.264329][T13244] bridge0: port 3(gretap0) entered blocking state [ 214.271021][T13244] bridge0: port 3(gretap0) entered disabled state [ 214.284233][T13244] gretap0: entered allmulticast mode [ 214.290161][T13244] gretap0: entered promiscuous mode [ 214.297229][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.302922][T12030] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.313343][T12030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.325507][T13244] gretap0: left allmulticast mode [ 214.330727][T13244] gretap0: left promiscuous mode [ 214.335795][T13244] bridge0: port 3(gretap0) entered disabled state [ 214.345212][T12030] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.346161][T13244] netlink: 'syz.4.3502': attribute type 13 has an invalid length. [ 214.352470][T12030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.372272][T13224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3497'. [ 214.393068][ T37] dummy0: left allmulticast mode [ 214.398290][ T37] bridge0: port 3(dummy0) entered disabled state [ 214.407261][ T37] bridge_slave_1: left allmulticast mode [ 214.413052][ T37] bridge_slave_1: left promiscuous mode [ 214.418793][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.427397][ T37] bridge_slave_0: left allmulticast mode [ 214.433098][ T37] bridge_slave_0: left promiscuous mode [ 214.438803][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.454467][T13251] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.543418][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.553625][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.563173][ T37] bond0 (unregistering): Released all slaves [ 214.572279][ T37] bond1 (unregistering): Released all slaves [ 214.580376][ T37] bond2 (unregistering): Released all slaves [ 214.589081][ T37] bond3 (unregistering): Released all slaves [ 214.597709][ T37] bond4 (unregistering): Released all slaves [ 214.606803][ T37] bond5 (unregistering): Released all slaves [ 214.615189][ T37] bond6 (unregistering): Released all slaves [ 214.627437][T13246] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.682353][ T37] tipc: Left network mode [ 214.711985][T13246] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.748156][ T37] hsr_slave_0: left promiscuous mode [ 214.754209][ T37] hsr_slave_1: left promiscuous mode [ 214.763843][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.771341][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.781138][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.788532][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.806855][ T37] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 214.813976][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 214.824106][ T37] veth1_macvtap: left promiscuous mode [ 214.829658][ T37] veth0_macvtap: left promiscuous mode [ 214.837011][ T37] veth1_vlan: left promiscuous mode [ 214.842425][ T37] veth0_vlan: left promiscuous mode [ 214.928964][ T37] team0 (unregistering): Port device team_slave_1 removed [ 214.946466][ T37] team0 (unregistering): Port device team_slave_0 removed [ 215.064939][T13246] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.084788][T13120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.114168][T13246] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.197378][T12024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.211946][T12024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.224736][T13292] dummy0: left allmulticast mode [ 215.229867][T13292] bridge0: port 1(dummy0) entered disabled state [ 215.237006][T13292] bridge_slave_1: left allmulticast mode [ 215.242761][T13292] bridge_slave_1: left promiscuous mode [ 215.248515][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.256792][T13292] bond0: (slave bond_slave_0): Releasing backup interface [ 215.264872][T13292] bond0: (slave bond_slave_1): Releasing backup interface [ 215.273717][ T29] kauditd_printk_skb: 586 callbacks suppressed [ 215.273730][ T29] audit: type=1400 audit(1761037718.408:16169): avc: denied { create } for pid=13291 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.274369][T13292] team0: Port device team_slave_0 removed [ 215.280085][ T29] audit: type=1400 audit(1761037718.408:16170): avc: denied { write } for pid=13291 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.326586][ T29] audit: type=1400 audit(1761037718.408:16171): avc: denied { nlmsg_write } for pid=13291 comm="syz.4.3515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 215.347867][T13292] team0: Port device team_slave_1 removed [ 215.353982][T13292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.362311][T13292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.369884][T13292] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 215.387442][T12030] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.402201][T12030] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.421134][T13120] veth0_vlan: entered promiscuous mode [ 215.430643][ T29] audit: type=1326 audit(1761037718.558:16172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.432357][T13120] veth1_vlan: entered promiscuous mode [ 215.454773][ T29] audit: type=1326 audit(1761037718.558:16173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.471928][T13120] veth0_macvtap: entered promiscuous mode [ 215.489587][ T29] audit: type=1326 audit(1761037718.568:16174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.513280][ T29] audit: type=1326 audit(1761037718.568:16175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.515536][T13120] veth1_macvtap: entered promiscuous mode [ 215.536883][ T29] audit: type=1326 audit(1761037718.618:16176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.566222][ T29] audit: type=1326 audit(1761037718.618:16177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.571403][T13120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.589820][ T29] audit: type=1326 audit(1761037718.618:16178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13302 comm="syz.4.3516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd71cfcefc9 code=0x7ffc0000 [ 215.626068][T13120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.633791][T13303] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3516'. [ 215.658298][T13303] FAULT_INJECTION: forcing a failure. [ 215.658298][T13303] name failslab, interval 1, probability 0, space 0, times 0 [ 215.671072][T13303] CPU: 0 UID: 0 PID: 13303 Comm: syz.4.3516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.671107][T13303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.671144][T13303] Call Trace: [ 215.671151][T13303] [ 215.671160][T13303] __dump_stack+0x1d/0x30 [ 215.671198][T13303] dump_stack_lvl+0xe8/0x140 [ 215.671234][T13303] dump_stack+0x15/0x1b [ 215.671267][T13303] should_fail_ex+0x265/0x280 [ 215.671378][T13303] should_failslab+0x8c/0xb0 [ 215.671405][T13303] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 215.671443][T13303] ? sidtab_sid2str_get+0xa0/0x130 [ 215.671489][T13303] kmemdup_noprof+0x2b/0x70 [ 215.671514][T13303] sidtab_sid2str_get+0xa0/0x130 [ 215.671543][T13303] security_sid_to_context_core+0x1eb/0x2e0 [ 215.671587][T13303] security_sid_to_context+0x27/0x40 [ 215.671639][T13303] selinux_lsmprop_to_secctx+0x67/0xf0 [ 215.671669][T13303] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 215.671707][T13303] audit_log_subj_ctx+0xa4/0x3e0 [ 215.671817][T13303] ? skb_put+0xa9/0xf0 [ 215.671849][T13303] audit_log_task_context+0x48/0x70 [ 215.671887][T13303] audit_log_task+0xf4/0x250 [ 215.671919][T13303] ? kstrtouint+0x76/0xc0 [ 215.671961][T13303] audit_seccomp+0x61/0x100 [ 215.671990][T13303] ? __seccomp_filter+0x82d/0x1250 [ 215.672016][T13303] __seccomp_filter+0x83e/0x1250 [ 215.672111][T13303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.672141][T13303] ? vfs_write+0x7e8/0x960 [ 215.672162][T13303] ? __rcu_read_unlock+0x4f/0x70 [ 215.672254][T13303] ? __fget_files+0x184/0x1c0 [ 215.672282][T13303] __secure_computing+0x82/0x150 [ 215.672371][T13303] syscall_trace_enter+0xcf/0x1e0 [ 215.672397][T13303] do_syscall_64+0xac/0x200 [ 215.672438][T13303] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.672478][T13303] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.672511][T13303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.672537][T13303] RIP: 0033:0x7fd71cfcefc9 [ 215.672556][T13303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.672579][T13303] RSP: 002b:00007fd71ba37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 215.672678][T13303] RAX: ffffffffffffffda RBX: 00007fd71d225fa0 RCX: 00007fd71cfcefc9 [ 215.672691][T13303] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000003c0 [ 215.672704][T13303] RBP: 00007fd71ba37090 R08: 0000000000000000 R09: 0000000000000000 [ 215.672716][T13303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.672728][T13303] R13: 00007fd71d226038 R14: 00007fd71d225fa0 R15: 00007fff5bbe2968 [ 215.672805][T13303] [ 215.674815][T12030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.705808][T13314] loop0: detected capacity change from 0 to 1024 [ 215.711044][T12030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.742886][T13314] EXT4-fs: Ignoring removed nobh option [ 215.794401][T13316] netlink: 'syz.4.3520': attribute type 13 has an invalid length. [ 215.795202][T13314] EXT4-fs: Ignoring removed bh option [ 215.979514][T12030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.994476][T13320] 8021q: adding VLAN 0 to HW filter on device bond7 [ 216.009703][T13314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.012102][T13321] bond7: (slave geneve2): making interface the new active one [ 216.031295][T13321] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 216.060808][T12030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.089261][T13332] vhci_hcd: invalid port number 254 [ 216.111964][T12030] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.120289][T12030] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.131336][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.158777][T12030] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.172111][T13343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3465'. [ 216.188439][T12030] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.223209][T13345] loop0: detected capacity change from 0 to 1024 [ 216.240880][T13349] loop3: detected capacity change from 0 to 164 [ 216.252901][T13345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.334517][T13349] ISOFS: unable to read i-node block [ 216.339924][T13349] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 216.426193][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.432673][T13360] vhci_hcd: invalid port number 254 [ 216.459758][T13364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3533'. [ 216.469718][T13367] sctp: [Deprecated]: syz.2.3532 (pid 13367) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.469718][T13367] Use struct sctp_sack_info instead [ 216.490109][T13366] validate_nla: 1 callbacks suppressed [ 216.490124][T13366] netlink: 'syz.4.3537': attribute type 10 has an invalid length. [ 216.503608][T13366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3537'. [ 216.513598][T13366] bridge0: port 1(dummy0) entered blocking state [ 216.520010][T13366] bridge0: port 1(dummy0) entered disabled state [ 216.526526][T13366] dummy0: entered allmulticast mode [ 216.539851][T13370] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 216.555293][T13370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 216.581647][T13370] bond4: (slave geneve2): making interface the new active one [ 216.591087][T13370] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 216.673908][T13391] FAULT_INJECTION: forcing a failure. [ 216.673908][T13391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.687062][T13391] CPU: 1 UID: 0 PID: 13391 Comm: syz.4.3546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.687132][T13391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.687145][T13391] Call Trace: [ 216.687152][T13391] [ 216.687160][T13391] __dump_stack+0x1d/0x30 [ 216.687193][T13391] dump_stack_lvl+0xe8/0x140 [ 216.687227][T13391] dump_stack+0x15/0x1b [ 216.687318][T13391] should_fail_ex+0x265/0x280 [ 216.687354][T13391] should_fail+0xb/0x20 [ 216.687382][T13391] should_fail_usercopy+0x1a/0x20 [ 216.687420][T13391] _copy_to_user+0x20/0xa0 [ 216.687499][T13391] simple_read_from_buffer+0xb5/0x130 [ 216.687553][T13391] proc_fail_nth_read+0x10e/0x150 [ 216.687582][T13391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.687607][T13391] vfs_read+0x1a8/0x770 [ 216.687665][T13391] ? __rcu_read_unlock+0x4f/0x70 [ 216.687740][T13391] ? __fget_files+0x184/0x1c0 [ 216.687763][T13391] ksys_read+0xda/0x1a0 [ 216.687787][T13391] __x64_sys_read+0x40/0x50 [ 216.687805][T13391] x64_sys_call+0x27c0/0x3000 [ 216.687916][T13391] do_syscall_64+0xd2/0x200 [ 216.687946][T13391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 216.687966][T13391] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 216.687997][T13391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.688072][T13391] RIP: 0033:0x7fd71cfcd9dc [ 216.688102][T13391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 216.688120][T13391] RSP: 002b:00007fd71ba37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.688138][T13391] RAX: ffffffffffffffda RBX: 00007fd71d225fa0 RCX: 00007fd71cfcd9dc [ 216.688153][T13391] RDX: 000000000000000f RSI: 00007fd71ba370a0 RDI: 0000000000000004 [ 216.688217][T13391] RBP: 00007fd71ba37090 R08: 0000000000000000 R09: 0000000000000000 [ 216.688231][T13391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.688243][T13391] R13: 00007fd71d226038 R14: 00007fd71d225fa0 R15: 00007fff5bbe2968 [ 216.688261][T13391] [ 216.908367][T13395] loop4: detected capacity change from 0 to 512 [ 216.943429][T13395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.956319][T13395] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.995408][T13401] vhci_hcd: invalid port number 254 [ 217.016850][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.102303][T13413] netlink: 'syz.4.3552': attribute type 10 has an invalid length. [ 217.110191][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3552'. [ 217.199472][T13421] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 217.336181][T13421] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.405458][T13433] 9pnet: Could not find request transport: 18446744073709551615 [ 217.464101][T13442] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3562'. [ 217.493429][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 217.731427][T13451] FAULT_INJECTION: forcing a failure. [ 217.731427][T13451] name failslab, interval 1, probability 0, space 0, times 0 [ 217.744113][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.3.3566 Not tainted syzkaller #0 PREEMPT(voluntary) [ 217.744212][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 217.744228][T13451] Call Trace: [ 217.744237][T13451] [ 217.744246][T13451] __dump_stack+0x1d/0x30 [ 217.744284][T13451] dump_stack_lvl+0xe8/0x140 [ 217.744376][T13451] dump_stack+0x15/0x1b [ 217.744403][T13451] should_fail_ex+0x265/0x280 [ 217.744432][T13451] should_failslab+0x8c/0xb0 [ 217.744482][T13451] kmem_cache_alloc_noprof+0x50/0x480 [ 217.744507][T13451] ? skb_clone+0x151/0x1f0 [ 217.744542][T13451] skb_clone+0x151/0x1f0 [ 217.744585][T13451] __netlink_deliver_tap+0x2c9/0x500 [ 217.744626][T13451] netlink_unicast+0x66b/0x690 [ 217.744657][T13451] netlink_sendmsg+0x58b/0x6b0 [ 217.744705][T13451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.744738][T13451] __sock_sendmsg+0x145/0x180 [ 217.744790][T13451] ____sys_sendmsg+0x31e/0x4e0 [ 217.744865][T13451] ___sys_sendmsg+0x17b/0x1d0 [ 217.744969][T13451] __x64_sys_sendmsg+0xd4/0x160 [ 217.745000][T13451] x64_sys_call+0x191e/0x3000 [ 217.745034][T13451] do_syscall_64+0xd2/0x200 [ 217.745082][T13451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 217.745102][T13451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 217.745173][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.745216][T13451] RIP: 0033:0x7fdbd1e6efc9 [ 217.745230][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.745265][T13451] RSP: 002b:00007fdbd08cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.745332][T13451] RAX: ffffffffffffffda RBX: 00007fdbd20c5fa0 RCX: 00007fdbd1e6efc9 [ 217.745346][T13451] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000003 [ 217.745360][T13451] RBP: 00007fdbd08cf090 R08: 0000000000000000 R09: 0000000000000000 [ 217.745374][T13451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.745389][T13451] R13: 00007fdbd20c6038 R14: 00007fdbd20c5fa0 R15: 00007ffc10edf0d8 [ 217.745410][T13451] [ 218.015010][T13468] sctp: [Deprecated]: syz.4.3568 (pid 13468) Use of struct sctp_assoc_value in delayed_ack socket option. [ 218.015010][T13468] Use struct sctp_sack_info instead [ 218.059018][T13472] vhci_hcd: invalid port number 254 [ 218.074292][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 218.083259][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3576'. [ 218.114739][T13474] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3576'. [ 218.123856][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 218.155403][T13483] 9pnet_fd: Insufficient options for proto=fd [ 218.169418][T13485] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.211780][T13485] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.255700][T13491] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.271669][T13485] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.313337][T13491] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.361983][T13485] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.392217][T13491] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.437374][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.456886][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.482915][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.494558][T13491] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.517201][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.747597][T12027] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.759840][T12027] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.789064][T12027] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.829240][T12027] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.849102][T13511] bond0: entered promiscuous mode [ 218.855213][T13511] bond0: left promiscuous mode [ 219.215322][T13544] sctp: [Deprecated]: syz.1.3599 (pid 13544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.215322][T13544] Use struct sctp_sack_info instead [ 219.269899][T13548] netlink: 'syz.2.3600': attribute type 10 has an invalid length. [ 219.277796][T13548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3600'. [ 219.289793][T13548] dummy0: entered promiscuous mode [ 219.302437][T13548] bridge0: port 3(dummy0) entered blocking state [ 219.308845][T13548] bridge0: port 3(dummy0) entered disabled state [ 219.328799][T13548] dummy0: entered allmulticast mode [ 219.345824][T13548] bridge0: port 3(dummy0) entered blocking state [ 219.352279][T13548] bridge0: port 3(dummy0) entered forwarding state [ 219.388005][T13558] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 219.463680][T13565] loop4: detected capacity change from 0 to 512 [ 219.579540][T13568] netlink: 'syz.2.3609': attribute type 1 has an invalid length. [ 219.620134][T13566] loop4: detected capacity change from 0 to 512 [ 219.628588][T13566] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3608: EA inode hash validation failed [ 219.641492][T13566] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3608: corrupted inode contents [ 219.654023][T13566] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.3608: mark_inode_dirty error [ 219.666105][T13566] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3608: corrupted inode contents [ 219.678352][T13566] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.3608: mark_inode_dirty error [ 219.690547][T13566] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.3608: mark inode dirty (error -117) [ 219.703501][T13566] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 219.712707][T13566] EXT4-fs (loop4): 1 orphan inode deleted [ 219.718889][T13566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.091787][T13587] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.151877][T13587] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.209128][T13587] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.254775][T13590] loop3: detected capacity change from 0 to 512 [ 220.273031][T13590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.286172][T13590] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.351606][T13587] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.384778][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.417256][T12030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.426291][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.447375][T12030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.462750][T12030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.471279][T12030] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.480857][ T29] kauditd_printk_skb: 482 callbacks suppressed [ 220.480873][ T29] audit: type=1326 audit(1761037723.588:16660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 220.510729][ T29] audit: type=1326 audit(1761037723.588:16661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.1.3614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 220.561177][ T29] audit: type=1326 audit(1761037723.688:16662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.585119][ T29] audit: type=1326 audit(1761037723.688:16663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.608745][ T29] audit: type=1326 audit(1761037723.688:16664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.632590][ T29] audit: type=1326 audit(1761037723.688:16665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.656221][ T29] audit: type=1326 audit(1761037723.688:16666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.657675][T13598] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.680155][ T29] audit: type=1326 audit(1761037723.688:16667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.713177][ T29] audit: type=1326 audit(1761037723.688:16668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.736785][ T29] audit: type=1326 audit(1761037723.688:16669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13595 comm="syz.3.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 220.764318][T13603] FAULT_INJECTION: forcing a failure. [ 220.764318][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 220.777047][T13603] CPU: 1 UID: 0 PID: 13603 Comm: syz.1.3620 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.777077][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.777164][T13603] Call Trace: [ 220.777170][T13603] [ 220.777177][T13603] __dump_stack+0x1d/0x30 [ 220.777206][T13603] dump_stack_lvl+0xe8/0x140 [ 220.777343][T13603] dump_stack+0x15/0x1b [ 220.777366][T13603] should_fail_ex+0x265/0x280 [ 220.777394][T13603] ? __se_sys_mount+0xef/0x2e0 [ 220.777429][T13603] should_failslab+0x8c/0xb0 [ 220.777449][T13603] __kmalloc_cache_noprof+0x4c/0x4a0 [ 220.777471][T13603] ? memdup_user+0x99/0xd0 [ 220.777539][T13603] __se_sys_mount+0xef/0x2e0 [ 220.777569][T13603] ? fput+0x8f/0xc0 [ 220.777591][T13603] ? ksys_write+0x192/0x1a0 [ 220.777672][T13603] __x64_sys_mount+0x67/0x80 [ 220.777703][T13603] x64_sys_call+0x2b51/0x3000 [ 220.777736][T13603] do_syscall_64+0xd2/0x200 [ 220.777826][T13603] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.777845][T13603] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.777870][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.777934][T13603] RIP: 0033:0x7fb957d0efc9 [ 220.777948][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.777966][T13603] RSP: 002b:00007fb956777038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 220.777984][T13603] RAX: ffffffffffffffda RBX: 00007fb957f65fa0 RCX: 00007fb957d0efc9 [ 220.777996][T13603] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 220.778007][T13603] RBP: 00007fb956777090 R08: 0000200000000600 R09: 0000000000000000 [ 220.778045][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.778056][T13603] R13: 00007fb957f66038 R14: 00007fb957f65fa0 R15: 00007fff69f5af18 [ 220.778074][T13603] [ 221.022659][T13598] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.042288][T13619] vhci_hcd: invalid port number 254 [ 221.059347][T13621] sctp: [Deprecated]: syz.2.3624 (pid 13621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.059347][T13621] Use struct sctp_sack_info instead [ 221.089526][T13624] loop0: detected capacity change from 0 to 512 [ 221.102359][T13598] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.124388][T13624] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.153678][T13598] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.268222][T12030] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.296731][T12027] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.309442][T12030] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.322114][T12030] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.395530][T13638] netlink: 'syz.0.3633': attribute type 4 has an invalid length. [ 221.885714][T13654] vhci_hcd: invalid port number 254 [ 222.259354][T13664] FAULT_INJECTION: forcing a failure. [ 222.259354][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.272482][T13664] CPU: 1 UID: 0 PID: 13664 Comm: syz.4.3642 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.272565][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.272590][T13664] Call Trace: [ 222.272599][T13664] [ 222.272608][T13664] __dump_stack+0x1d/0x30 [ 222.272660][T13664] dump_stack_lvl+0xe8/0x140 [ 222.272710][T13664] dump_stack+0x15/0x1b [ 222.272797][T13664] should_fail_ex+0x265/0x280 [ 222.272831][T13664] should_fail+0xb/0x20 [ 222.272857][T13664] should_fail_usercopy+0x1a/0x20 [ 222.272949][T13664] _copy_from_user+0x1c/0xb0 [ 222.272976][T13664] __sys_bind+0x106/0x2a0 [ 222.273010][T13664] __x64_sys_bind+0x3f/0x50 [ 222.273034][T13664] x64_sys_call+0x2b72/0x3000 [ 222.273115][T13664] do_syscall_64+0xd2/0x200 [ 222.273175][T13664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.273198][T13664] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.273230][T13664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.273313][T13664] RIP: 0033:0x7fd71cfcefc9 [ 222.273333][T13664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.273354][T13664] RSP: 002b:00007fd71ba37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 222.273373][T13664] RAX: ffffffffffffffda RBX: 00007fd71d225fa0 RCX: 00007fd71cfcefc9 [ 222.273385][T13664] RDX: 000000000000001c RSI: 0000200000000640 RDI: 0000000000000003 [ 222.273401][T13664] RBP: 00007fd71ba37090 R08: 0000000000000000 R09: 0000000000000000 [ 222.273415][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.273431][T13664] R13: 00007fd71d226038 R14: 00007fd71d225fa0 R15: 00007fff5bbe2968 [ 222.273455][T13664] [ 222.512739][T13672] loop4: detected capacity change from 0 to 512 [ 222.557805][T13672] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.616858][T13685] vhci_hcd: invalid port number 254 [ 222.628906][T13687] loop3: detected capacity change from 0 to 512 [ 222.644446][T13687] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.647287][T13691] FAULT_INJECTION: forcing a failure. [ 222.647287][T13691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.662024][T13692] sctp: [Deprecated]: syz.1.3647 (pid 13692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.662024][T13692] Use struct sctp_sack_info instead [ 222.668099][T13691] CPU: 0 UID: 0 PID: 13691 Comm: syz.0.3651 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.668167][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.668184][T13691] Call Trace: [ 222.668194][T13691] [ 222.668206][T13691] __dump_stack+0x1d/0x30 [ 222.668263][T13691] dump_stack_lvl+0xe8/0x140 [ 222.668301][T13691] dump_stack+0x15/0x1b [ 222.668336][T13691] should_fail_ex+0x265/0x280 [ 222.668378][T13691] should_fail+0xb/0x20 [ 222.668582][T13691] should_fail_usercopy+0x1a/0x20 [ 222.668624][T13691] _copy_to_user+0x20/0xa0 [ 222.668652][T13691] copy_siginfo_to_user+0x22/0xb0 [ 222.668699][T13691] x64_setup_rt_frame+0x2b5/0x580 [ 222.668749][T13691] arch_do_signal_or_restart+0x23e/0x440 [ 222.668793][T13691] exit_to_user_mode_loop+0x77/0x110 [ 222.668877][T13691] do_syscall_64+0x1d6/0x200 [ 222.668922][T13691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.668950][T13691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.669045][T13691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.669108][T13691] RIP: 0033:0x7fa8b198efc7 [ 222.669128][T13691] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 222.669153][T13691] RSP: 002b:00007fa8b03f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 222.669178][T13691] RAX: 000000000000012b RBX: 00007fa8b1be5fa0 RCX: 00007fa8b198efc9 [ 222.669268][T13691] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 222.669363][T13691] RBP: 00007fa8b03f7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.669379][T13691] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 222.669396][T13691] R13: 00007fa8b1be6038 R14: 00007fa8b1be5fa0 R15: 00007fff674d66f8 [ 222.669421][T13691] [ 222.919337][T13708] FAULT_INJECTION: forcing a failure. [ 222.919337][T13708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.932633][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.0.3658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 222.932674][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.932686][T13708] Call Trace: [ 222.932692][T13708] [ 222.932700][T13708] __dump_stack+0x1d/0x30 [ 222.932729][T13708] dump_stack_lvl+0xe8/0x140 [ 222.932762][T13708] dump_stack+0x15/0x1b [ 222.932867][T13708] should_fail_ex+0x265/0x280 [ 222.932903][T13708] should_fail+0xb/0x20 [ 222.932931][T13708] should_fail_usercopy+0x1a/0x20 [ 222.933035][T13708] _copy_from_user+0x1c/0xb0 [ 222.933093][T13708] __sys_bind+0x106/0x2a0 [ 222.933206][T13708] __x64_sys_bind+0x3f/0x50 [ 222.933229][T13708] x64_sys_call+0x2b72/0x3000 [ 222.933261][T13708] do_syscall_64+0xd2/0x200 [ 222.933356][T13708] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.933440][T13708] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.933496][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.933518][T13708] RIP: 0033:0x7fa8b198efc9 [ 222.933533][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.933552][T13708] RSP: 002b:00007fa8b03f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 222.933572][T13708] RAX: ffffffffffffffda RBX: 00007fa8b1be5fa0 RCX: 00007fa8b198efc9 [ 222.933596][T13708] RDX: 0000000000000006 RSI: 0000200000000140 RDI: 0000000000000004 [ 222.933608][T13708] RBP: 00007fa8b03f7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.933677][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.933689][T13708] R13: 00007fa8b1be6038 R14: 00007fa8b1be5fa0 R15: 00007fff674d66f8 [ 222.933709][T13708] [ 222.939233][T13710] FAULT_INJECTION: forcing a failure. [ 222.939233][T13710] name failslab, interval 1, probability 0, space 0, times 0 [ 222.998796][T13715] vhci_hcd: invalid port number 254 [ 223.002460][T13710] CPU: 0 UID: 0 PID: 13710 Comm: syz.4.3652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.002496][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.002565][T13710] Call Trace: [ 223.002591][T13710] [ 223.002635][T13710] __dump_stack+0x1d/0x30 [ 223.002676][T13710] dump_stack_lvl+0xe8/0x140 [ 223.002715][T13710] dump_stack+0x15/0x1b [ 223.002833][T13710] should_fail_ex+0x265/0x280 [ 223.002904][T13710] ? copy_ipcs+0xf5/0x3a0 [ 223.002940][T13710] should_failslab+0x8c/0xb0 [ 223.002970][T13710] __kmalloc_cache_noprof+0x4c/0x4a0 [ 223.003017][T13710] copy_ipcs+0xf5/0x3a0 [ 223.003054][T13710] create_new_namespaces+0x12a/0x3d0 [ 223.003101][T13710] unshare_nsproxy_namespaces+0xe8/0x120 [ 223.003150][T13710] ksys_unshare+0x3d0/0x6d0 [ 223.003184][T13710] ? ksys_write+0x192/0x1a0 [ 223.003212][T13710] __x64_sys_unshare+0x1f/0x30 [ 223.003281][T13710] x64_sys_call+0x2915/0x3000 [ 223.003324][T13710] do_syscall_64+0xd2/0x200 [ 223.003364][T13710] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.003426][T13710] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.003452][T13710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.003473][T13710] RIP: 0033:0x7fd71cfcefc9 [ 223.003494][T13710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.003519][T13710] RSP: 002b:00007fd71ba16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 223.003578][T13710] RAX: ffffffffffffffda RBX: 00007fd71d226090 RCX: 00007fd71cfcefc9 [ 223.003677][T13710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c040000 [ 223.003694][T13710] RBP: 00007fd71ba16090 R08: 0000000000000000 R09: 0000000000000000 [ 223.003712][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.003730][T13710] R13: 00007fd71d226128 R14: 00007fd71d226090 R15: 00007fff5bbe2968 [ 223.003758][T13710] [ 223.168470][T13718] loop3: detected capacity change from 0 to 4096 [ 223.346486][T13732] loop3: detected capacity change from 0 to 512 [ 223.362656][T13732] EXT4-fs mount: 6 callbacks suppressed [ 223.362672][T13732] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.381566][T13732] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.431865][T13730] 9pnet_fd: Insufficient options for proto=fd [ 223.445073][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.556188][T13760] 9pnet_fd: Insufficient options for proto=fd [ 223.687182][T13758] FAULT_INJECTION: forcing a failure. [ 223.687182][T13758] name failslab, interval 1, probability 0, space 0, times 0 [ 223.699906][T13758] CPU: 1 UID: 0 PID: 13758 Comm: syz.2.3676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.699935][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.699957][T13758] Call Trace: [ 223.699964][T13758] [ 223.699972][T13758] __dump_stack+0x1d/0x30 [ 223.700002][T13758] dump_stack_lvl+0xe8/0x140 [ 223.700028][T13758] dump_stack+0x15/0x1b [ 223.700093][T13758] should_fail_ex+0x265/0x280 [ 223.700131][T13758] should_failslab+0x8c/0xb0 [ 223.700154][T13758] __kvmalloc_node_noprof+0x12e/0x670 [ 223.700177][T13758] ? alloc_netdev_mqs+0xa5/0xa50 [ 223.700259][T13758] ? __pfx_sl_setup+0x10/0x10 [ 223.700284][T13758] alloc_netdev_mqs+0xa5/0xa50 [ 223.700319][T13758] slip_open+0x2d1/0x920 [ 223.700410][T13758] ? vfree+0x295/0x3a0 [ 223.700463][T13758] ? up_write+0x18/0x60 [ 223.700481][T13758] tty_ldisc_open+0x5d/0xb0 [ 223.700522][T13758] tty_set_ldisc+0x1db/0x380 [ 223.700587][T13758] tiocsetd+0x51/0x60 [ 223.700653][T13758] tty_ioctl+0xa79/0xb80 [ 223.700675][T13758] ? __pfx_tty_ioctl+0x10/0x10 [ 223.700734][T13758] __se_sys_ioctl+0xce/0x140 [ 223.700763][T13758] __x64_sys_ioctl+0x43/0x50 [ 223.700792][T13758] x64_sys_call+0x1816/0x3000 [ 223.700914][T13758] do_syscall_64+0xd2/0x200 [ 223.700945][T13758] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.700966][T13758] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.701025][T13758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.701048][T13758] RIP: 0033:0x7fe82d89efc9 [ 223.701063][T13758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.701082][T13758] RSP: 002b:00007fe82c307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 223.701101][T13758] RAX: ffffffffffffffda RBX: 00007fe82daf5fa0 RCX: 00007fe82d89efc9 [ 223.701116][T13758] RDX: 00002000000002c0 RSI: 0000000000005423 RDI: 0000000000000004 [ 223.701210][T13758] RBP: 00007fe82c307090 R08: 0000000000000000 R09: 0000000000000000 [ 223.701301][T13758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.701316][T13758] R13: 00007fe82daf6038 R14: 00007fe82daf5fa0 R15: 00007ffe40212ec8 [ 223.701335][T13758] [ 224.122176][T13777] sctp: [Deprecated]: syz.2.3680 (pid 13777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.122176][T13777] Use struct sctp_sack_info instead [ 224.154770][T13779] loop0: detected capacity change from 0 to 512 [ 224.193494][T13779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.213629][T13779] ext4 filesystem being mounted at /168/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.301344][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.331032][T13787] loop4: detected capacity change from 0 to 512 [ 224.391424][T13787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.414298][T13787] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.437550][T13793] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 224.520581][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.674888][T13814] 9pnet_fd: Insufficient options for proto=fd [ 224.938711][T13821] vhci_hcd: invalid port number 254 [ 225.191368][T13837] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.221854][T13837] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.281856][T13837] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.351234][T13837] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.446573][T13842] loop4: detected capacity change from 0 to 512 [ 225.460444][T12030] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.475568][T12030] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.484743][T13842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.493009][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 225.493044][ T29] audit: type=1326 audit(1761037728.628:16824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 225.500710][T12030] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.503419][ T29] audit: type=1326 audit(1761037728.628:16825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13836 comm="syz.1.3703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 225.558797][T13842] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.577271][T12027] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.602706][T13849] vhci_hcd: invalid port number 254 [ 225.610617][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.621944][T13851] loop3: detected capacity change from 0 to 512 [ 225.646097][T13851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.660217][T13851] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.711198][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.755506][T13864] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 225.771292][ T29] audit: type=1400 audit(1761037728.878:16826): avc: denied { write } for pid=13862 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 225.790207][ T29] audit: type=1326 audit(1761037728.888:16827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 225.814132][ T29] audit: type=1326 audit(1761037728.888:16828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbd1e70ee7 code=0x7ffc0000 [ 225.837725][ T29] audit: type=1326 audit(1761037728.888:16829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fdbd1e70e5c code=0x7ffc0000 [ 225.861252][ T29] audit: type=1326 audit(1761037728.888:16830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbd1e70d94 code=0x7ffc0000 [ 225.885064][ T29] audit: type=1326 audit(1761037728.888:16831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdbd1e70d94 code=0x7ffc0000 [ 225.908717][ T29] audit: type=1326 audit(1761037728.888:16832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdbd1e6dc2a code=0x7ffc0000 [ 225.932452][ T29] audit: type=1326 audit(1761037728.888:16833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13872 comm="syz.3.3715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbd1e6efc9 code=0x7ffc0000 [ 225.940232][T13884] 9pnet_fd: Insufficient options for proto=fd [ 225.963094][T13883] loop2: detected capacity change from 0 to 512 [ 226.001059][T13883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.020769][T13883] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.030587][T13892] vhci_hcd: invalid port number 254 [ 226.149012][T13120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.165732][T13904] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.211701][T13914] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3732'. [ 226.222963][T13904] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.284807][T13904] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.308893][T13922] vhci_hcd: invalid port number 254 [ 226.352092][T13904] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.405554][T13931] loop3: detected capacity change from 0 to 512 [ 226.425595][T13931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.438546][T13931] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.491896][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.696879][T13950] loop3: detected capacity change from 0 to 512 [ 226.712357][T13950] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.3744: inode #0: comm syz.3.3744: iget: illegal inode # [ 226.738150][T13953] FAULT_INJECTION: forcing a failure. [ 226.738150][T13953] name failslab, interval 1, probability 0, space 0, times 0 [ 226.750846][T13953] CPU: 0 UID: 0 PID: 13953 Comm: syz.4.3746 Not tainted syzkaller #0 PREEMPT(voluntary) [ 226.750938][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.750969][T13953] Call Trace: [ 226.750978][T13953] [ 226.750986][T13953] __dump_stack+0x1d/0x30 [ 226.751017][T13953] dump_stack_lvl+0xe8/0x140 [ 226.751051][T13953] dump_stack+0x15/0x1b [ 226.751160][T13953] should_fail_ex+0x265/0x280 [ 226.751199][T13953] should_failslab+0x8c/0xb0 [ 226.751225][T13953] kmem_cache_alloc_noprof+0x50/0x480 [ 226.751248][T13953] ? alloc_empty_file+0x76/0x200 [ 226.751323][T13953] alloc_empty_file+0x76/0x200 [ 226.751349][T13953] alloc_file_clone+0x3a/0xa0 [ 226.751373][T13953] do_shmat+0x3b4/0x790 [ 226.751519][T13953] __x64_sys_shmat+0x61/0xb0 [ 226.751542][T13953] x64_sys_call+0x2f19/0x3000 [ 226.751579][T13953] do_syscall_64+0xd2/0x200 [ 226.751615][T13953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 226.751635][T13953] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 226.751676][T13953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.751719][T13953] RIP: 0033:0x7fd71cfcefc9 [ 226.751734][T13953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.751751][T13953] RSP: 002b:00007fd71ba37038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 226.751808][T13953] RAX: ffffffffffffffda RBX: 00007fd71d225fa0 RCX: 00007fd71cfcefc9 [ 226.751821][T13953] RDX: 0000000000004000 RSI: 0000200000ffb000 RDI: 0000000000000000 [ 226.751835][T13953] RBP: 00007fd71ba37090 R08: 0000000000000000 R09: 0000000000000000 [ 226.751914][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.751927][T13953] R13: 00007fd71d226038 R14: 00007fd71d225fa0 R15: 00007fff5bbe2968 [ 226.751951][T13953] [ 226.757770][T13950] EXT4-fs (loop3): get orphan inode failed [ 226.971123][T13959] vhci_hcd: invalid port number 254 [ 227.011211][T13950] EXT4-fs (loop3): mount failed [ 227.029995][T13964] loop4: detected capacity change from 0 to 512 [ 227.036998][T13963] FAULT_INJECTION: forcing a failure. [ 227.036998][T13963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.050169][T13963] CPU: 1 UID: 0 PID: 13963 Comm: syz.0.3749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.050201][T13963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.050231][T13963] Call Trace: [ 227.050239][T13963] [ 227.050246][T13963] __dump_stack+0x1d/0x30 [ 227.050277][T13963] dump_stack_lvl+0xe8/0x140 [ 227.050309][T13963] dump_stack+0x15/0x1b [ 227.050367][T13963] should_fail_ex+0x265/0x280 [ 227.050396][T13963] should_fail+0xb/0x20 [ 227.050422][T13963] should_fail_usercopy+0x1a/0x20 [ 227.050468][T13963] _copy_from_user+0x1c/0xb0 [ 227.050493][T13963] bpf_test_init+0xb9/0x140 [ 227.050529][T13963] bpf_prog_test_run_xdp+0x305/0x970 [ 227.050567][T13963] ? _kstrtol+0x51/0x90 [ 227.050593][T13963] ? __rcu_read_unlock+0x4f/0x70 [ 227.050672][T13963] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 227.050701][T13963] bpf_prog_test_run+0x22a/0x390 [ 227.050738][T13963] __sys_bpf+0x4c0/0x7c0 [ 227.050816][T13963] __x64_sys_bpf+0x41/0x50 [ 227.050839][T13963] x64_sys_call+0x2aee/0x3000 [ 227.050873][T13963] do_syscall_64+0xd2/0x200 [ 227.050923][T13963] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.050943][T13963] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 227.051049][T13963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.051074][T13963] RIP: 0033:0x7fa8b198efc9 [ 227.051089][T13963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.051139][T13963] RSP: 002b:00007fa8b03f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 227.051159][T13963] RAX: ffffffffffffffda RBX: 00007fa8b1be5fa0 RCX: 00007fa8b198efc9 [ 227.051171][T13963] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 227.051182][T13963] RBP: 00007fa8b03f7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.051195][T13963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.051206][T13963] R13: 00007fa8b1be6038 R14: 00007fa8b1be5fa0 R15: 00007fff674d66f8 [ 227.051253][T13963] [ 227.270509][T13964] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.3746: inode #0: comm syz.4.3746: iget: illegal inode # [ 227.294026][T13964] EXT4-fs (loop4): get orphan inode failed [ 227.306727][T13964] EXT4-fs (loop4): mount failed [ 227.354916][T13955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 227.392807][T13945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 227.498041][T13974] loop0: detected capacity change from 0 to 512 [ 227.514654][T12027] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.525495][T13974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.565388][T13980] netlink: 'syz.1.3756': attribute type 10 has an invalid length. [ 227.573338][T13980] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3756'. [ 227.584577][T12027] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.593148][T12027] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.601593][T12027] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.609970][T13974] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.694060][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.723097][T13987] vhci_hcd: invalid port number 254 [ 227.732619][T13942] syz.3.3744 (13942) used greatest stack depth: 6328 bytes left [ 227.740928][T13989] loop4: detected capacity change from 0 to 512 [ 227.756084][T13992] 9pnet_fd: Insufficient options for proto=fd [ 227.764515][T13989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.777250][T13989] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.783185][T13997] loop3: detected capacity change from 0 to 2048 [ 227.829027][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.841848][T13997] loop3: p1 < > p3 [ 227.849291][T13997] loop3: p3 size 54016 extends beyond EOD, truncated [ 227.880807][T13997] FAULT_INJECTION: forcing a failure. [ 227.880807][T13997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 227.894159][T13997] CPU: 0 UID: 0 PID: 13997 Comm: syz.3.3761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.894194][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 227.894217][T13997] Call Trace: [ 227.894224][T13997] [ 227.894231][T13997] __dump_stack+0x1d/0x30 [ 227.894266][T13997] dump_stack_lvl+0xe8/0x140 [ 227.894361][T13997] dump_stack+0x15/0x1b [ 227.894389][T13997] should_fail_ex+0x265/0x280 [ 227.894419][T13997] should_fail_alloc_page+0xf2/0x100 [ 227.894461][T13997] __alloc_frozen_pages_noprof+0xff/0x360 [ 227.894501][T13997] alloc_pages_mpol+0xb3/0x260 [ 227.894536][T13997] folio_alloc_noprof+0x97/0x150 [ 227.894574][T13997] filemap_alloc_folio_noprof+0x66/0x210 [ 227.894614][T13997] __filemap_get_folio+0x28f/0x650 [ 227.894674][T13997] ? put_dec_trunc8+0x119/0x140 [ 227.894704][T13997] iomap_write_begin+0x324/0x1090 [ 227.894750][T13997] ? I_BDEV+0xd/0x20 [ 227.894831][T13997] ? blkdev_iomap_begin+0xda/0x100 [ 227.894862][T13997] ? __pfx_blkdev_iomap_begin+0x10/0x10 [ 227.894881][T13997] ? fault_in_readable+0x112/0x170 [ 227.894924][T13997] iomap_file_buffered_write+0x31f/0x7f0 [ 227.895040][T13997] blkdev_write_iter+0x3ae/0x4b0 [ 227.895118][T13997] ? __pfx_blkdev_write_iter+0x10/0x10 [ 227.895149][T13997] vfs_write+0x52a/0x960 [ 227.895237][T13997] ksys_write+0xda/0x1a0 [ 227.895256][T13997] __x64_sys_write+0x40/0x50 [ 227.895274][T13997] x64_sys_call+0x2802/0x3000 [ 227.895352][T13997] do_syscall_64+0xd2/0x200 [ 227.895383][T13997] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.895410][T13997] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 227.895483][T13997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.895522][T13997] RIP: 0033:0x7fdbd1e6efc9 [ 227.895540][T13997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.895562][T13997] RSP: 002b:00007fdbd08cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.895692][T13997] RAX: ffffffffffffffda RBX: 00007fdbd20c5fa0 RCX: 00007fdbd1e6efc9 [ 227.895704][T13997] RDX: 0000000000000060 RSI: 0000200000000300 RDI: 0000000000000006 [ 227.895731][T13997] RBP: 00007fdbd08cf090 R08: 0000000000000000 R09: 0000000000000000 [ 227.895742][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.895757][T13997] R13: 00007fdbd20c6038 R14: 00007fdbd20c5fa0 R15: 00007ffc10edf0d8 [ 227.895782][T13997] [ 228.346870][T14017] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.426277][T14017] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.498773][T14017] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.548791][T14017] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.581375][T14029] netlink: 'syz.2.3769': attribute type 10 has an invalid length. [ 228.589325][T14029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3769'. [ 228.697729][T12030] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.714431][T14033] vhci_hcd: invalid port number 254 [ 228.740111][T12030] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.764539][T14037] loop3: detected capacity change from 0 to 512 [ 228.775531][T12030] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.788652][T12027] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.816200][T14037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.837733][T14037] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.856054][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3773'. [ 228.860408][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 228.878313][T14037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3772'. [ 228.889882][T14037] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 228.931487][T14050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.067153][T11834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.110715][T14050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.174484][T14060] binfmt_misc: register: failed to install interpreter file ./file0 [ 229.198641][T14062] netlink: 'syz.1.3778': attribute type 1 has an invalid length. [ 229.213098][T14062] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.222739][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3778'. [ 229.233021][T14050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.284856][T14050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.296464][T14067] bridge0: port 4(gretap0) entered blocking state [ 229.303041][T14067] bridge0: port 4(gretap0) entered disabled state [ 229.309875][T14067] gretap0: entered allmulticast mode [ 229.315746][T14067] gretap0: entered promiscuous mode [ 229.322728][T14067] gretap0: left allmulticast mode [ 229.327784][T14067] gretap0: left promiscuous mode [ 229.333001][T14067] bridge0: port 4(gretap0) entered disabled state [ 229.355231][T12032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.370556][T12032] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.383400][T12032] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.395827][T12032] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.698089][T14075] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.720353][T14084] vhci_hcd: invalid port number 254 [ 229.753130][T14075] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.822149][T14096] netlink: 'syz.2.3789': attribute type 1 has an invalid length. [ 229.830787][T14075] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.848643][T14096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.863412][T14096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3789'. [ 229.875457][T14096] bond1 (unregistering): Released all slaves [ 229.887399][T14075] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.970947][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.996311][T14104] netlink: 'syz.2.3791': attribute type 10 has an invalid length. [ 230.004287][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.026187][T14104] bridge0: port 3(dummy0) entered disabled state [ 230.043355][T14104] dummy0: left allmulticast mode [ 230.048628][T14107] netlink: 'syz.2.3791': attribute type 10 has an invalid length. [ 230.056537][T14104] dummy0: left promiscuous mode [ 230.061556][T14104] bridge0: port 3(dummy0) entered disabled state [ 230.075917][T14104] team0: Port device dummy0 added [ 230.172836][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.203911][T14107] team0: Port device dummy0 removed [ 230.225830][T14107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.245476][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.576098][T14123] binfmt_misc: register: failed to install interpreter file ./file0 [ 230.617224][T14127] bridge0: port 4(gretap0) entered blocking state [ 230.623801][T14127] bridge0: port 4(gretap0) entered disabled state [ 230.648439][T14127] gretap0: entered allmulticast mode [ 230.654147][T14129] vhci_hcd: invalid port number 254 [ 230.660791][T14127] gretap0: entered promiscuous mode [ 230.675443][T14130] gretap0: left allmulticast mode [ 230.680549][T14130] gretap0: left promiscuous mode [ 230.685747][T14130] bridge0: port 4(gretap0) entered disabled state [ 230.756745][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 230.756761][ T29] audit: type=1326 audit(1761037733.888:17338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.791107][ T29] audit: type=1326 audit(1761037733.908:17339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.814781][ T29] audit: type=1326 audit(1761037733.908:17340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.838399][ T29] audit: type=1326 audit(1761037733.908:17341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.862153][ T29] audit: type=1326 audit(1761037733.908:17342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.885856][ T29] audit: type=1326 audit(1761037733.908:17343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.909559][ T29] audit: type=1326 audit(1761037733.908:17344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.933364][ T29] audit: type=1326 audit(1761037733.908:17345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.957071][ T29] audit: type=1326 audit(1761037733.908:17346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.980740][ T29] audit: type=1326 audit(1761037733.908:17347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14133 comm="syz.1.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fb957d0efc9 code=0x7ffc0000 [ 230.987279][T14149] loop0: detected capacity change from 0 to 512 [ 231.017033][T14145] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.021091][T14149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.072006][T14149] vhci_hcd: invalid port number 96 [ 231.077165][T14149] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 231.082985][T14155] binfmt_misc: register: failed to install interpreter file ./file0 [ 231.102398][T14145] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.112866][T11367] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.127981][T14157] bridge0: port 3(gretap0) entered blocking state [ 231.134537][T14157] bridge0: port 3(gretap0) entered disabled state [ 231.141421][T14157] gretap0: entered allmulticast mode [ 231.147554][T14157] gretap0: entered promiscuous mode [ 231.153287][T14157] bridge0: port 3(gretap0) entered blocking state [ 231.159743][T14157] bridge0: port 3(gretap0) entered forwarding state [ 231.167817][T14145] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.178685][T14157] gretap0: left allmulticast mode [ 231.183868][T14157] gretap0: left promiscuous mode [ 231.189020][T14157] bridge0: port 3(gretap0) entered disabled state [ 231.189305][T14160] sctp: [Deprecated]: syz.0.3811 (pid 14160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.189305][T14160] Use struct sctp_sack_info instead [ 231.222054][T14145] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.307662][T12032] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.319932][T12032] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.326191][T14167] loop2: detected capacity change from 0 to 512 [ 231.332190][T12032] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.346038][T12032] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.353206][T14167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.366937][T14167] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.388250][T14172] netlink: 'syz.1.3816': attribute type 10 has an invalid length. [ 231.396166][T14172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3816'. [ 231.422946][T13120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.139957][T14195] bridge0: port 3(gretap0) entered blocking state [ 232.146559][T14195] bridge0: port 3(gretap0) entered disabled state [ 232.160884][T14195] gretap0: entered allmulticast mode [ 232.171716][T14195] gretap0: entered promiscuous mode [ 232.238944][T14195] gretap0: left allmulticast mode [ 232.244096][T14195] gretap0: left promiscuous mode [ 232.249168][T14195] bridge0: port 3(gretap0) entered disabled state [ 232.392477][T14206] netlink: 'syz.1.3827': attribute type 10 has an invalid length. [ 232.400311][T14206] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3827'. [ 232.461425][T14212] netlink: 'syz.1.3830': attribute type 1 has an invalid length. [ 232.479649][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'. [ 232.551418][T14227] bridge0: port 3(gretap0) entered blocking state [ 232.557908][T14227] bridge0: port 3(gretap0) entered disabled state [ 232.564546][T14227] gretap0: entered allmulticast mode [ 232.571066][T14227] gretap0: entered promiscuous mode [ 232.576506][T14227] bridge0: port 3(gretap0) entered blocking state [ 232.582986][T14227] bridge0: port 3(gretap0) entered forwarding state [ 232.602397][T14227] gretap0: left allmulticast mode [ 232.607467][T14227] gretap0: left promiscuous mode [ 232.612610][T14227] bridge0: port 3(gretap0) entered disabled state [ 232.689635][T14242] vhci_hcd: invalid port number 254 [ 232.785479][T14246] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3839'. [ 232.837022][T14249] loop4: detected capacity change from 0 to 512 [ 232.854566][T14249] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.880725][T14252] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 232.888581][T14252] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3841'. [ 232.920982][T14252] dummy0: entered promiscuous mode [ 232.938889][T14252] bond0: (slave dummy0): Releasing backup interface [ 233.202845][T14249] EXT4-fs (loop4): 1 orphan inode deleted [ 233.209081][T14249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.227486][T14249] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.372769][T14252] bridge0: port 3(dummy0) entered blocking state [ 233.379262][T14252] bridge0: port 3(dummy0) entered disabled state [ 233.386295][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 1 [ 233.390960][T14252] dummy0: entered allmulticast mode [ 233.399101][T11001] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.475897][T14272] netlink: 'syz.4.3844': attribute type 1 has an invalid length. [ 233.497096][T14272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3844'. [ 233.517159][T14276] FAULT_INJECTION: forcing a failure. [ 233.517159][T14276] name failslab, interval 1, probability 0, space 0, times 0 [ 233.529831][T14276] CPU: 1 UID: 0 PID: 14276 Comm: syz.1.3847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.529868][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.529880][T14276] Call Trace: [ 233.529886][T14276] [ 233.529921][T14276] __dump_stack+0x1d/0x30 [ 233.529957][T14276] dump_stack_lvl+0xe8/0x140 [ 233.529991][T14276] dump_stack+0x15/0x1b [ 233.530022][T14276] should_fail_ex+0x265/0x280 [ 233.530056][T14276] ? audit_log_d_path+0x8d/0x150 [ 233.530190][T14276] should_failslab+0x8c/0xb0 [ 233.530212][T14276] __kmalloc_cache_noprof+0x4c/0x4a0 [ 233.530318][T14276] audit_log_d_path+0x8d/0x150 [ 233.530413][T14276] audit_log_d_path_exe+0x42/0x70 [ 233.530442][T14276] audit_log_task+0x1e9/0x250 [ 233.530474][T14276] ? kstrtouint+0x76/0xc0 [ 233.530532][T14276] audit_seccomp+0x61/0x100 [ 233.530555][T14276] ? __seccomp_filter+0x82d/0x1250 [ 233.530577][T14276] __seccomp_filter+0x83e/0x1250 [ 233.530602][T14276] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 233.530714][T14276] ? vfs_write+0x7e8/0x960 [ 233.530735][T14276] ? __rcu_read_unlock+0x4f/0x70 [ 233.530780][T14276] ? __fget_files+0x184/0x1c0 [ 233.530809][T14276] __secure_computing+0x82/0x150 [ 233.530902][T14276] syscall_trace_enter+0xcf/0x1e0 [ 233.530928][T14276] do_syscall_64+0xac/0x200 [ 233.531037][T14276] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.531057][T14276] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.531089][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.531133][T14276] RIP: 0033:0x7fb957d0efc9 [ 233.531151][T14276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.531174][T14276] RSP: 002b:00007fb956777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000076 [ 233.531196][T14276] RAX: ffffffffffffffda RBX: 00007fb957f65fa0 RCX: 00007fb957d0efc9 [ 233.531281][T14276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.531296][T14276] RBP: 00007fb956777090 R08: 0000000000000000 R09: 0000000000000000 [ 233.531310][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.531321][T14276] R13: 00007fb957f66038 R14: 00007fb957f65fa0 R15: 00007fff69f5af18 [ 233.531340][T14276] [ 233.770493][T14281] bridge0: port 2(gretap0) entered blocking state [ 233.777009][T14281] bridge0: port 2(gretap0) entered disabled state [ 233.786565][T14281] gretap0: entered allmulticast mode [ 233.798696][T14284] loop2: detected capacity change from 0 to 512 [ 233.824463][T14281] gretap0: entered promiscuous mode [ 233.830283][T14285] gretap0: left allmulticast mode [ 233.835374][T14285] gretap0: left promiscuous mode [ 233.840521][T14285] bridge0: port 2(gretap0) entered disabled state [ 233.862076][ T37] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.892659][T14284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.913615][T14284] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.942430][ T37] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.002345][T14312] loop0: detected capacity change from 0 to 128 [ 234.017340][T13120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.028039][ T37] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.046754][T14312] syz.0.3855: attempt to access beyond end of device [ 234.046754][T14312] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 234.072528][T14322] netlink: 'syz.4.3860': attribute type 1 has an invalid length. [ 234.098988][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'. [ 234.109001][ T37] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.131619][T14334] syz.0.3855: attempt to access beyond end of device [ 234.131619][T14334] loop0: rw=2049, sector=161, nr_sectors = 32 limit=128 [ 234.155608][T14332] loop2: detected capacity change from 0 to 1024 [ 234.164116][T14332] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 234.175180][T14332] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 234.188386][T14334] syz.0.3855: attempt to access beyond end of device [ 234.188386][T14334] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 234.210790][T14334] syz.0.3855: attempt to access beyond end of device [ 234.210790][T14334] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 234.225817][T14332] JBD2: no valid journal superblock found [ 234.231619][T14332] EXT4-fs (loop2): Could not load journal inode [ 234.241221][T14351] vhci_hcd: invalid port number 254 [ 234.269010][T14332] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 234.291562][T14334] syz.0.3855: attempt to access beyond end of device [ 234.291562][T14334] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 234.307562][ T37] dummy0: left allmulticast mode [ 234.317021][ T37] bridge0: port 1(dummy0) entered disabled state [ 234.331555][ T37] bridge_slave_1: left allmulticast mode [ 234.337376][ T37] bridge_slave_1: left promiscuous mode [ 234.343180][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.350772][T14334] syz.0.3855: attempt to access beyond end of device [ 234.350772][T14334] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 234.366833][T14334] syz.0.3855: attempt to access beyond end of device [ 234.366833][T14334] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 234.367997][T14439] netlink: 'syz.4.3862': attribute type 10 has an invalid length. [ 234.380621][T14334] syz.0.3855: attempt to access beyond end of device [ 234.380621][T14334] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 234.388300][T14439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3862'. [ 234.415772][T14334] syz.0.3855: attempt to access beyond end of device [ 234.415772][T14334] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 234.429435][T14334] syz.0.3855: attempt to access beyond end of device [ 234.429435][T14334] loop0: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 234.490882][ T37] bond4 (unregistering): (slave geneve2): Releasing active interface [ 234.593563][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.607075][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.618931][ T37] bond0 (unregistering): Released all slaves [ 234.628255][ T37] bond1 (unregistering): Released all slaves [ 234.646625][ T37] bond2 (unregistering): Released all slaves [ 234.662730][ T37] bond3 (unregistering): Released all slaves [ 234.677527][ T37] bond4 (unregistering): Released all slaves [ 234.696516][T14449] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.729634][T14286] chnl_net:caif_netlink_parms(): no params data found [ 234.780239][T14449] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.827584][ T37] hsr_slave_0: left promiscuous mode [ 234.836839][ T37] hsr_slave_1: left promiscuous mode [ 234.846567][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.854085][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.871427][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.878855][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.886646][ T37] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 234.893730][ T37] batman_adv: batadv0: Removing interface: veth1_vlan [ 234.903268][T14500] vhci_hcd: invalid port number 96 [ 234.908417][T14500] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 234.915994][ T37] veth1_macvtap: left promiscuous mode [ 234.921666][ T37] veth0_macvtap: left promiscuous mode [ 234.927520][ T37] veth1_vlan: left promiscuous mode [ 234.932982][ T37] veth0_vlan: left promiscuous mode [ 235.010876][ T37] team0 (unregistering): Port device team_slave_1 removed [ 235.022877][ T37] team0 (unregistering): Port device team_slave_0 removed [ 235.056905][T14478] bridge0: port 2(gretap0) entered blocking state [ 235.063475][T14478] bridge0: port 2(gretap0) entered disabled state [ 235.070320][T14478] gretap0: entered allmulticast mode [ 235.076474][T14478] gretap0: entered promiscuous mode [ 235.090723][T14449] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.106895][T14499] gretap0: left allmulticast mode [ 235.112039][T14499] gretap0: left promiscuous mode [ 235.117190][T14499] bridge0: port 2(gretap0) entered disabled state [ 235.154141][T14449] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.165565][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.172778][T14286] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.180205][T14286] bridge_slave_0: entered allmulticast mode [ 235.186789][T14286] bridge_slave_0: entered promiscuous mode [ 235.194780][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.201961][T14286] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.209513][T14286] bridge_slave_1: entered allmulticast mode [ 235.216357][T14286] bridge_slave_1: entered promiscuous mode [ 235.238665][T14286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.249167][T14286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.270871][T14286] team0: Port device team_slave_0 added [ 235.277518][T14286] team0: Port device team_slave_1 added [ 235.297835][T14286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.304853][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.330862][T14286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.342439][T14286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.342679][T14615] 9pnet_fd: Insufficient options for proto=fd [ 235.349517][T14286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.349556][T14286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.397601][T12032] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.413006][T12026] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.426138][T12026] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.449167][T12024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.459949][T14286] hsr_slave_0: entered promiscuous mode [ 235.466088][T14286] hsr_slave_1: entered promiscuous mode [ 235.471979][T14286] debugfs: 'hsr0' already exists in 'hsr' [ 235.477748][T14286] Cannot create hsr debugfs directory [ 235.536294][T14694] loop2: detected capacity change from 0 to 256 [ 235.544489][T14694] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.576195][T14286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.585120][T14286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.594795][T14286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.604891][T14286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 235.640538][T14286] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.647897][T14286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.655201][T14286] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.662425][T14286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.678514][T14743] netlink: 'syz.2.3877': attribute type 1 has an invalid length. [ 235.690069][T14743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3877'. [ 235.696326][T14286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.709206][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.717739][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.733429][T14286] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.744561][T12032] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.751813][T12032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.762676][T12032] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.769851][T12032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.867602][T14286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.050221][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 236.050237][ T29] audit: type=1400 audit(1761037739.178:18123): avc: denied { read write } for pid=14776 comm="syz.4.3882" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.085200][T14777] netlink: 15 bytes leftover after parsing attributes in process `syz.4.3882'. [ 236.112207][ T29] audit: type=1400 audit(1761037739.178:18124): avc: denied { open } for pid=14776 comm="syz.4.3882" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 236.137846][T14779] loop4: detected capacity change from 0 to 256 [ 236.145258][T14286] veth0_vlan: entered promiscuous mode [ 236.161276][T14286] veth1_vlan: entered promiscuous mode [ 236.195865][T14786] loop4: detected capacity change from 0 to 256 [ 236.203389][ T29] audit: type=1400 audit(1761037739.308:18125): avc: denied { remount } for pid=14776 comm="syz.4.3882" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 236.207315][T14786] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 236.224749][T14286] veth0_macvtap: entered promiscuous mode [ 236.249058][T14286] veth1_macvtap: entered promiscuous mode [ 236.269560][T14782] bridge0: port 4(gretap0) entered blocking state [ 236.276130][T14782] bridge0: port 4(gretap0) entered disabled state [ 236.291294][T14782] gretap0: entered allmulticast mode [ 236.298436][T14782] gretap0: entered promiscuous mode [ 236.305949][T14789] gretap0: left allmulticast mode [ 236.311049][T14789] gretap0: left promiscuous mode [ 236.316275][T14789] bridge0: port 4(gretap0) entered disabled state [ 236.343323][T14286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.360142][T14286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.378393][ T29] audit: type=1400 audit(1761037739.508:18126): avc: denied { mount } for pid=14795 comm="syz.1.3886" name="/" dev="ramfs" ino=60015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 236.408256][T12032] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.418266][T12032] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.463708][ T29] audit: type=1326 audit(1761037739.508:18127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b198efc9 code=0x7ffc0000 [ 236.487455][ T29] audit: type=1326 audit(1761037739.508:18128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b1990ee7 code=0x7ffc0000 [ 236.511081][ T29] audit: type=1326 audit(1761037739.508:18129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa8b1990e5c code=0x7ffc0000 [ 236.534748][ T29] audit: type=1326 audit(1761037739.508:18130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa8b1990d94 code=0x7ffc0000 [ 236.558425][ T29] audit: type=1326 audit(1761037739.508:18131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa8b1990d94 code=0x7ffc0000 [ 236.582120][ T29] audit: type=1326 audit(1761037739.508:18132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14796 comm="syz.0.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa8b198dc2a code=0x7ffc0000 [ 236.615962][T12032] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.626611][T12032] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.674904][T14812] loop2: detected capacity change from 0 to 1024 [ 236.690693][T14812] EXT4-fs: Ignoring removed oldalloc option [ 236.696752][T14812] EXT4-fs: Ignoring removed bh option [ 236.708097][T14804] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.715807][T14827] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.728018][T14812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.752134][T14804] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.763641][T14825] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3859'. [ 236.791267][T14843] 9pnet_fd: Insufficient options for proto=fd [ 236.816311][T14804] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.862571][T14804] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.929932][T12032] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.948441][T12032] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.968063][T12032] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.986640][T12032] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.061293][T14863] loop4: detected capacity change from 0 to 256 [ 237.068286][T14863] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.227506][T14844] ================================================================== [ 237.235742][T14844] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 237.245165][T14844] [ 237.247500][T14844] read-write to 0xffff888100752d10 of 4 bytes by task 14812 on cpu 1: [ 237.255667][T14844] __writeback_single_inode+0x1e3/0x7c0 [ 237.261249][T14844] writeback_single_inode+0x16d/0x3f0 [ 237.266641][T14844] sync_inode_metadata+0x5b/0x90 [ 237.271604][T14844] generic_buffers_fsync_noflush+0xd9/0x120 [ 237.277540][T14844] ext4_sync_file+0x1ab/0x690 [ 237.282270][T14844] vfs_fsync_range+0x10d/0x130 [ 237.287059][T14844] ext4_buffered_write_iter+0x34f/0x3c0 [ 237.292647][T14844] ext4_file_write_iter+0x387/0xf60 [ 237.297866][T14844] iter_file_splice_write+0x666/0xa60 [ 237.303271][T14844] direct_splice_actor+0x156/0x2a0 [ 237.308425][T14844] splice_direct_to_actor+0x312/0x680 [ 237.313824][T14844] do_splice_direct+0xda/0x150 [ 237.318626][T14844] do_sendfile+0x380/0x650 [ 237.323058][T14844] __x64_sys_sendfile64+0x105/0x150 [ 237.328294][T14844] x64_sys_call+0x2bb4/0x3000 [ 237.333005][T14844] do_syscall_64+0xd2/0x200 [ 237.337531][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.343441][T14844] [ 237.345777][T14844] read to 0xffff888100752d10 of 4 bytes by task 14844 on cpu 0: [ 237.353444][T14844] generic_buffers_fsync_noflush+0x80/0x120 [ 237.359396][T14844] ext4_sync_file+0x1ab/0x690 [ 237.364100][T14844] vfs_fsync_range+0x10d/0x130 [ 237.368875][T14844] ext4_buffered_write_iter+0x34f/0x3c0 [ 237.374436][T14844] ext4_file_write_iter+0x387/0xf60 [ 237.379665][T14844] iter_file_splice_write+0x666/0xa60 [ 237.385073][T14844] direct_splice_actor+0x156/0x2a0 [ 237.390206][T14844] splice_direct_to_actor+0x312/0x680 [ 237.395601][T14844] do_splice_direct+0xda/0x150 [ 237.400388][T14844] do_sendfile+0x380/0x650 [ 237.404829][T14844] __x64_sys_sendfile64+0x105/0x150 [ 237.410048][T14844] x64_sys_call+0x2bb4/0x3000 [ 237.414761][T14844] do_syscall_64+0xd2/0x200 [ 237.419293][T14844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.425203][T14844] [ 237.427534][T14844] value changed: 0x00000042 -> 0x00000000 [ 237.433264][T14844] [ 237.435603][T14844] Reported by Kernel Concurrency Sanitizer on: [ 237.441765][T14844] CPU: 0 UID: 0 PID: 14844 Comm: syz.2.3890 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.451586][T14844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.461658][T14844] ================================================================== [ 237.668593][T13120] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.