last executing test programs: 1m34.038701966s ago: executing program 3 (id=2197): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)={0x1c, 0x78, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\a\x00\x00'}, @nested={0x4, 0x84}]}, 0x1c}], 0x1, 0x0, 0x0, 0x200000c0}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000900)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESDEC, @ANYRESDEC, @ANYRES16], 0x1, 0x2a1, &(0x7f0000000540)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x3c5042, 0x0) sendfile(r1, r1, 0x0, 0x800000009) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x91) pwrite64(r2, &(0x7f0000000140), 0x0, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYRESDEC]) 1m33.755810532s ago: executing program 3 (id=2207): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) (fail_nth: 4) 1m33.31552552s ago: executing program 3 (id=2211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x10000000, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m33.314688901s ago: executing program 3 (id=2213): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b0000000a000000050000000800100001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={r0, &(0x7f0000000040), 0x0}, 0x20) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x226c010, &(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESOCT], 0x10, 0x327, &(0x7f0000000640)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x0, 0x21) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r4, 0x0, 0x4) r5 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5516}) socket$inet6(0xa, 0x3, 0x5) 1m32.037557135s ago: executing program 3 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000011000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd2(0xfffffffe, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r3) sendmsg$NLBL_UNLABEL_C_STATICLIST(r2, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="c50b689dc8e9f043c5ba3e21a493bbac749c87d19c3ff7f7d9302252e544491d177e0929ed1c30b1e143742a7d46c176533c7a43c072c5e214f00c3080582015712988469ae785b3afd71eefbe5d667d43afe5a5ae2d2745c17ab85e66b2cf3e4795bf60da05cd0c1fbe21c72f98430a57748ecca22031f082499cbca02ca8e17f6ad9ad25abf756086035d21a3417d591309ba8d56fdf885c2acbfcb162fd9dd4247d876fb8251fd5b07fef924c6ce453eea5dc42", @ANYRES16=r4, @ANYBLOB="02002cbd7000ffdbdf250500000014000300fe88000000000000000000000000010105000100010000001f00070073797374656d5f753a6f626a6563745f723a6d616e5f743a7330000008000500e0000001"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc001) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180002008000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000005f113400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4048814) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x101, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x2) write$eventfd(r1, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x0) fchdir(r10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6b3a5585, 0x7}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x800}]}, 0x28}, 0x1, 0x0, 0x0, 0x40811}, 0x40001) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@deltaction={0x14, 0x31, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x40814) 1m31.099449104s ago: executing program 3 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fa0322ddadc80c14af8316616e1c661e732fdc14210922be9bcd68bdce0993c8be618db699e6e908436679c5c49778a53300f2a12f37697c6523a0a8754856d933778e03ccaad768d1d8ab9c96a299cf7a2ac17c1f89638c5caa3025b3d06d00bea398e8dd18dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)={0x20000000}) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) r6 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "e791ee6ede1124332a4e0098e16c06492f3fa9e1dd2d5ceb8282f3eac0d24ff6320cbce0da96b11b"}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xa05}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7ae5bb6a}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x300f6f51}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x1bbc6c63}, @NFTA_HOOK_DEV={0x0, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x55db702e}, @NFTA_HOOK_DEV={0x0, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r5) shutdown(r4, 0x0) close(r3) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000000000002800000005002e007f0000000a0001007770616e3000000100002b0002000000"], 0x30}}, 0x0) 1m31.099152504s ago: executing program 32 (id=2230): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fa0322ddadc80c14af8316616e1c661e732fdc14210922be9bcd68bdce0993c8be618db699e6e908436679c5c49778a53300f2a12f37697c6523a0a8754856d933778e03ccaad768d1d8ab9c96a299cf7a2ac17c1f89638c5caa3025b3d06d00bea398e8dd18dc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r2}, 0x20) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)={0x20000000}) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) r6 = socket(0xa, 0x3, 0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'wlan0\x00', &(0x7f0000000680)=@ethtool_regs={0x4, 0x2}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002000000000000060000000006001500040000001400168004000880"], 0x38}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @broadcast}}, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x0, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_USERDATA={0x0, 0xc, "e791ee6ede1124332a4e0098e16c06492f3fa9e1dd2d5ceb8282f3eac0d24ff6320cbce0da96b11b"}, @NFTA_CHAIN_NAME={0x0, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x0, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0x800}, @NFTA_COUNTER_BYTES, @NFTA_COUNTER_PACKETS={0x0, 0x2, 0x1, 0x0, 0xa05}, @NFTA_COUNTER_BYTES={0x0, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HOOK={0x0, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x7ae5bb6a}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x300f6f51}, @NFTA_HOOK_HOOKNUM={0x0, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x1bbc6c63}, @NFTA_HOOK_DEV={0x0, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x55db702e}, @NFTA_HOOK_DEV={0x0, 0x3, 'wlan0\x00'}]}, @NFTA_CHAIN_FLAGS={0x0, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close(r5) shutdown(r4, 0x0) close(r3) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000000000002800000005002e007f0000000a0001007770616e3000000100002b0002000000"], 0x30}}, 0x0) 19.044097509s ago: executing program 5 (id=3396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40"], 0xfdef) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$USBDEVFS_IOCTL(r4, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) r7 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000000c0)) 17.919216621s ago: executing program 5 (id=3422): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000a7977129461585530000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r2 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x49d, &(0x7f0000000400)={0x0, 0xe7a9, 0x1, 0x3ffe, 0x40000008}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8983, &(0x7f0000000040)={0x6, 'bond_slave_1\x00', {0x1}, 0xff7f}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000a00)={0x0, 'batadv_slave_1\x00', {0x3}, 0x2b1}) 17.830849932s ago: executing program 5 (id=3426): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x7fff}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) 17.777069224s ago: executing program 5 (id=3428): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000040)={[{@noblock_validity}]}, 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000005c0), 0x840, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=0x0, &(0x7f0000000440)=0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 17.665109716s ago: executing program 5 (id=3431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = memfd_secret(0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$netlink(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) flock(r6, 0x5) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000002c0)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) (async) preadv(r8, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x3) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) (async) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYRESHEX=r9, @ANYRES8=r9, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0xf) fcntl$setlease(r1, 0x400, 0x0) (async) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) getitimer(0x2, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x55d, &(0x7f0000000580)="$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") (async) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x55d, &(0x7f0000000580)="$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") 17.499545869s ago: executing program 5 (id=3433): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d26a2ea9587f44c2cf2d007866726d0000000014000280080001000300000008000202250000000a00"], 0x50}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4890}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0xe, 0x3]) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) 17.467260229s ago: executing program 33 (id=3433): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d26a2ea9587f44c2cf2d007866726d0000000014000280080001000300000008000202250000000a00"], 0x50}}, 0xc080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280080003400000001608000140"], 0x110}}, 0x40040) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x34, 0x0, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4890}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000080)=[0xe, 0x3]) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f0000000100)) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) 5.840524636s ago: executing program 4 (id=3647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5fa22dbd7000fddbdf0001000000100002800c0001800800010003000000180001801400020076657468310000000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close_range(r8, 0xffffffffffffffff, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./bus\x00', 0x0, 0x4018, r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r10, 0xffffffffffffff07, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_flash={0x33, 0xea5, './bus\x00'}}) 5.10508863s ago: executing program 4 (id=3662): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fb}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) r5 = socket$netlink(0x10, 0x3, 0xe) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x250a00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000080)={0x9, 0x3, 0x4, 0x6, 0x5, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r8}, 0x18) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) sendfile(r0, r10, 0x0, 0x3b) 5.030395292s ago: executing program 4 (id=3664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x5, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8}]}}]}, 0x9c}}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.979293273s ago: executing program 4 (id=3666): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xb, 0x80, 0x30000000, 0x60, @rand_addr=' \x01\x00', @private1, 0x8000, 0x40, 0x4, 0x80}}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x12, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000080000173fbf88ceb208e44064765100000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018250000", @ANYRES32=r0, @ANYBLOB="00000000010000000011060001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x94, &(0x7f00000003c0)=""/148, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x7db2f653, 0x9d4}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000540)=[{0x4, 0x5, 0x0, 0x3}], 0x10, 0x101}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRESHEX=r1], 0x48) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES64=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r5}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x4}, 0x94) r6 = syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0x7fa, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440), 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) 4.951099194s ago: executing program 4 (id=3669): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001200)={r2, 0x9, 0x10, 0x0, 0x7f}, &(0x7f0000001240)=0x18) fcntl$notify(r1, 0x402, 0x20) socket$phonet(0x23, 0x2, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0b000000070000000100010049000000010000005111906f0db98c7c39fd36b4e2579bfed26f9386656a7ba697408a7095d7e78e925adcb681f6fb7e1a6147725631ab19b4f705", @ANYBLOB="9107b14ee7e841ffab6f5f47ae735349dacfaabe51e3dd9aa24b143e18877f9f89f295ffc9d8612ac5138ea7e201beb2b764246c851cffdc7f0f88ceda5df9b169b835a83d291e86d097b0532d5659bfbd2400eedab6da5395039cab66644c3f6ca67afaf543420c72f81b8a420550e11adbec8abd3694f5f799740dd7", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x403, &(0x7f0000000500)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) io_pgetevents(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd60f7d8ff003c3c00fe8000000000000000000000000000aaff0200000000000000000000000000015e04"], 0x0) getdents(r0, &(0x7f00000001c0)=""/4098, 0x1002) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) getdents(r0, 0x0, 0x0) 2.155487158s ago: executing program 0 (id=3731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fstatfs(r0, &(0x7f00000000c0)=""/217) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x31, @loopback, 0x9}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@barrier_val}, {@resuid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r6, 0x0, 0xffffffffffffffff, 0x0) r8 = getpid() r9 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4480, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r8, 0x0, r7, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x80ffff) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r13}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f0000ff}}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x3, 0x10) 1.55456687s ago: executing program 1 (id=3745): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) write$cgroup_type(r3, &(0x7f0000000280), 0xfffffeed) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x14, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x802}, 0x44000) 1.320686795s ago: executing program 6 (id=3748): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5fa22dbd7000fddbdf0001000000100002800c0001800800010003000000180001801400020076657468310000000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_flash={0x33, 0xea5, './bus\x00'}}) 1.315565655s ago: executing program 1 (id=3749): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.273053806s ago: executing program 0 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.272602456s ago: executing program 0 (id=3751): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x0, 0x121428, 0x7fff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xe}) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11d55b6e}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xd3, &(0x7f0000000300)=""/211, 0x41100, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x3, 0x401, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000580)=[r3, r3, r3], &(0x7f00000005c0)=[{0x5, 0x4, 0x6, 0x7}, {0x1, 0x5, 0xe, 0x4}, {0x3, 0x3, 0xd, 0xa}, {0x1, 0x5, 0x5, 0x4}, {0x1, 0x4, 0xc, 0x9}, {0x3, 0x4, 0x8}, {0x2, 0x3, 0x7, 0x5}]}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) 1.254471086s ago: executing program 6 (id=3752): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec00000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b37a120", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x28011, 0xffffffffffffffff, 0x0) 1.241638266s ago: executing program 1 (id=3753): syz_read_part_table(0x5d6, &(0x7f0000000600)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x2, 0xb, 0x101, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x58}}, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x3, r3}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.111704698s ago: executing program 4 (id=3754): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1f5a685a}, 0x4dc8, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 823.222504ms ago: executing program 1 (id=3755): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 584.947379ms ago: executing program 1 (id=3756): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x21880, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 486.190531ms ago: executing program 2 (id=3757): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x3e00, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006"], 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002dbd7000fcdbdf25010000000000000008400000004c001800000006756470000000000000000100000000000000000000000083d4a47913aab121f6bad9aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080ca471b12d992e01e2360f70551713cd7e5b7af35b2bf7e09ff2a2a61d4650aaf5699a3a633beaaf2e35fa7457bec8a32c8d2d8c7c3adfacf818b1e039911cd89"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40011) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYRES16=r1, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x888b, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(r0) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800ef0000000000000000000000000018110000514e41588a767d4f72abd51ccc1feab46e440a78b2707c53204c1687f0151bd014ae8c8754891f7178cee15bbaf9b0d7a29e0573ad5062e44f7ded76672fc1a4eff84014d18183e7c74c5257d570bdf8105350a0e611780f8625e507d316cae65c9b2fa335cb5352fa8a1e6e5cec61", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) open(0x0, 0x143c62, 0x48) mount(0x0, &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x0) 315.977724ms ago: executing program 1 (id=3758): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x4, 0x1, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x28011, 0xffffffffffffffff, 0x0) 265.004215ms ago: executing program 2 (id=3759): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) 190.236836ms ago: executing program 6 (id=3760): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) r1 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)="d8", 0x1, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) keyctl$search(0xa, r1, &(0x7f0000000080)='user\x00', &(0x7f0000000180)={'syz', 0x3}, r0) 181.382967ms ago: executing program 2 (id=3761): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 137.097478ms ago: executing program 6 (id=3762): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x6c, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000480), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0xfffffffffffffddb, 0x0, 0x41100, 0x63549629cf9062c1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xf7}, 0x18) sigaltstack(0x0, 0x0) 133.360608ms ago: executing program 2 (id=3763): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 118.985838ms ago: executing program 0 (id=3764): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ec9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 97.930738ms ago: executing program 6 (id=3765): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xf7}, 0x18) mount_setattr(0xffffffffffffffff, &(0x7f00000020c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x8900, &(0x7f00000005c0)={0x4, 0x1, 0x80000}, 0x20) 97.324848ms ago: executing program 0 (id=3766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x2e, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) preadv(r1, &(0x7f0000000980)=[{&(0x7f0000000280)=""/82, 0x52}, {&(0x7f0000000300)=""/211, 0xd3}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000880)=""/222, 0xde}], 0x6, 0x1, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) chroot(&(0x7f0000000100)='./file0\x00') r5 = socket(0x0, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) syslog(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYRESOCT=r10], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r11}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0xc}, {0x3}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x69df8bde}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltclass={0x38, 0x29, 0x4, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0x7, 0x2}, {0xfff3, 0x5}, {0xe, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7f}}, @tclass_kind_options=@c_netem={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x8056}, 0x2000a090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x481}, 0x1c) 71.099799ms ago: executing program 6 (id=3767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102032900fefd000e40000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$USBDEVFS_IOCTL(r3, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 70.666029ms ago: executing program 2 (id=3768): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xfdef, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="5fa22dbd7000fddbdf0001000000100002800c0001800800010003000000180001801400020076657468310000000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7f}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_flash={0x33, 0xea5, './bus\x00'}}) 4.49703ms ago: executing program 0 (id=3769): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc, 0x2, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200}) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) mkdir(0x0, 0x21) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r3, r3, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x100c085, &(0x7f0000001640)=ANY=[], 0x10, 0x7f4, &(0x7f0000000e40)="$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") 0s ago: executing program 2 (id=3770): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10000, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x0) kernel console output (not intermixed with test programs): h:syzkaller0> [ 211.138300][ T29] audit: type=1326 audit(1758266795.216:18264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.140095][T17070] netlink: 'syz.2.2891': attribute type 1 has an invalid length. [ 211.162005][ T29] audit: type=1326 audit(1758266795.216:18265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.193402][ T29] audit: type=1326 audit(1758266795.216:18266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.217109][ T29] audit: type=1326 audit(1758266795.216:18267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.240723][ T29] audit: type=1326 audit(1758266795.216:18268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.264472][ T29] audit: type=1326 audit(1758266795.216:18269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.288083][ T29] audit: type=1326 audit(1758266795.216:18270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.311795][ T29] audit: type=1326 audit(1758266795.216:18271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.335427][ T29] audit: type=1326 audit(1758266795.216:18272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17067 comm="syz.0.2890" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 211.367748][T17070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.417852][T17070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2891'. [ 211.430008][T17070] bond3 (unregistering): Released all slaves [ 211.469217][T17160] loop5: detected capacity change from 0 to 512 [ 211.476704][T17160] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 211.494992][T17160] EXT4-fs (loop5): 1 truncate cleaned up [ 211.501037][T17160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.515400][T17165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2897'. [ 211.541705][T17160] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.574479][T17168] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 211.592228][T17168] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 211.606106][T17180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'. [ 211.696808][T17216] vhci_hcd: invalid port number 23 [ 211.760061][T17226] bridge_slave_0: left allmulticast mode [ 211.765762][T17226] bridge_slave_0: left promiscuous mode [ 211.771531][T17226] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.797865][T17226] bridge_slave_1: left allmulticast mode [ 211.803578][T17226] bridge_slave_1: left promiscuous mode [ 211.809396][T17226] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.831579][T17226] bond0: (slave bond_slave_0): Releasing backup interface [ 211.843010][T17226] bond0: (slave bond_slave_1): Releasing backup interface [ 211.855813][T17226] team0: Port device team_slave_0 removed [ 211.866954][T17226] team0: Port device team_slave_1 removed [ 211.874325][T17226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.881890][T17226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.892210][T17226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.899752][T17226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.926130][T17237] tipc: Enabling of bearer rejected, failed to enable media [ 211.943192][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2904'. [ 211.990903][T17244] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 212.009971][T17244] SELinux: policydb version 0 does not match my version range 15-35 [ 212.022051][T17244] SELinux: failed to load policy [ 212.048791][T17256] FAULT_INJECTION: forcing a failure. [ 212.048791][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 212.061467][T17256] CPU: 1 UID: 0 PID: 17256 Comm: syz.0.2909 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.061503][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.061516][T17256] Call Trace: [ 212.061522][T17256] [ 212.061530][T17256] __dump_stack+0x1d/0x30 [ 212.061550][T17256] dump_stack_lvl+0xe8/0x140 [ 212.061679][T17256] dump_stack+0x15/0x1b [ 212.061699][T17256] should_fail_ex+0x265/0x280 [ 212.061726][T17256] should_failslab+0x8c/0xb0 [ 212.061798][T17256] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 212.061908][T17256] ? shmem_alloc_inode+0x34/0x50 [ 212.061935][T17256] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 212.061987][T17256] shmem_alloc_inode+0x34/0x50 [ 212.062014][T17256] alloc_inode+0x40/0x170 [ 212.062107][T17256] new_inode+0x1d/0xe0 [ 212.062134][T17256] shmem_get_inode+0x244/0x750 [ 212.062155][T17256] ? __se_sys_memfd_create+0x1cc/0x590 [ 212.062229][T17256] __shmem_file_setup+0x113/0x210 [ 212.062275][T17256] shmem_file_setup+0x3b/0x50 [ 212.062296][T17256] __se_sys_memfd_create+0x2c3/0x590 [ 212.062319][T17256] __x64_sys_memfd_create+0x31/0x40 [ 212.062422][T17256] x64_sys_call+0x2abe/0x2ff0 [ 212.062448][T17256] do_syscall_64+0xd2/0x200 [ 212.062486][T17256] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.062519][T17256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.062567][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.062589][T17256] RIP: 0033:0x7f0992a4eba9 [ 212.062617][T17256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.062768][T17256] RSP: 002b:00007f09914aee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 212.062793][T17256] RAX: ffffffffffffffda RBX: 0000000000000625 RCX: 00007f0992a4eba9 [ 212.062808][T17256] RDX: 00007f09914aeef0 RSI: 0000000000000000 RDI: 00007f0992ad27e8 [ 212.062820][T17256] RBP: 0000200000000800 R08: 00007f09914aebb7 R09: 00007f09914aee40 [ 212.062832][T17256] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 212.062844][T17256] R13: 00007f09914aeef0 R14: 00007f09914aeeb0 R15: 0000200000000140 [ 212.062868][T17256] [ 212.310755][T17268] netlink: 'syz.4.2912': attribute type 1 has an invalid length. [ 212.330931][T17268] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.367117][T17268] bond2 (unregistering): Released all slaves [ 212.385883][T17276] loop2: detected capacity change from 0 to 164 [ 212.416576][T17304] vhci_hcd: invalid port number 23 [ 212.438407][T17276] Unable to read rock-ridge attributes [ 212.471078][T17306] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 212.480315][T17276] Unable to read rock-ridge attributes [ 212.494814][T17306] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 212.577943][T17356] tipc: Enabling of bearer rejected, failed to enable media [ 212.864997][T17366] loop5: detected capacity change from 0 to 512 [ 212.891561][T17366] EXT4-fs: Ignoring removed nobh option [ 212.979572][T17366] EXT4-fs (loop5): orphan cleanup on readonly fs [ 212.985999][T17366] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 212.994943][T17366] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 213.010851][T17366] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2923: attempt to clear invalid blocks 2 len 1 [ 213.024141][T17366] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2923: invalid indirect mapped block 1819239214 (level 0) [ 213.142285][T17366] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2923: invalid indirect mapped block 1819239214 (level 1) [ 213.168788][T17366] EXT4-fs (loop5): 1 truncate cleaned up [ 213.174879][T17366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 213.190921][T17372] pim6reg1: entered promiscuous mode [ 213.196321][T17372] pim6reg1: entered allmulticast mode [ 213.320252][T17377] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 213.543987][T17377] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 213.671369][T12587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.830257][T17442] loop4: detected capacity change from 0 to 512 [ 213.836967][T17442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 213.860495][T17442] EXT4-fs (loop4): 1 truncate cleaned up [ 213.879883][T17442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.900678][T17442] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.400640][T17488] __nla_validate_parse: 3 callbacks suppressed [ 214.400656][T17488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2946'. [ 214.574277][T17507] loop2: detected capacity change from 0 to 164 [ 214.591275][T17507] Unable to read rock-ridge attributes [ 214.598526][T17507] Unable to read rock-ridge attributes [ 214.659598][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 214.659622][ T29] audit: type=1400 audit(1758266798.746:18422): avc: denied { watch } for pid=17538 comm="syz.2.2954" path="cgroup:[4026532382]" dev="nsfs" ino=4026532382 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.753980][T17543] tipc: Enabling of bearer rejected, failed to enable media [ 214.783010][T17546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2957'. [ 214.911303][T17551] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 214.952055][T17551] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 214.969902][T17551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2959'. [ 214.988970][ T29] audit: type=1326 audit(1758266799.076:18423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.012686][ T29] audit: type=1326 audit(1758266799.076:18424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.038369][ T29] audit: type=1326 audit(1758266799.126:18425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.062286][ T29] audit: type=1326 audit(1758266799.126:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.085966][ T29] audit: type=1326 audit(1758266799.126:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.112158][ T29] audit: type=1326 audit(1758266799.176:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.135868][ T29] audit: type=1326 audit(1758266799.176:18429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.159820][ T29] audit: type=1326 audit(1758266799.176:18430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.183474][ T29] audit: type=1326 audit(1758266799.176:18431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17559 comm="syz.1.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 215.326427][T17569] SELinux: ebitmap: truncated map [ 215.333553][T17579] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2969'. [ 215.353796][T17569] SELinux: failed to load policy [ 215.370903][T17582] loop4: detected capacity change from 0 to 2048 [ 215.378669][T17582] ext4: Unknown parameter 'obj_user' [ 215.484199][T17597] SELinux: failed to load policy [ 215.544569][T17603] loop5: detected capacity change from 0 to 512 [ 215.558813][T17603] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.579832][T17603] EXT4-fs (loop5): 1 truncate cleaned up [ 215.590069][T17603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.604368][T17603] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.985574][T17627] random: crng reseeded on system resumption [ 216.379512][T17626] loop5: detected capacity change from 0 to 764 [ 216.386949][T17626] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 216.391537][T17638] tipc: Enabling of bearer rejected, failed to enable media [ 216.426993][T17645] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2991'. [ 216.481149][T17648] random: crng reseeded on system resumption [ 216.575394][T17645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.840865][T17649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 216.853045][T17649] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 216.864877][T17649] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 217.212424][T17710] loop4: detected capacity change from 0 to 512 [ 217.292845][T17710] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 217.411415][T17710] EXT4-fs (loop4): mount failed [ 217.518508][T17728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 217.656790][T17741] vhci_hcd: invalid port number 23 [ 218.019790][T17748] loop5: detected capacity change from 0 to 128 [ 218.164565][T17759] loop4: detected capacity change from 0 to 2048 [ 218.242557][T17759] loop4: p1 p2 p3 [ 218.284738][T17759] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 218.297912][T17759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 218.440457][T17782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3014'. [ 218.779920][T17775] Set syz1 is full, maxelem 65536 reached [ 219.193107][T17825] random: crng reseeded on system resumption [ 220.005089][T17850] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.027312][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 220.027332][ T29] audit: type=1400 audit(1758266804.086:18718): avc: denied { write } for pid=17847 comm="syz.2.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.081740][T17854] vhci_hcd: invalid port number 23 [ 220.132410][ T29] audit: type=1400 audit(1758266804.156:18719): avc: denied { ioctl } for pid=17847 comm="syz.2.3024" path="socket:[39733]" dev="sockfs" ino=39733 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.141752][T17860] smc: net device bond0 applied user defined pnetid SYZ0 [ 220.284296][T17860] smc: net device bond0 erased user defined pnetid SYZ0 [ 220.417948][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 220.426972][T17865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3029'. [ 220.593609][T17876] loop2: detected capacity change from 0 to 1024 [ 220.711800][T17876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.807011][T17873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3033'. [ 220.871162][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.926422][T17889] smc: net device bond0 applied user defined pnetid SYZ0 [ 220.974427][T17889] smc: net device bond0 erased user defined pnetid SYZ0 [ 221.190286][T17896] random: crng reseeded on system resumption [ 221.281213][T17902] loop2: detected capacity change from 0 to 512 [ 221.308312][T17902] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.335577][T17902] EXT4-fs (loop2): 1 truncate cleaned up [ 221.341712][T17902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.365989][T17907] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.373943][T17902] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.454784][ T29] audit: type=1326 audit(1758266805.536:18720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.478521][ T29] audit: type=1326 audit(1758266805.536:18721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.502275][ T29] audit: type=1326 audit(1758266805.536:18722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.525881][ T29] audit: type=1326 audit(1758266805.536:18723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.549605][ T29] audit: type=1326 audit(1758266805.536:18724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.555788][T17920] tipc: Enabling of bearer rejected, failed to enable media [ 221.573283][ T29] audit: type=1326 audit(1758266805.536:18725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.573324][ T29] audit: type=1326 audit(1758266805.536:18726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.573359][ T29] audit: type=1326 audit(1758266805.536:18727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17917 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 221.825093][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3049'. [ 221.888739][T17931] SELinux: failed to load policy [ 222.112695][T17934] loop2: detected capacity change from 0 to 128 [ 222.243457][T17938] vhci_hcd: invalid port number 23 [ 222.404051][T17942] loop5: detected capacity change from 0 to 1024 [ 222.432065][T17942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.470457][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3054'. [ 222.500762][T12587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.569938][T17959] tipc: Enabling of bearer rejected, failed to enable media [ 222.610563][T17965] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 222.629090][T17965] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.642056][T17965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3061'. [ 222.653490][T17965] bond2 (unregistering): Released all slaves [ 222.743813][T18041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 222.765442][T18041] team0: Port device vlan0 removed [ 222.970141][T18080] loop4: detected capacity change from 0 to 8192 [ 222.987011][T18080] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=18080 comm=syz.4.3066 [ 223.076154][T18070] chnl_net:caif_netlink_parms(): no params data found [ 223.155275][T18070] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.162564][T18070] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.184881][T18070] bridge_slave_0: entered allmulticast mode [ 223.202408][T18070] bridge_slave_0: entered promiscuous mode [ 223.213233][T18070] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.220374][T18070] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.227813][T18070] bridge_slave_1: entered allmulticast mode [ 223.234455][T18070] bridge_slave_1: entered promiscuous mode [ 223.259885][T18247] tipc: Enabling of bearer rejected, failed to enable media [ 223.270415][T18070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.280966][T18070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.332303][T18070] team0: Port device team_slave_0 added [ 223.341908][T18070] team0: Port device team_slave_1 added [ 223.398211][T18070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.405270][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.431407][T18070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.447011][T18070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.454074][T18070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.480068][T18070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.542104][T18361] loop5: detected capacity change from 0 to 512 [ 223.551230][T18070] hsr_slave_0: entered promiscuous mode [ 223.557826][T18070] hsr_slave_1: entered promiscuous mode [ 223.563872][T18070] debugfs: 'hsr0' already exists in 'hsr' [ 223.569676][T18070] Cannot create hsr debugfs directory [ 223.578497][T18361] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.593470][T18361] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.679622][T18418] vhci_hcd: invalid port number 23 [ 223.696322][T18361] vhci_hcd: invalid port number 96 [ 223.701606][T18361] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 223.712402][T18070] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.736861][T12587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.770916][T18070] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.831511][T18070] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.885499][T18070] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.962295][T18070] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.972695][T18070] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.983201][T18070] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.993972][T18070] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.044751][T18070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.058966][T18070] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.069218][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.076325][T10190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.095351][T18070] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.105837][T18070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.118982][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.126113][T10190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.191612][T18070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.283164][T18070] veth0_vlan: entered promiscuous mode [ 224.293578][T18070] veth1_vlan: entered promiscuous mode [ 224.313351][T18070] veth0_macvtap: entered promiscuous mode [ 224.323284][T18070] veth1_macvtap: entered promiscuous mode [ 224.336241][T18070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.350026][T18070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.362010][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.373237][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.404713][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.415661][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.574555][T18492] FAULT_INJECTION: forcing a failure. [ 224.574555][T18492] name failslab, interval 1, probability 0, space 0, times 0 [ 224.587297][T18492] CPU: 1 UID: 0 PID: 18492 Comm: syz.2.3087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 224.587374][T18492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.587390][T18492] Call Trace: [ 224.587397][T18492] [ 224.587406][T18492] __dump_stack+0x1d/0x30 [ 224.587431][T18492] dump_stack_lvl+0xe8/0x140 [ 224.587457][T18492] dump_stack+0x15/0x1b [ 224.587474][T18492] should_fail_ex+0x265/0x280 [ 224.587499][T18492] should_failslab+0x8c/0xb0 [ 224.587537][T18492] kmem_cache_alloc_noprof+0x50/0x310 [ 224.587593][T18492] ? getname_flags+0x80/0x3b0 [ 224.587627][T18492] getname_flags+0x80/0x3b0 [ 224.587705][T18492] do_sys_openat2+0x60/0x110 [ 224.587780][T18492] __x64_sys_openat+0xf2/0x120 [ 224.587836][T18492] x64_sys_call+0x2e9c/0x2ff0 [ 224.587863][T18492] do_syscall_64+0xd2/0x200 [ 224.587898][T18492] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 224.587968][T18492] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.588066][T18492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.588093][T18492] RIP: 0033:0x7f1259a7d510 [ 224.588111][T18492] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 224.588129][T18492] RSP: 002b:00007f12584def10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 224.588150][T18492] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f1259a7d510 [ 224.588190][T18492] RDX: 0000000000000002 RSI: 00007f12584defa0 RDI: 00000000ffffff9c [ 224.588202][T18492] RBP: 00007f12584defa0 R08: 0000000000000000 R09: 0000000000000000 [ 224.588214][T18492] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 224.588228][T18492] R13: 00007f1259cc6038 R14: 00007f1259cc5fa0 R15: 00007fffc9eaa5a8 [ 224.588253][T18492] [ 224.809996][T18498] usb usb1: usbfs: process 18498 (syz.1.3088) did not claim interface 0 before use [ 224.931740][T18513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3091'. [ 224.932874][T18520] loop2: detected capacity change from 0 to 2048 [ 224.949315][T18520] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 225.079422][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 225.079443][ T29] audit: type=1326 audit(1758266809.166:18894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.2.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1259a7eba9 code=0x7ffc0000 [ 225.109795][ T29] audit: type=1326 audit(1758266809.166:18895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.2.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1259a7eba9 code=0x7ffc0000 [ 225.133798][ T29] audit: type=1326 audit(1758266809.166:18896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.2.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f1259a7eba9 code=0x7ffc0000 [ 225.157440][ T29] audit: type=1326 audit(1758266809.166:18897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18636 comm="syz.2.3097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1259a7eba9 code=0x7ffc0000 [ 225.191377][T18493] chnl_net:caif_netlink_parms(): no params data found [ 225.203399][ T29] audit: type=1326 audit(1758266809.286:18898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.227395][ T29] audit: type=1326 audit(1758266809.286:18899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.242897][T18647] ieee802154 phy0 wpan0: encryption failed: -22 [ 225.251131][ T29] audit: type=1326 audit(1758266809.286:18900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.280895][ T29] audit: type=1326 audit(1758266809.286:18901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.304535][ T29] audit: type=1326 audit(1758266809.286:18902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.328142][ T29] audit: type=1326 audit(1758266809.286:18903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18639 comm="syz.1.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 225.386738][T18493] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.393880][T18493] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.401289][T18493] bridge_slave_0: entered allmulticast mode [ 225.407842][T18493] bridge_slave_0: entered promiscuous mode [ 225.414882][T18493] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.422114][T18493] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.429590][T18493] bridge_slave_1: entered allmulticast mode [ 225.436114][T18493] bridge_slave_1: entered promiscuous mode [ 225.458026][T18493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.468826][T18493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.496014][T18493] team0: Port device team_slave_0 added [ 225.503713][T18493] team0: Port device team_slave_1 added [ 225.529468][T18493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.536500][T18493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.562543][T18493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.574600][T18493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.581696][T18493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.607638][T18493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.653809][T18493] hsr_slave_0: entered promiscuous mode [ 225.660319][T18493] hsr_slave_1: entered promiscuous mode [ 225.666366][T18493] debugfs: 'hsr0' already exists in 'hsr' [ 225.672179][T18493] Cannot create hsr debugfs directory [ 225.943402][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3108'. [ 225.981736][T18493] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 226.002502][T18493] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 226.011598][T18493] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 226.030463][T18493] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 226.130683][T18493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.144707][T18493] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.157182][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.164344][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.199214][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.206315][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.339953][T18493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.529873][T18493] veth0_vlan: entered promiscuous mode [ 226.538321][T18493] veth1_vlan: entered promiscuous mode [ 226.555922][T18493] veth0_macvtap: entered promiscuous mode [ 226.564195][T18493] veth1_macvtap: entered promiscuous mode [ 226.576206][T18493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.587464][T18493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.610543][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.619480][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.642155][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.654870][T18945] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3115'. [ 226.666239][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.700190][T18961] netlink: 'syz.4.3085': attribute type 1 has an invalid length. [ 226.708889][T18961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3085'. [ 226.745665][T18963] loop4: detected capacity change from 0 to 2048 [ 226.818610][T18963] loop4: p1 p2 p3 [ 226.841768][T18963] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 226.850718][T18963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3116'. [ 226.875576][T18973] netlink: 'syz.5.3117': attribute type 1 has an invalid length. [ 226.896431][T18973] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.907039][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3117'. [ 226.920848][T18973] bond2 (unregistering): Released all slaves [ 227.104935][T19053] loop5: detected capacity change from 0 to 512 [ 227.117732][T19053] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 227.146430][T19053] EXT4-fs (loop5): 1 truncate cleaned up [ 227.156733][T19053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.172592][T19065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'. [ 227.181656][T19065] netlink: 'syz.0.3125': attribute type 5 has an invalid length. [ 227.189544][T19065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3125'. [ 227.201740][T19065] geneve2: entered promiscuous mode [ 227.204749][T19053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.206978][T19065] geneve2: entered allmulticast mode [ 227.223461][T10190] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 227.241717][T10190] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 227.257083][T10190] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 227.268104][T10190] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 227.351709][T19080] tipc: Enabling of bearer rejected, failed to enable media [ 227.656019][T19108] loop2: detected capacity change from 0 to 512 [ 227.694268][T19108] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 227.728557][T19108] EXT4-fs (loop2): 1 truncate cleaned up [ 227.734754][T19108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.769461][T19108] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.843896][T19141] FAULT_INJECTION: forcing a failure. [ 227.843896][T19141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.857321][T19141] CPU: 1 UID: 0 PID: 19141 Comm: syz.0.3142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 227.857387][T19141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.857403][T19141] Call Trace: [ 227.857411][T19141] [ 227.857421][T19141] __dump_stack+0x1d/0x30 [ 227.857446][T19141] dump_stack_lvl+0xe8/0x140 [ 227.857468][T19141] dump_stack+0x15/0x1b [ 227.857510][T19141] should_fail_ex+0x265/0x280 [ 227.857588][T19141] should_fail+0xb/0x20 [ 227.857610][T19141] should_fail_usercopy+0x1a/0x20 [ 227.857674][T19141] _copy_to_user+0x20/0xa0 [ 227.857785][T19141] simple_read_from_buffer+0xb5/0x130 [ 227.857812][T19141] proc_fail_nth_read+0x10e/0x150 [ 227.857898][T19141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 227.857933][T19141] vfs_read+0x1a5/0x770 [ 227.857959][T19141] ? __fput+0x555/0x650 [ 227.857992][T19141] ? __rcu_read_unlock+0x4f/0x70 [ 227.858013][T19141] ? __fget_files+0x184/0x1c0 [ 227.858080][T19141] ksys_read+0xda/0x1a0 [ 227.858106][T19141] __x64_sys_read+0x40/0x50 [ 227.858135][T19141] x64_sys_call+0x27bc/0x2ff0 [ 227.858172][T19141] do_syscall_64+0xd2/0x200 [ 227.858207][T19141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 227.858238][T19141] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 227.858279][T19141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.858300][T19141] RIP: 0033:0x7f0992a4d5bc [ 227.858316][T19141] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 227.858336][T19141] RSP: 002b:00007f09914af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 227.858359][T19141] RAX: ffffffffffffffda RBX: 00007f0992c95fa0 RCX: 00007f0992a4d5bc [ 227.858371][T19141] RDX: 000000000000000f RSI: 00007f09914af0a0 RDI: 0000000000000006 [ 227.858386][T19141] RBP: 00007f09914af090 R08: 0000000000000000 R09: 0000000000000000 [ 227.858426][T19141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.858493][T19141] R13: 00007f0992c96038 R14: 00007f0992c95fa0 R15: 00007ffcbe3dfcb8 [ 227.858512][T19141] [ 228.113864][T19144] tipc: Enabling of bearer rejected, failed to enable media [ 228.166571][T19148] loop2: detected capacity change from 0 to 512 [ 228.181890][T19148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.232651][T19148] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.341926][T18070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.501089][T19176] netlink: 'syz.2.3155': attribute type 1 has an invalid length. [ 228.510075][T19176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 228.538334][T19178] tipc: Enabling of bearer rejected, failed to enable media [ 228.672741][T19182] loop2: detected capacity change from 0 to 512 [ 228.700134][T19182] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 228.719011][T19182] EXT4-fs (loop2): 1 truncate cleaned up [ 228.731836][T19182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.778513][T19182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.852437][T19200] loop4: detected capacity change from 0 to 512 [ 228.880666][T19200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.906830][T19208] netlink: 'syz.2.3164': attribute type 10 has an invalid length. [ 228.915480][T19208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3164'. [ 228.939931][T19200] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.983376][T19209] loop2: detected capacity change from 0 to 512 [ 228.984252][T19208] dummy0: entered promiscuous mode [ 229.024249][T19208] bridge0: port 3(dummy0) entered blocking state [ 229.024615][T19208] bridge0: port 3(dummy0) entered disabled state [ 229.026022][T19208] dummy0: entered allmulticast mode [ 229.054099][T19208] bridge0: port 3(dummy0) entered blocking state [ 229.054756][T19208] bridge0: port 3(dummy0) entered forwarding state [ 229.092667][T19209] EXT4-fs (loop2): too many log groups per flexible block group [ 229.092732][T19209] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 229.092791][T19209] EXT4-fs (loop2): mount failed [ 229.226051][T18493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.302667][T19236] netlink: 'syz.4.3173': attribute type 1 has an invalid length. [ 229.311350][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3173'. [ 229.350704][T19238] vhci_hcd: invalid port number 23 [ 229.351160][T19236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.377923][T19236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.388803][T19236] bond0 (unregistering): Released all slaves [ 229.692664][T19318] tipc: Enabling of bearer rejected, failed to enable media [ 229.944268][T19338] FAULT_INJECTION: forcing a failure. [ 229.944268][T19338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.957874][T19338] CPU: 0 UID: 0 PID: 19338 Comm: syz.0.3189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 229.957933][T19338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 229.957950][T19338] Call Trace: [ 229.957959][T19338] [ 229.957967][T19338] __dump_stack+0x1d/0x30 [ 229.957991][T19338] dump_stack_lvl+0xe8/0x140 [ 229.958008][T19338] dump_stack+0x15/0x1b [ 229.958022][T19338] should_fail_ex+0x265/0x280 [ 229.958044][T19338] should_fail+0xb/0x20 [ 229.958129][T19338] should_fail_usercopy+0x1a/0x20 [ 229.958151][T19338] _copy_from_iter+0xd2/0xe80 [ 229.958283][T19338] ? resilient_queued_spin_lock_slowpath+0x490/0xb03 [ 229.958314][T19338] tun_get_user+0x14d/0x2680 [ 229.958400][T19338] ? _parse_integer_limit+0x170/0x190 [ 229.958425][T19338] ? ref_tracker_alloc+0x1f2/0x2f0 [ 229.958449][T19338] ? selinux_file_permission+0x1e4/0x320 [ 229.958469][T19338] tun_chr_write_iter+0x15e/0x210 [ 229.958567][T19338] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.958582][T19338] vfs_write+0x527/0x960 [ 229.958608][T19338] ksys_write+0xda/0x1a0 [ 229.958635][T19338] __x64_sys_write+0x40/0x50 [ 229.958670][T19338] x64_sys_call+0x27fe/0x2ff0 [ 229.958698][T19338] do_syscall_64+0xd2/0x200 [ 229.958764][T19338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 229.958786][T19338] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 229.958823][T19338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.958915][T19338] RIP: 0033:0x7f0992a4eba9 [ 229.958928][T19338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.958982][T19338] RSP: 002b:00007f09914af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 229.958999][T19338] RAX: ffffffffffffffda RBX: 00007f0992c95fa0 RCX: 00007f0992a4eba9 [ 229.959015][T19338] RDX: 000000000000002a RSI: 0000200000000080 RDI: 0000000000000003 [ 229.959031][T19338] RBP: 00007f09914af090 R08: 0000000000000000 R09: 0000000000000000 [ 229.959047][T19338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.959062][T19338] R13: 00007f0992c96038 R14: 00007f0992c95fa0 R15: 00007ffcbe3dfcb8 [ 229.959080][T19338] [ 230.232175][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 230.232190][ T29] audit: type=1326 audit(1758266814.316:18980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.266071][ T29] audit: type=1326 audit(1758266814.346:18981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.289907][ T29] audit: type=1326 audit(1758266814.346:18982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.313662][ T29] audit: type=1326 audit(1758266814.346:18983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.337660][ T29] audit: type=1326 audit(1758266814.346:18984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.361364][ T29] audit: type=1326 audit(1758266814.346:18985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.361395][ T29] audit: type=1326 audit(1758266814.346:18986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.408659][ T29] audit: type=1326 audit(1758266814.346:18987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.432418][ T29] audit: type=1326 audit(1758266814.346:18988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.456032][ T29] audit: type=1326 audit(1758266814.346:18989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19358 comm="syz.1.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 230.558727][T19376] tipc: Enabling of bearer rejected, failed to enable media [ 230.614988][T19385] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.669996][T19398] loop5: detected capacity change from 0 to 512 [ 230.689512][T19398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.702147][T19398] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.764332][T12587] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.891589][T19418] loop5: detected capacity change from 0 to 512 [ 231.018840][T19418] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 231.037477][T19418] EXT4-fs (loop5): mount failed [ 231.305782][T19434] tipc: Enabling of bearer rejected, failed to enable media [ 231.356045][T19438] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.442851][T19451] loop2: detected capacity change from 0 to 512 [ 231.463782][T19451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.487576][T19451] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.489495][T19453] loop4: detected capacity change from 0 to 512 [ 231.538483][T19453] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 231.561781][T18070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.572453][T19453] EXT4-fs (loop4): 1 truncate cleaned up [ 231.586819][T19453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.663952][T19453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.693111][T19492] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 231.693111][T19492] program syz.1.3227 not setting count and/or reply_len properly [ 231.737379][T19494] FAULT_INJECTION: forcing a failure. [ 231.737379][T19494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.750632][T19494] CPU: 0 UID: 0 PID: 19494 Comm: syz.0.3226 Not tainted syzkaller #0 PREEMPT(voluntary) [ 231.750700][T19494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 231.750717][T19494] Call Trace: [ 231.750725][T19494] [ 231.750735][T19494] __dump_stack+0x1d/0x30 [ 231.750761][T19494] dump_stack_lvl+0xe8/0x140 [ 231.750786][T19494] dump_stack+0x15/0x1b [ 231.750806][T19494] should_fail_ex+0x265/0x280 [ 231.750899][T19494] should_fail+0xb/0x20 [ 231.750919][T19494] should_fail_usercopy+0x1a/0x20 [ 231.750994][T19494] _copy_from_user+0x1c/0xb0 [ 231.751034][T19494] kstrtouint_from_user+0x69/0xf0 [ 231.751061][T19494] ? 0xffffffff81000000 [ 231.751078][T19494] ? selinux_file_permission+0x1e4/0x320 [ 231.751164][T19494] proc_fail_nth_write+0x50/0x160 [ 231.751195][T19494] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.751226][T19494] vfs_write+0x266/0x960 [ 231.751247][T19494] ? vfs_read+0x4e6/0x770 [ 231.751310][T19494] ? __rcu_read_unlock+0x4f/0x70 [ 231.751338][T19494] ? __fget_files+0x184/0x1c0 [ 231.751374][T19494] ksys_write+0xda/0x1a0 [ 231.751455][T19494] __x64_sys_write+0x40/0x50 [ 231.751485][T19494] x64_sys_call+0x27fe/0x2ff0 [ 231.751565][T19494] do_syscall_64+0xd2/0x200 [ 231.751665][T19494] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.751692][T19494] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.751727][T19494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.751787][T19494] RIP: 0033:0x7f0992a4d65f [ 231.751806][T19494] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 231.751828][T19494] RSP: 002b:00007f09914af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 231.751847][T19494] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0992a4d65f [ 231.751859][T19494] RDX: 0000000000000001 RSI: 00007f09914af0a0 RDI: 0000000000000006 [ 231.751873][T19494] RBP: 00007f09914af090 R08: 0000000000000000 R09: 0000000000000000 [ 231.751888][T19494] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 231.751934][T19494] R13: 00007f0992c96038 R14: 00007f0992c95fa0 R15: 00007ffcbe3dfcb8 [ 231.751960][T19494] [ 232.001389][T19499] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.147038][T19529] program syz.0.3229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.184144][T19529] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 232.374140][T19547] loop5: detected capacity change from 0 to 512 [ 232.388464][T19542] __nla_validate_parse: 4 callbacks suppressed [ 232.388484][T19542] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 232.406344][T19547] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.440476][T19558] Process accounting resumed [ 232.456644][T19547] EXT4-fs (loop5): 1 truncate cleaned up [ 232.465435][T19547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.466521][T19562] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3241'. [ 232.495111][T19547] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.530700][T19572] ieee802154 phy0 wpan0: encryption failed: -22 [ 232.548048][T19566] tipc: Enabling of bearer rejected, failed to enable media [ 232.718030][T19601] FAULT_INJECTION: forcing a failure. [ 232.718030][T19601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.731228][T19601] CPU: 0 UID: 0 PID: 19601 Comm: syz.5.3253 Not tainted syzkaller #0 PREEMPT(voluntary) [ 232.731259][T19601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.731276][T19601] Call Trace: [ 232.731291][T19601] [ 232.731301][T19601] __dump_stack+0x1d/0x30 [ 232.731328][T19601] dump_stack_lvl+0xe8/0x140 [ 232.731353][T19601] dump_stack+0x15/0x1b [ 232.731450][T19601] should_fail_ex+0x265/0x280 [ 232.731482][T19601] should_fail+0xb/0x20 [ 232.731510][T19601] should_fail_usercopy+0x1a/0x20 [ 232.731591][T19601] _copy_to_user+0x20/0xa0 [ 232.731636][T19601] simple_read_from_buffer+0xb5/0x130 [ 232.731667][T19601] proc_fail_nth_read+0x10e/0x150 [ 232.731718][T19601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 232.731753][T19601] vfs_read+0x1a5/0x770 [ 232.731847][T19601] ? __rcu_read_unlock+0x4f/0x70 [ 232.731916][T19601] ? __fget_files+0x184/0x1c0 [ 232.731951][T19601] ksys_read+0xda/0x1a0 [ 232.731996][T19601] __x64_sys_read+0x40/0x50 [ 232.732035][T19601] x64_sys_call+0x27bc/0x2ff0 [ 232.732059][T19601] do_syscall_64+0xd2/0x200 [ 232.732097][T19601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.732123][T19601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.732161][T19601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.732187][T19601] RIP: 0033:0x7f13bf31d5bc [ 232.732206][T19601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 232.732229][T19601] RSP: 002b:00007f13bdd7f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 232.732302][T19601] RAX: ffffffffffffffda RBX: 00007f13bf565fa0 RCX: 00007f13bf31d5bc [ 232.732317][T19601] RDX: 000000000000000f RSI: 00007f13bdd7f0a0 RDI: 0000000000000008 [ 232.732332][T19601] RBP: 00007f13bdd7f090 R08: 0000000000000000 R09: 0000000000000000 [ 232.732348][T19601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.732364][T19601] R13: 00007f13bf566038 R14: 00007f13bf565fa0 R15: 00007ffc3e29dc18 [ 232.732390][T19601] [ 233.072245][T19636] loop4: detected capacity change from 0 to 2048 [ 233.111489][T19636] loop4: p1 p2 p3 [ 233.125532][T19636] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 233.133679][T19645] tipc: Enabling of bearer rejected, failed to enable media [ 233.176532][T19636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3258'. [ 233.211839][T19657] FAULT_INJECTION: forcing a failure. [ 233.211839][T19657] name failslab, interval 1, probability 0, space 0, times 0 [ 233.224555][T19657] CPU: 1 UID: 0 PID: 19657 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.224584][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.224678][T19657] Call Trace: [ 233.224685][T19657] [ 233.224692][T19657] __dump_stack+0x1d/0x30 [ 233.224714][T19657] dump_stack_lvl+0xe8/0x140 [ 233.224734][T19657] dump_stack+0x15/0x1b [ 233.224751][T19657] should_fail_ex+0x265/0x280 [ 233.224807][T19657] should_failslab+0x8c/0xb0 [ 233.224834][T19657] kmem_cache_alloc_noprof+0x50/0x310 [ 233.224863][T19657] ? skb_clone+0x151/0x1f0 [ 233.224921][T19657] skb_clone+0x151/0x1f0 [ 233.224966][T19657] __netlink_deliver_tap+0x2c9/0x500 [ 233.225049][T19657] ? netlink_attachskb+0x2d0/0x610 [ 233.225073][T19657] netlink_sendskb+0x126/0x150 [ 233.225096][T19657] netlink_unicast+0x2a2/0x690 [ 233.225141][T19657] netlink_ack+0x4c8/0x500 [ 233.225168][T19657] netlink_rcv_skb+0x192/0x220 [ 233.225258][T19657] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 233.225349][T19657] rtnetlink_rcv+0x1c/0x30 [ 233.225380][T19657] netlink_unicast+0x5bd/0x690 [ 233.225404][T19657] netlink_sendmsg+0x58b/0x6b0 [ 233.225440][T19657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 233.225468][T19657] __sock_sendmsg+0x145/0x180 [ 233.225562][T19657] ____sys_sendmsg+0x31e/0x4e0 [ 233.225667][T19657] ___sys_sendmsg+0x17b/0x1d0 [ 233.225749][T19657] __x64_sys_sendmsg+0xd4/0x160 [ 233.225819][T19657] x64_sys_call+0x191e/0x2ff0 [ 233.225841][T19657] do_syscall_64+0xd2/0x200 [ 233.225943][T19657] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.225969][T19657] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.226000][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.226025][T19657] RIP: 0033:0x7f13bf31eba9 [ 233.226040][T19657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.226092][T19657] RSP: 002b:00007f13bdd7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.226113][T19657] RAX: ffffffffffffffda RBX: 00007f13bf565fa0 RCX: 00007f13bf31eba9 [ 233.226126][T19657] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 233.226138][T19657] RBP: 00007f13bdd7f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.226151][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 233.226163][T19657] R13: 00007f13bf566038 R14: 00007f13bf565fa0 R15: 00007ffc3e29dc18 [ 233.226229][T19657] [ 233.504731][T19669] FAULT_INJECTION: forcing a failure. [ 233.504731][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 233.517515][T19669] CPU: 0 UID: 0 PID: 19669 Comm: syz.1.3266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.517548][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.517564][T19669] Call Trace: [ 233.517573][T19669] [ 233.517582][T19669] __dump_stack+0x1d/0x30 [ 233.517684][T19669] dump_stack_lvl+0xe8/0x140 [ 233.517709][T19669] dump_stack+0x15/0x1b [ 233.517729][T19669] should_fail_ex+0x265/0x280 [ 233.517758][T19669] should_failslab+0x8c/0xb0 [ 233.517790][T19669] kmem_cache_alloc_noprof+0x50/0x310 [ 233.517851][T19669] ? prepare_creds+0x37/0x4c0 [ 233.517920][T19669] prepare_creds+0x37/0x4c0 [ 233.517949][T19669] copy_creds+0x8f/0x3f0 [ 233.517972][T19669] copy_process+0x658/0x2000 [ 233.518043][T19669] ? copy_clone_args_from_user+0x3ce/0x490 [ 233.518086][T19669] kernel_clone+0x16c/0x5c0 [ 233.518121][T19669] __se_sys_clone3+0x1c2/0x200 [ 233.518235][T19669] __x64_sys_clone3+0x31/0x40 [ 233.518272][T19669] x64_sys_call+0x1fc9/0x2ff0 [ 233.518321][T19669] do_syscall_64+0xd2/0x200 [ 233.518358][T19669] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.518382][T19669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.518451][T19669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.518479][T19669] RIP: 0033:0x7f07c611eba9 [ 233.518527][T19669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.518548][T19669] RSP: 002b:00007f07c4b86f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 233.518572][T19669] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f07c611eba9 [ 233.518587][T19669] RDX: 00007f07c4b86f20 RSI: 0000000000000058 RDI: 00007f07c4b86f20 [ 233.518599][T19669] RBP: 00007f07c4b87090 R08: 0000000000000000 R09: 0000000000000058 [ 233.518611][T19669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.518623][T19669] R13: 00007f07c6366038 R14: 00007f07c6365fa0 R15: 00007ffdcf676858 [ 233.518707][T19669] [ 233.938327][T19691] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.947858][T19698] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.032544][T19717] tipc: Enabling of bearer rejected, failed to enable media [ 234.097789][T19724] loop2: detected capacity change from 0 to 512 [ 234.119438][T19722] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 234.151236][T19724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.156330][T19722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3276'. [ 234.164282][T19724] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.181837][T19735] loop5: detected capacity change from 0 to 128 [ 234.333652][T18070] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.388717][T19750] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.507458][T19763] FAULT_INJECTION: forcing a failure. [ 234.507458][T19763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.520620][T19763] CPU: 0 UID: 0 PID: 19763 Comm: syz.0.3287 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.520705][T19763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 234.520718][T19763] Call Trace: [ 234.520724][T19763] [ 234.520732][T19763] __dump_stack+0x1d/0x30 [ 234.520754][T19763] dump_stack_lvl+0xe8/0x140 [ 234.520779][T19763] dump_stack+0x15/0x1b [ 234.520800][T19763] should_fail_ex+0x265/0x280 [ 234.520955][T19763] should_fail+0xb/0x20 [ 234.520982][T19763] should_fail_usercopy+0x1a/0x20 [ 234.521015][T19763] _copy_to_user+0x20/0xa0 [ 234.521054][T19763] simple_read_from_buffer+0xb5/0x130 [ 234.521142][T19763] proc_fail_nth_read+0x10e/0x150 [ 234.521184][T19763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 234.521258][T19763] vfs_read+0x1a5/0x770 [ 234.521285][T19763] ? __fput+0x555/0x650 [ 234.521376][T19763] ? __rcu_read_unlock+0x4f/0x70 [ 234.521405][T19763] ? __fget_files+0x184/0x1c0 [ 234.521441][T19763] ksys_read+0xda/0x1a0 [ 234.521540][T19763] __x64_sys_read+0x40/0x50 [ 234.521566][T19763] x64_sys_call+0x27bc/0x2ff0 [ 234.521587][T19763] do_syscall_64+0xd2/0x200 [ 234.521628][T19763] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.521723][T19763] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.521762][T19763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.521789][T19763] RIP: 0033:0x7f0992a4d5bc [ 234.521809][T19763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 234.521876][T19763] RSP: 002b:00007f09914af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.521896][T19763] RAX: ffffffffffffffda RBX: 00007f0992c95fa0 RCX: 00007f0992a4d5bc [ 234.521939][T19763] RDX: 000000000000000f RSI: 00007f09914af0a0 RDI: 0000000000000006 [ 234.521956][T19763] RBP: 00007f09914af090 R08: 0000000000000000 R09: 0000000000000000 [ 234.521972][T19763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.522101][T19763] R13: 00007f0992c96038 R14: 00007f0992c95fa0 R15: 00007ffcbe3dfcb8 [ 234.522121][T19763] [ 234.742208][T19766] vhci_hcd: invalid port number 23 [ 234.761077][T19767] tipc: Enabling of bearer rejected, failed to enable media [ 234.924499][T19790] vhci_hcd: invalid port number 23 [ 235.085324][T19808] program syz.1.3306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 235.246785][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 235.246844][ T29] audit: type=1326 audit(1758266819.326:19394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.308905][ T29] audit: type=1326 audit(1758266819.336:19395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.332649][ T29] audit: type=1326 audit(1758266819.366:19396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.356543][ T29] audit: type=1326 audit(1758266819.366:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.380351][ T29] audit: type=1326 audit(1758266819.366:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.404053][ T29] audit: type=1326 audit(1758266819.366:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.427712][ T29] audit: type=1326 audit(1758266819.376:19400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.451306][ T29] audit: type=1326 audit(1758266819.376:19401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.457954][T19818] loop5: detected capacity change from 0 to 512 [ 235.474995][ T29] audit: type=1326 audit(1758266819.376:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.483643][T19818] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 235.504847][ T29] audit: type=1326 audit(1758266819.386:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19807 comm="syz.1.3306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 235.539841][T19818] EXT4-fs (loop5): 1 truncate cleaned up [ 235.546061][T19818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.558923][T19818] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.605115][T19826] netlink: 'syz.5.3310': attribute type 1 has an invalid length. [ 235.623950][T19826] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.633567][T19826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3310'. [ 235.645078][T19826] bond2 (unregistering): Released all slaves [ 235.940063][T19919] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3319'. [ 236.021436][T19926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3321'. [ 236.050272][T19950] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 236.092819][T19952] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.101909][T19954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3322'. [ 236.160858][T19950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 236.211268][T19954] bond1 (unregistering): Released all slaves [ 236.289045][T20030] vhci_hcd: invalid port number 23 [ 236.422965][T20064] vhci_hcd: invalid port number 23 [ 236.460232][T20069] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3333'. [ 236.481077][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 236.523857][T20077] vhci_hcd: invalid port number 23 [ 236.550526][T20080] FAULT_INJECTION: forcing a failure. [ 236.550526][T20080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.563701][T20080] CPU: 1 UID: 0 PID: 20080 Comm: syz.4.3338 Not tainted syzkaller #0 PREEMPT(voluntary) [ 236.563737][T20080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 236.563754][T20080] Call Trace: [ 236.563762][T20080] [ 236.563771][T20080] __dump_stack+0x1d/0x30 [ 236.563798][T20080] dump_stack_lvl+0xe8/0x140 [ 236.563977][T20080] dump_stack+0x15/0x1b [ 236.563998][T20080] should_fail_ex+0x265/0x280 [ 236.564037][T20080] should_fail+0xb/0x20 [ 236.564063][T20080] should_fail_usercopy+0x1a/0x20 [ 236.564095][T20080] _copy_from_user+0x1c/0xb0 [ 236.564144][T20080] udp_lib_setsockopt+0x168/0x640 [ 236.564257][T20080] udpv6_setsockopt+0x77/0xb0 [ 236.564277][T20080] ? __pfx_udp_v6_push_pending_frames+0x10/0x10 [ 236.564305][T20080] sock_common_setsockopt+0x66/0x80 [ 236.564348][T20080] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 236.564410][T20080] __sys_setsockopt+0x184/0x200 [ 236.564443][T20080] __x64_sys_setsockopt+0x64/0x80 [ 236.564468][T20080] x64_sys_call+0x20ec/0x2ff0 [ 236.564495][T20080] do_syscall_64+0xd2/0x200 [ 236.564617][T20080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 236.564647][T20080] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 236.564744][T20080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.564784][T20080] RIP: 0033:0x7fb34f12eba9 [ 236.564803][T20080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.564832][T20080] RSP: 002b:00007fb34db8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 236.564897][T20080] RAX: ffffffffffffffda RBX: 00007fb34f375fa0 RCX: 00007fb34f12eba9 [ 236.564913][T20080] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003 [ 236.564928][T20080] RBP: 00007fb34db8f090 R08: 0000000000000004 R09: 0000000000000000 [ 236.564942][T20080] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 236.564957][T20080] R13: 00007fb34f376038 R14: 00007fb34f375fa0 R15: 00007ffd38391ac8 [ 236.564981][T20080] [ 236.851587][T20092] vhci_hcd: invalid port number 23 [ 236.928388][T20103] vhci_hcd: invalid port number 23 [ 236.970558][T20105] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.244348][T20165] vhci_hcd: invalid port number 23 [ 237.426555][T20175] ieee802154 phy0 wpan0: encryption failed: -22 [ 237.855568][T20187] loop2: detected capacity change from 0 to 512 [ 237.879525][T20194] __nla_validate_parse: 3 callbacks suppressed [ 237.879546][T20194] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3370'. [ 237.910761][T20187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 237.929279][T20187] EXT4-fs (loop2): 1 truncate cleaned up [ 237.932600][T20192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3369'. [ 237.935620][T20187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.961309][T20187] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.979353][T20199] FAULT_INJECTION: forcing a failure. [ 237.979353][T20199] name failslab, interval 1, probability 0, space 0, times 0 [ 237.992055][T20199] CPU: 0 UID: 0 PID: 20199 Comm: syz.5.3371 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.992087][T20199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.992120][T20199] Call Trace: [ 237.992126][T20199] [ 237.992134][T20199] __dump_stack+0x1d/0x30 [ 237.992155][T20199] dump_stack_lvl+0xe8/0x140 [ 237.992239][T20199] dump_stack+0x15/0x1b [ 237.992260][T20199] should_fail_ex+0x265/0x280 [ 237.992288][T20199] should_failslab+0x8c/0xb0 [ 237.992345][T20199] __kmalloc_noprof+0xa5/0x3e0 [ 237.992381][T20199] ? copy_splice_read+0xc2/0x660 [ 237.992407][T20199] copy_splice_read+0xc2/0x660 [ 237.992515][T20199] ? __pfx_copy_splice_read+0x10/0x10 [ 237.992567][T20199] splice_direct_to_actor+0x26c/0x680 [ 237.992596][T20199] ? __pfx_direct_splice_actor+0x10/0x10 [ 237.992625][T20199] do_splice_direct+0xda/0x150 [ 237.992707][T20199] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 237.992738][T20199] do_sendfile+0x380/0x650 [ 237.992844][T20199] __x64_sys_sendfile64+0x105/0x150 [ 237.992883][T20199] x64_sys_call+0x2bb0/0x2ff0 [ 237.992908][T20199] do_syscall_64+0xd2/0x200 [ 237.992940][T20199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.992969][T20199] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.993009][T20199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.993037][T20199] RIP: 0033:0x7f13bf31eba9 [ 237.993053][T20199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.993075][T20199] RSP: 002b:00007f13bdd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.993164][T20199] RAX: ffffffffffffffda RBX: 00007f13bf565fa0 RCX: 00007f13bf31eba9 [ 237.993177][T20199] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 237.993189][T20199] RBP: 00007f13bdd7f090 R08: 0000000000000000 R09: 0000000000000000 [ 237.993201][T20199] R10: 000000000000207b R11: 0000000000000246 R12: 0000000000000001 [ 237.993213][T20199] R13: 00007f13bf566038 R14: 00007f13bf565fa0 R15: 00007ffc3e29dc18 [ 237.993236][T20199] [ 238.291352][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 238.297335][T20239] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 238.321007][T20239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 238.332585][T20239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3375'. [ 238.353607][T20239] bond1 (unregistering): Released all slaves [ 238.424595][T20322] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3381'. [ 238.568157][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3388'. [ 238.657158][T20362] FAULT_INJECTION: forcing a failure. [ 238.657158][T20362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.670381][T20362] CPU: 0 UID: 0 PID: 20362 Comm: syz.2.3391 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.670411][T20362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.670424][T20362] Call Trace: [ 238.670456][T20362] [ 238.670463][T20362] __dump_stack+0x1d/0x30 [ 238.670489][T20362] dump_stack_lvl+0xe8/0x140 [ 238.670514][T20362] dump_stack+0x15/0x1b [ 238.670589][T20362] should_fail_ex+0x265/0x280 [ 238.670617][T20362] should_fail+0xb/0x20 [ 238.670708][T20362] should_fail_usercopy+0x1a/0x20 [ 238.670735][T20362] _copy_to_user+0x20/0xa0 [ 238.670776][T20362] simple_read_from_buffer+0xb5/0x130 [ 238.670872][T20362] proc_fail_nth_read+0x10e/0x150 [ 238.670905][T20362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.670931][T20362] vfs_read+0x1a5/0x770 [ 238.670958][T20362] ? __rcu_read_unlock+0x4f/0x70 [ 238.670986][T20362] ? __fget_files+0x184/0x1c0 [ 238.671064][T20362] ? __sys_setsockopt+0x18e/0x200 [ 238.671143][T20362] ksys_read+0xda/0x1a0 [ 238.671167][T20362] __x64_sys_read+0x40/0x50 [ 238.671192][T20362] x64_sys_call+0x27bc/0x2ff0 [ 238.671279][T20362] do_syscall_64+0xd2/0x200 [ 238.671385][T20362] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.671504][T20362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.671607][T20362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.671634][T20362] RIP: 0033:0x7f1259a7d5bc [ 238.671649][T20362] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.671667][T20362] RSP: 002b:00007f12584df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.671756][T20362] RAX: ffffffffffffffda RBX: 00007f1259cc5fa0 RCX: 00007f1259a7d5bc [ 238.671772][T20362] RDX: 000000000000000f RSI: 00007f12584df0a0 RDI: 0000000000000008 [ 238.671785][T20362] RBP: 00007f12584df090 R08: 0000000000000000 R09: 0000000000000000 [ 238.671797][T20362] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 238.671809][T20362] R13: 00007f1259cc6038 R14: 00007f1259cc5fa0 R15: 00007fffc9eaa5a8 [ 238.671878][T20362] [ 238.908745][T20367] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3394'. [ 239.065657][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3402'. [ 239.075914][T20395] vhci_hcd: invalid port number 23 [ 239.101481][T20403] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3407'. [ 239.138839][T20407] FAULT_INJECTION: forcing a failure. [ 239.138839][T20407] name failslab, interval 1, probability 0, space 0, times 0 [ 239.151813][T20407] CPU: 0 UID: 0 PID: 20407 Comm: syz.1.3409 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.151910][T20407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.151927][T20407] Call Trace: [ 239.151935][T20407] [ 239.151943][T20407] __dump_stack+0x1d/0x30 [ 239.151970][T20407] dump_stack_lvl+0xe8/0x140 [ 239.151996][T20407] dump_stack+0x15/0x1b [ 239.152052][T20407] should_fail_ex+0x265/0x280 [ 239.152082][T20407] ? do_kimage_alloc_init+0x2f/0x170 [ 239.152123][T20407] should_failslab+0x8c/0xb0 [ 239.152211][T20407] __kmalloc_cache_noprof+0x4c/0x320 [ 239.152260][T20407] do_kimage_alloc_init+0x2f/0x170 [ 239.152300][T20407] do_kexec_load+0x8b/0x500 [ 239.152321][T20407] __se_sys_kexec_load+0x134/0x160 [ 239.152412][T20407] __x64_sys_kexec_load+0x55/0x70 [ 239.152433][T20407] x64_sys_call+0x2898/0x2ff0 [ 239.152455][T20407] do_syscall_64+0xd2/0x200 [ 239.152565][T20407] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.152591][T20407] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.152668][T20407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.152690][T20407] RIP: 0033:0x7f07c611eba9 [ 239.152726][T20407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.152745][T20407] RSP: 002b:00007f07c4b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 239.152764][T20407] RAX: ffffffffffffffda RBX: 00007f07c6365fa0 RCX: 00007f07c611eba9 [ 239.152802][T20407] RDX: 0000200000000140 RSI: 0000000000000001 RDI: 0000000000000000 [ 239.152815][T20407] RBP: 00007f07c4b87090 R08: 0000000000000000 R09: 0000000000000000 [ 239.152828][T20407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.152903][T20407] R13: 00007f07c6366038 R14: 00007f07c6365fa0 R15: 00007ffdcf676858 [ 239.152923][T20407] [ 239.347810][T20412] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in; [ 239.347810][T20412] program syz.2.3408 not setting count and/or reply_len properly [ 239.464357][T20424] loop4: detected capacity change from 0 to 512 [ 239.484422][T20424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 239.496611][T20427] FAULT_INJECTION: forcing a failure. [ 239.496611][T20427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.497997][T20424] EXT4-fs (loop4): 1 truncate cleaned up [ 239.509829][T20427] CPU: 1 UID: 0 PID: 20427 Comm: syz.1.3415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.509943][T20427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.509962][T20427] Call Trace: [ 239.509973][T20427] [ 239.509983][T20427] __dump_stack+0x1d/0x30 [ 239.510012][T20427] dump_stack_lvl+0xe8/0x140 [ 239.510040][T20427] dump_stack+0x15/0x1b [ 239.510064][T20427] should_fail_ex+0x265/0x280 [ 239.510153][T20427] should_fail+0xb/0x20 [ 239.510256][T20427] should_fail_usercopy+0x1a/0x20 [ 239.510348][T20427] _copy_to_user+0x20/0xa0 [ 239.510391][T20427] simple_read_from_buffer+0xb5/0x130 [ 239.510423][T20427] proc_fail_nth_read+0x10e/0x150 [ 239.510465][T20427] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.510572][T20427] vfs_read+0x1a5/0x770 [ 239.510601][T20427] ? __rcu_read_unlock+0x4f/0x70 [ 239.510631][T20427] ? __fget_files+0x184/0x1c0 [ 239.510679][T20427] ksys_read+0xda/0x1a0 [ 239.510713][T20427] __x64_sys_read+0x40/0x50 [ 239.510745][T20427] x64_sys_call+0x27bc/0x2ff0 [ 239.510775][T20427] do_syscall_64+0xd2/0x200 [ 239.510823][T20427] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.510873][T20427] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.510916][T20427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.510946][T20427] RIP: 0033:0x7f07c611d5bc [ 239.510968][T20427] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.511055][T20427] RSP: 002b:00007f07c4b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.511082][T20427] RAX: ffffffffffffffda RBX: 00007f07c6365fa0 RCX: 00007f07c611d5bc [ 239.511101][T20427] RDX: 000000000000000f RSI: 00007f07c4b870a0 RDI: 0000000000000008 [ 239.511118][T20427] RBP: 00007f07c4b87090 R08: 0000000000000000 R09: 0000000000000000 [ 239.511136][T20427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.511154][T20427] R13: 00007f07c6366038 R14: 00007f07c6365fa0 R15: 00007ffdcf676858 [ 239.511181][T20427] [ 239.715587][T20424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.729205][T20424] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.814746][T20465] FAULT_INJECTION: forcing a failure. [ 239.814746][T20465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.819142][T20464] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3419'. [ 239.828868][T20465] CPU: 0 UID: 0 PID: 20465 Comm: syz.1.3420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 239.828899][T20465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 239.828916][T20465] Call Trace: [ 239.828994][T20465] [ 239.829003][T20465] __dump_stack+0x1d/0x30 [ 239.829029][T20465] dump_stack_lvl+0xe8/0x140 [ 239.829053][T20465] dump_stack+0x15/0x1b [ 239.829074][T20465] should_fail_ex+0x265/0x280 [ 239.829131][T20465] should_fail+0xb/0x20 [ 239.829173][T20465] should_fail_usercopy+0x1a/0x20 [ 239.829280][T20465] _copy_from_iter+0xd2/0xe80 [ 239.829322][T20465] ? __build_skb_around+0x1a0/0x200 [ 239.829357][T20465] ? __alloc_skb+0x223/0x320 [ 239.829453][T20465] netlink_sendmsg+0x471/0x6b0 [ 239.829495][T20465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.829532][T20465] __sock_sendmsg+0x145/0x180 [ 239.829579][T20465] ____sys_sendmsg+0x31e/0x4e0 [ 239.829686][T20465] ___sys_sendmsg+0x17b/0x1d0 [ 239.829744][T20465] __x64_sys_sendmsg+0xd4/0x160 [ 239.829789][T20465] x64_sys_call+0x191e/0x2ff0 [ 239.829821][T20465] do_syscall_64+0xd2/0x200 [ 239.829947][T20465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 239.829982][T20465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 239.830073][T20465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.830104][T20465] RIP: 0033:0x7f07c611eba9 [ 239.830126][T20465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.830158][T20465] RSP: 002b:00007f07c4b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.830184][T20465] RAX: ffffffffffffffda RBX: 00007f07c6365fa0 RCX: 00007f07c611eba9 [ 239.830202][T20465] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 239.830219][T20465] RBP: 00007f07c4b87090 R08: 0000000000000000 R09: 0000000000000000 [ 239.830237][T20465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.830254][T20465] R13: 00007f07c6366038 R14: 00007f07c6365fa0 R15: 00007ffdcf676858 [ 239.830297][T20465] [ 240.193312][T20487] loop5: detected capacity change from 0 to 512 [ 240.210821][T20487] EXT4-fs (loop5): orphan cleanup on readonly fs [ 240.211114][T20487] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3428: bad orphan inode 13 [ 240.241973][T20487] ext4_test_bit(bit=12, block=18) = 1 [ 240.241997][T20487] is_bad_inode(inode)=0 [ 240.242007][T20487] NEXT_ORPHAN(inode)=2130706432 [ 240.242018][T20487] max_ino=32 [ 240.242026][T20487] i_nlink=1 [ 240.242447][T20487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 240.314336][T12587] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 240.360125][T20506] vlan2: entered allmulticast mode [ 240.369338][T12587] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 12 [ 240.419979][T20498] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.474548][T20535] vhci_hcd: invalid port number 23 [ 240.486724][ T293] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.551892][ T293] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.593649][T20555] tipc: Enabling of bearer rejected, failed to enable media [ 240.616453][ T293] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.636465][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 240.636479][ T29] audit: type=1326 audit(1758266824.716:19733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.637013][ T29] audit: type=1326 audit(1758266824.716:19734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.637134][ T29] audit: type=1326 audit(1758266824.716:19735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.715296][ T29] audit: type=1326 audit(1758266824.806:19736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.715366][ T29] audit: type=1326 audit(1758266824.806:19737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.715527][ T29] audit: type=1326 audit(1758266824.806:19738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.741229][ T29] audit: type=1326 audit(1758266824.826:19739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.741321][ T29] audit: type=1326 audit(1758266824.826:19740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.741365][ T29] audit: type=1326 audit(1758266824.826:19741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20554 comm="syz.0.3436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0992a4eba9 code=0x7ffc0000 [ 240.794098][ T293] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.869156][ T293] bridge_slave_1: left allmulticast mode [ 240.869179][ T293] bridge_slave_1: left promiscuous mode [ 240.869308][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.870316][ T293] bridge_slave_0: left promiscuous mode [ 240.870447][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.003851][ T29] audit: type=1326 audit(1758266825.086:19742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.3442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34f12eba9 code=0x7ffc0000 [ 241.064867][ T293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.074782][ T293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.085832][ T293] bond0 (unregistering): Released all slaves [ 241.090640][ T293] bond1 (unregistering): Released all slaves [ 241.172599][ T293] tipc: Left network mode [ 241.219942][T20695] FAULT_INJECTION: forcing a failure. [ 241.219942][T20695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.233226][T20695] CPU: 0 UID: 0 PID: 20695 Comm: syz.2.3445 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.233273][T20695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.233286][T20695] Call Trace: [ 241.233293][T20695] [ 241.233301][T20695] __dump_stack+0x1d/0x30 [ 241.233361][T20695] dump_stack_lvl+0xe8/0x140 [ 241.233381][T20695] dump_stack+0x15/0x1b [ 241.233401][T20695] should_fail_ex+0x265/0x280 [ 241.233432][T20695] should_fail+0xb/0x20 [ 241.233459][T20695] should_fail_usercopy+0x1a/0x20 [ 241.233541][T20695] _copy_from_iter+0xd2/0xe80 [ 241.233576][T20695] ? __build_skb_around+0x1a0/0x200 [ 241.233606][T20695] ? __alloc_skb+0x223/0x320 [ 241.233632][T20695] netlink_sendmsg+0x471/0x6b0 [ 241.233716][T20695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.233746][T20695] __sock_sendmsg+0x145/0x180 [ 241.233787][T20695] ____sys_sendmsg+0x31e/0x4e0 [ 241.233870][T20695] ___sys_sendmsg+0x17b/0x1d0 [ 241.233910][T20695] __x64_sys_sendmsg+0xd4/0x160 [ 241.233986][T20695] x64_sys_call+0x191e/0x2ff0 [ 241.234013][T20695] do_syscall_64+0xd2/0x200 [ 241.234053][T20695] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 241.234080][T20695] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.234193][T20695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.234220][T20695] RIP: 0033:0x7f1259a7eba9 [ 241.234249][T20695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.234272][T20695] RSP: 002b:00007f12584df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.234293][T20695] RAX: ffffffffffffffda RBX: 00007f1259cc5fa0 RCX: 00007f1259a7eba9 [ 241.234347][T20695] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 241.234363][T20695] RBP: 00007f12584df090 R08: 0000000000000000 R09: 0000000000000000 [ 241.234399][T20695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.234414][T20695] R13: 00007f1259cc6038 R14: 00007f1259cc5fa0 R15: 00007fffc9eaa5a8 [ 241.234436][T20695] [ 241.235209][ T293] hsr_slave_0: left promiscuous mode [ 241.441716][ T293] hsr_slave_1: left promiscuous mode [ 241.447479][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.454951][ T293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.462698][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.470162][ T293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.482121][ T293] veth1_macvtap: left promiscuous mode [ 241.487955][ T293] veth0_macvtap: left promiscuous mode [ 241.493548][ T293] veth1_vlan: left promiscuous mode [ 241.499454][ T293] veth0_vlan: left promiscuous mode [ 241.587528][ T293] team0 (unregistering): Port device team_slave_1 removed [ 241.598530][ T293] team0 (unregistering): Port device team_slave_0 removed [ 241.636778][T20553] chnl_net:caif_netlink_parms(): no params data found [ 241.649055][T20700] tipc: Enabling of bearer rejected, failed to enable media [ 241.714120][T20553] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.721345][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.729263][T20553] bridge_slave_0: entered allmulticast mode [ 241.736249][T20553] bridge_slave_0: entered promiscuous mode [ 241.743421][T20553] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.750946][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.758220][T20553] bridge_slave_1: entered allmulticast mode [ 241.764776][T20553] bridge_slave_1: entered promiscuous mode [ 241.785303][T20553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.796068][T20553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.818575][T20553] team0: Port device team_slave_0 added [ 241.825987][T20553] team0: Port device team_slave_1 added [ 241.845701][T20553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.852760][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.878767][T20553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.897753][T20553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.904720][T20553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.930704][T20553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.995310][T20859] vhci_hcd: invalid port number 23 [ 242.026120][T20553] hsr_slave_0: entered promiscuous mode [ 242.032677][T20553] hsr_slave_1: entered promiscuous mode [ 242.256281][T20553] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 242.293764][T20553] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 242.307967][T20553] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 242.324463][T20553] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 242.455295][T20553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.471920][T20553] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.483641][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.490752][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.505210][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.512376][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.613864][T20997] sch_fq: defrate 4294967295 ignored. [ 242.656549][T20553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.839708][T20553] veth0_vlan: entered promiscuous mode [ 242.849919][T20553] veth1_vlan: entered promiscuous mode [ 242.872171][T20553] veth0_macvtap: entered promiscuous mode [ 242.880085][T20553] veth1_macvtap: entered promiscuous mode [ 242.891931][T20553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.901074][T20553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.976332][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.001830][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.043032][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.068748][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.073109][T21040] __nla_validate_parse: 5 callbacks suppressed [ 243.073128][T21040] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3472'. [ 243.093097][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3472'. [ 243.152112][T21049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 243.183772][T21056] vhci_hcd: invalid port number 23 [ 243.287340][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3478'. [ 243.316019][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3479'. [ 243.377011][T21091] FAULT_INJECTION: forcing a failure. [ 243.377011][T21091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.390271][T21091] CPU: 0 UID: 0 PID: 21091 Comm: syz.4.3480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 243.390333][T21091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 243.390350][T21091] Call Trace: [ 243.390357][T21091] [ 243.390365][T21091] __dump_stack+0x1d/0x30 [ 243.390444][T21091] dump_stack_lvl+0xe8/0x140 [ 243.390507][T21091] dump_stack+0x15/0x1b [ 243.390527][T21091] should_fail_ex+0x265/0x280 [ 243.390554][T21091] should_fail+0xb/0x20 [ 243.390574][T21091] should_fail_usercopy+0x1a/0x20 [ 243.390609][T21091] _copy_to_user+0x20/0xa0 [ 243.390651][T21091] simple_read_from_buffer+0xb5/0x130 [ 243.390675][T21091] proc_fail_nth_read+0x10e/0x150 [ 243.390711][T21091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.390779][T21091] vfs_read+0x1a5/0x770 [ 243.390807][T21091] ? __rcu_read_unlock+0x4f/0x70 [ 243.390833][T21091] ? __fget_files+0x184/0x1c0 [ 243.390861][T21091] ksys_read+0xda/0x1a0 [ 243.390885][T21091] __x64_sys_read+0x40/0x50 [ 243.390989][T21091] x64_sys_call+0x27bc/0x2ff0 [ 243.391011][T21091] do_syscall_64+0xd2/0x200 [ 243.391077][T21091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 243.391132][T21091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 243.391170][T21091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.391276][T21091] RIP: 0033:0x7fb34f12d5bc [ 243.391293][T21091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 243.391382][T21091] RSP: 002b:00007fb34db8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 243.391407][T21091] RAX: ffffffffffffffda RBX: 00007fb34f375fa0 RCX: 00007fb34f12d5bc [ 243.391423][T21091] RDX: 000000000000000f RSI: 00007fb34db8f0a0 RDI: 0000000000000006 [ 243.391437][T21091] RBP: 00007fb34db8f090 R08: 0000000000000000 R09: 0000000000000000 [ 243.391449][T21091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.391461][T21091] R13: 00007fb34f376038 R14: 00007fb34f375fa0 R15: 00007ffd38391ac8 [ 243.391482][T21091] [ 243.653307][T21108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3481'. [ 244.952445][T21184] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 245.009357][T21184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.023080][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3495'. [ 245.034629][T21224] loop2: detected capacity change from 0 to 2048 [ 245.064160][T21184] bond0 (unregistering): Released all slaves [ 245.100151][T21224] loop2: p1 p2 p3 [ 245.140236][T21256] netlink: 'syz.6.3499': attribute type 1 has an invalid length. [ 245.173257][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3498'. [ 245.259784][T21276] loop6: detected capacity change from 0 to 512 [ 245.278154][T21276] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 245.302580][T21276] EXT4-fs (loop6): 1 truncate cleaned up [ 245.317950][T21276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.341594][T21276] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.420698][T21297] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3503'. [ 245.439398][T21342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3506'. [ 245.579877][T21361] tipc: Enabling of bearer rejected, failed to enable media [ 245.684742][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 245.684760][ T29] audit: type=1326 audit(1758266829.766:20250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.721210][T21366] netlink: 'syz.6.3513': attribute type 4 has an invalid length. [ 245.758004][ T29] audit: type=1326 audit(1758266829.806:20251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.781979][ T29] audit: type=1326 audit(1758266829.806:20252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.805880][ T29] audit: type=1326 audit(1758266829.806:20253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.829987][ T29] audit: type=1326 audit(1758266829.806:20254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.853743][ T29] audit: type=1326 audit(1758266829.826:20255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.877359][ T29] audit: type=1326 audit(1758266829.826:20256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.901143][ T29] audit: type=1326 audit(1758266829.826:20257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.924776][ T29] audit: type=1326 audit(1758266829.826:20258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.948468][ T29] audit: type=1326 audit(1758266829.826:20259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21365 comm="syz.6.3513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b3159eba9 code=0x7ffc0000 [ 245.973950][T21368] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.981231][T21368] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.075627][T21368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.100344][T21368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.208267][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.234446][T21388] tipc: Enabling of bearer rejected, failed to enable media [ 246.243344][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.270820][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.311373][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.391168][T21394] netdevsim netdevsim4: Direct firmware load for ./bus failed with error -2 [ 246.456795][T21399] loop4: detected capacity change from 0 to 128 [ 246.483829][T21402] netlink: 'syz.6.3530': attribute type 1 has an invalid length. [ 246.527835][T21402] bond0: (slave bond_slave_1): Releasing backup interface [ 246.643908][T21423] tipc: Enabling of bearer rejected, failed to enable media [ 246.836670][T21429] vhci_hcd: invalid port number 23 [ 247.318015][T21463] vhci_hcd: invalid port number 23 [ 247.346932][T21462] netdevsim netdevsim2: Direct firmware load for ./bus failed with error -2 [ 247.454901][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.462440][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.469939][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.486044][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.493681][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.501189][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.508931][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.516332][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.523759][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.531272][ T3407] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 247.544744][T21497] netlink: 'syz.0.3545': attribute type 4 has an invalid length. [ 247.559779][T21499] loop4: detected capacity change from 0 to 128 [ 247.562047][T21497] .`: renamed from bond0 (while UP) [ 247.653260][ T3407] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 247.790653][T21523] netdevsim netdevsim4: Direct firmware load for ./bus failed with error -2 [ 247.863385][T21529] netlink: 'syz.2.3556': attribute type 1 has an invalid length. [ 247.897804][T21529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.915832][T21529] bond1 (unregistering): Released all slaves [ 248.092898][T21629] loop2: detected capacity change from 0 to 512 [ 248.116051][T21629] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 248.140554][T21639] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 248.158765][T21629] EXT4-fs (loop2): 1 truncate cleaned up [ 248.171181][T21635] __nla_validate_parse: 8 callbacks suppressed [ 248.171198][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3574'. [ 248.173230][T21639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.193629][T21678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'. [ 248.196914][T21629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.217598][T21629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.225815][T21678] bond0 (unregistering): Released all slaves [ 248.267583][T21680] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3577'. [ 248.385090][T21736] vhci_hcd: invalid port number 23 [ 248.502574][T21745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3591'. [ 248.631862][T21772] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3601'. [ 249.621090][T21825] loop4: detected capacity change from 0 to 512 [ 249.661899][T21825] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 249.698301][T21825] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3612: invalid indirect mapped block 4294967295 (level 0) [ 249.757006][T21825] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.3612: invalid indirect mapped block 4294967295 (level 1) [ 249.777703][T21825] EXT4-fs (loop4): 1 orphan inode deleted [ 249.783840][T21825] EXT4-fs (loop4): 1 truncate cleaned up [ 249.790095][T21825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.807068][T21861] vhci_hcd: invalid port number 23 [ 249.836187][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3612'. [ 249.926563][T18493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.874228][T21910] tipc: Enabling of bearer rejected, failed to enable media [ 250.937530][T21916] loop2: detected capacity change from 0 to 2048 [ 251.005494][T21916] loop2: p1 p2 p3 [ 251.073720][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3628'. [ 251.141643][T21952] vhci_hcd: invalid port number 23 [ 251.950652][T22010] dummy0: left allmulticast mode [ 251.976069][T22010] bridge0: port 3(dummy0) entered disabled state [ 251.991659][T22017] loop4: detected capacity change from 0 to 1024 [ 251.992062][T22017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.014656][T22017] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.028303][T22017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.030180][T22017] FAULT_INJECTION: forcing a failure. [ 252.030180][T22017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.030243][T22017] CPU: 0 UID: 0 PID: 22017 Comm: syz.4.3644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.030276][T22017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.030296][T22017] Call Trace: [ 252.030304][T22017] [ 252.030358][T22017] __dump_stack+0x1d/0x30 [ 252.030399][T22017] dump_stack_lvl+0xe8/0x140 [ 252.030421][T22017] dump_stack+0x15/0x1b [ 252.030442][T22017] should_fail_ex+0x265/0x280 [ 252.030470][T22017] should_fail+0xb/0x20 [ 252.030490][T22017] should_fail_usercopy+0x1a/0x20 [ 252.030563][T22017] strncpy_from_user+0x25/0x230 [ 252.030604][T22017] ? kmem_cache_alloc_noprof+0x186/0x310 [ 252.030633][T22017] ? getname_flags+0x80/0x3b0 [ 252.030675][T22017] getname_flags+0xae/0x3b0 [ 252.030711][T22017] __x64_sys_rename+0x40/0x70 [ 252.030742][T22017] x64_sys_call+0x1f9/0x2ff0 [ 252.030763][T22017] do_syscall_64+0xd2/0x200 [ 252.030871][T22017] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 252.030903][T22017] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 252.030935][T22017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.030959][T22017] RIP: 0033:0x7fb34f12eba9 [ 252.030977][T22017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.031013][T22017] RSP: 002b:00007fb34db8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 252.031037][T22017] RAX: ffffffffffffffda RBX: 00007fb34f375fa0 RCX: 00007fb34f12eba9 [ 252.031053][T22017] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 252.031065][T22017] RBP: 00007fb34db8f090 R08: 0000000000000000 R09: 0000000000000000 [ 252.031077][T22017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.031089][T22017] R13: 00007fb34f376038 R14: 00007fb34f375fa0 R15: 00007ffd38391ac8 [ 252.031158][T22017] [ 252.059598][T22010] bridge_slave_0: left allmulticast mode [ 252.059619][T22010] bridge_slave_0: left promiscuous mode [ 252.059749][T22010] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.111197][T18493] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.219035][T22010] bridge_slave_1: left allmulticast mode [ 252.286899][T22029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'. [ 252.292863][T22010] bridge_slave_1: left promiscuous mode [ 252.293110][T22010] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.300997][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 252.301015][ T29] audit: type=1326 audit(1758266836.356:20416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388174][ T29] audit: type=1326 audit(1758266836.356:20417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388211][ T29] audit: type=1326 audit(1758266836.356:20418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388243][ T29] audit: type=1326 audit(1758266836.356:20419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388379][ T29] audit: type=1326 audit(1758266836.356:20420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388406][ T29] audit: type=1326 audit(1758266836.356:20421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388502][ T29] audit: type=1326 audit(1758266836.356:20422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388537][ T29] audit: type=1326 audit(1758266836.356:20423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388582][ T29] audit: type=1326 audit(1758266836.356:20424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.388623][ T29] audit: type=1326 audit(1758266836.356:20425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22028 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 252.558193][T22010] bond0: (slave bond_slave_0): Releasing backup interface [ 252.632111][T22010] bond0: (slave bond_slave_1): Releasing backup interface [ 252.651354][T22010] team0: Port device team_slave_0 removed [ 252.677097][T22010] team0: Port device team_slave_1 removed [ 252.696349][T22010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.696371][T22010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.708248][T22055] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3656'. [ 252.726114][T22010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.733714][T22010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.788889][T22043] netdevsim netdevsim4: Direct firmware load for ./bus failed with error -2 [ 252.954364][T22084] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3663'. [ 253.085741][T22120] tipc: Enabling of bearer rejected, failed to enable media [ 253.232082][T22126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3672'. [ 253.241029][T22126] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3672'. [ 253.403698][T22135] netem: incorrect ge model size [ 253.408782][T22135] netem: change failed [ 253.439983][T22138] tipc: Enabling of bearer rejected, failed to enable media [ 253.628123][T22145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3680'. [ 253.692823][T22156] netdevsim netdevsim6: Direct firmware load for ./bus failed with error -2 [ 253.833044][T22174] netlink: 'syz.0.3689': attribute type 1 has an invalid length. [ 253.883530][T22210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3689'. [ 253.887668][T22174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.949124][T22184] tipc: Enabling of bearer rejected, failed to enable media [ 253.973604][T22210] bond0 (unregistering): Released all slaves [ 254.079218][T22245] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.086517][T22245] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.177108][T22245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.204783][T22245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.290388][ T57] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.290598][T22257] netdevsim netdevsim2: Direct firmware load for ./bus failed with error -2 [ 254.317518][ T57] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.338390][ T57] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.367500][ T57] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.367528][T22261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3697'. [ 254.405517][T22261] batadv1: entered promiscuous mode [ 254.410993][T22261] batadv1: entered allmulticast mode [ 254.419003][T22266] Unsupported ieee802154 address type: 0 [ 254.669083][T22269] loop6: detected capacity change from 0 to 128 [ 254.687815][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3702'. [ 254.775445][T22287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3704'. [ 254.883705][T22310] netdevsim netdevsim1: Direct firmware load for ./bus failed with error -2 [ 255.109325][T22333] 9pnet_fd: Insufficient options for proto=fd [ 255.213092][T22338] FAULT_INJECTION: forcing a failure. [ 255.213092][T22338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.226279][T22338] CPU: 0 UID: 0 PID: 22338 Comm: syz.0.3720 Not tainted syzkaller #0 PREEMPT(voluntary) [ 255.226333][T22338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.226350][T22338] Call Trace: [ 255.226359][T22338] [ 255.226369][T22338] __dump_stack+0x1d/0x30 [ 255.226396][T22338] dump_stack_lvl+0xe8/0x140 [ 255.226474][T22338] dump_stack+0x15/0x1b [ 255.226530][T22338] should_fail_ex+0x265/0x280 [ 255.226561][T22338] should_fail+0xb/0x20 [ 255.226587][T22338] should_fail_usercopy+0x1a/0x20 [ 255.226613][T22338] _copy_to_user+0x20/0xa0 [ 255.226686][T22338] simple_read_from_buffer+0xb5/0x130 [ 255.226715][T22338] proc_fail_nth_read+0x10e/0x150 [ 255.226763][T22338] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.226797][T22338] vfs_read+0x1a5/0x770 [ 255.226825][T22338] ? __rcu_read_unlock+0x4f/0x70 [ 255.226951][T22338] ? __fget_files+0x184/0x1c0 [ 255.227000][T22338] ? __rcu_read_unlock+0x4f/0x70 [ 255.227023][T22338] ksys_read+0xda/0x1a0 [ 255.227061][T22338] __x64_sys_read+0x40/0x50 [ 255.227089][T22338] x64_sys_call+0x27bc/0x2ff0 [ 255.227118][T22338] do_syscall_64+0xd2/0x200 [ 255.227207][T22338] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.227238][T22338] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 255.227341][T22338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.227416][T22338] RIP: 0033:0x7f0992a4d5bc [ 255.227466][T22338] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 255.227488][T22338] RSP: 002b:00007f09914af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.227511][T22338] RAX: ffffffffffffffda RBX: 00007f0992c95fa0 RCX: 00007f0992a4d5bc [ 255.227527][T22338] RDX: 000000000000000f RSI: 00007f09914af0a0 RDI: 0000000000000003 [ 255.227541][T22338] RBP: 00007f09914af090 R08: 0000000000000000 R09: 0000000000000000 [ 255.227565][T22338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.227577][T22338] R13: 00007f0992c96038 R14: 00007f0992c95fa0 R15: 00007ffcbe3dfcb8 [ 255.227625][T22338] [ 255.798985][T22363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22363 comm=syz.6.3730 [ 255.828471][T22363] netlink: 'syz.6.3730': attribute type 1 has an invalid length. [ 255.876327][T22363] bond1: (slave bridge1): making interface the new active one [ 255.897526][T22363] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 255.918696][T22363] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3730'. [ 256.074701][T22420] loop2: detected capacity change from 0 to 764 [ 256.113120][T22420] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.125795][T22422] loop6: detected capacity change from 0 to 512 [ 256.157756][T22422] journal_path: Non-blockdev passed as './bus' [ 256.164029][T22422] EXT4-fs: error: could not find journal device path [ 256.408520][T22441] loop6: detected capacity change from 0 to 1024 [ 256.560320][ T1881] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.582556][ T1881] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.597647][ T1881] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.616157][ T1881] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.666031][T22462] netdevsim netdevsim6: Direct firmware load for ./bus failed with error -2 [ 256.687163][T22467] vhci_hcd: invalid port number 23 [ 256.746010][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 256.874028][T22471] loop6: detected capacity change from 0 to 128 [ 257.391367][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 257.391386][ T29] audit: type=1326 audit(1758266841.476:20563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.423705][ T29] audit: type=1326 audit(1758266841.506:20564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.447319][ T29] audit: type=1326 audit(1758266841.506:20565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.471119][ T29] audit: type=1326 audit(1758266841.506:20566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.494756][ T29] audit: type=1326 audit(1758266841.506:20567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.518562][ T29] audit: type=1326 audit(1758266841.506:20568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.542288][ T29] audit: type=1326 audit(1758266841.506:20569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.565963][ T29] audit: type=1326 audit(1758266841.506:20570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.589632][ T29] audit: type=1326 audit(1758266841.506:20571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.613282][ T29] audit: type=1326 audit(1758266841.506:20572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22510 comm="syz.1.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f07c611eba9 code=0x7ffc0000 [ 257.679007][T22517] tipc: Enabling of bearer rejected, failed to enable media [ 257.921735][T22541] netdevsim netdevsim2: Direct firmware load for ./bus failed with error -2 [ 257.953012][T22544] vhci_hcd: invalid port number 23 [ 257.980907][T22548] netlink: 'syz.2.3770': attribute type 1 has an invalid length. [ 258.031510][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3770'. [ 258.035078][T22548] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.068797][T22551] bond1 (unregistering): Released all slaves [ 258.127703][T22549] ================================================================== [ 258.135834][T22549] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 258.142565][T22549] [ 258.144904][T22549] write to 0xffff88812b458b50 of 8 bytes by task 22617 on cpu 1: [ 258.152643][T22549] __dentry_kill+0x142/0x4b0 [ 258.157282][T22549] dput+0x5e/0xd0 [ 258.160949][T22549] step_into+0x5b2/0x820 [ 258.165236][T22549] walk_component+0x162/0x220 [ 258.169952][T22549] path_lookupat+0xfe/0x2a0 [ 258.174494][T22549] filename_lookup+0x147/0x340 [ 258.179300][T22549] vfs_statx+0x9d/0x390 [ 258.183488][T22549] do_statx+0xa6/0x100 [ 258.187696][T22549] io_statx+0x7f/0xc0 [ 258.191700][T22549] __io_issue_sqe+0xfe/0x2e0 [ 258.196310][T22549] io_issue_sqe+0x53/0x970 [ 258.200760][T22549] io_wq_submit_work+0x3f7/0x5f0 [ 258.205735][T22549] io_worker_handle_work+0x44e/0x9b0 [ 258.211042][T22549] io_wq_worker+0x22e/0x870 [ 258.215556][T22549] ret_from_fork+0x11f/0x1b0 [ 258.220160][T22549] ret_from_fork_asm+0x1a/0x30 [ 258.224965][T22549] [ 258.227293][T22549] read to 0xffff88812b458b50 of 8 bytes by task 22549 on cpu 0: [ 258.234939][T22549] fast_dput+0x5f/0x2c0 [ 258.239114][T22549] dput+0x24/0xd0 [ 258.242761][T22549] step_into+0x5b2/0x820 [ 258.247024][T22549] walk_component+0x162/0x220 [ 258.251739][T22549] path_lookupat+0xfe/0x2a0 [ 258.256260][T22549] filename_lookup+0x147/0x340 [ 258.261043][T22549] vfs_statx+0x9d/0x390 [ 258.265217][T22549] do_statx+0xa6/0x100 [ 258.269306][T22549] io_statx+0x7f/0xc0 [ 258.273299][T22549] __io_issue_sqe+0xfe/0x2e0 [ 258.277904][T22549] io_issue_sqe+0x53/0x970 [ 258.282358][T22549] io_wq_submit_work+0x3f7/0x5f0 [ 258.287308][T22549] io_worker_handle_work+0x44e/0x9b0 [ 258.292608][T22549] io_wq_worker+0x22e/0x870 [ 258.297143][T22549] ret_from_fork+0x11f/0x1b0 [ 258.301743][T22549] ret_from_fork_asm+0x1a/0x30 [ 258.306694][T22549] [ 258.309015][T22549] value changed: 0xffff8882376dbc58 -> 0x0000000000000000 [ 258.316134][T22549] [ 258.318469][T22549] Reported by Kernel Concurrency Sanitizer on: [ 258.324630][T22549] CPU: 0 UID: 0 PID: 22549 Comm: iou-wrk-22546 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.334704][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.344769][T22549] ==================================================================