last executing test programs: 6m27.293584437s ago: executing program 4 (id=301): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) (fail_nth: 2) 6m27.228565733s ago: executing program 4 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x1d, 0x0, 0x16, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x1}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa97c4864ef7a3080049014a240064000000879078ac1414bbac14140c8907efe000000d860600000000000000"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="01002d3d7003eedbdf252c6e570000020064756d6f7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r4 = timerfd_create(0x0, 0x80000) read(r4, &(0x7f0000000080)=""/149, 0x95) pipe2(0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = shmget(0x3, 0x3000, 0x80, &(0x7f0000006000/0x3000)=nil) shmctl$SHM_INFO(r5, 0xe, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp_SCTP_MAXSEG(r7, 0x84, 0xd, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r8, 0x0, 0x0, 0x0, 0x0) fremovexattr(r8, 0x0) 6m26.304500688s ago: executing program 4 (id=316): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c00000000000000002a00"], 0xa0}}, 0x0) rename(&(0x7f0000000080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/196, 0xc4}], 0x3, &(0x7f0000000900)=""/149, 0x95}, 0x40) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x10) sendfile(0xffffffffffffffff, r0, &(0x7f0000002700)=0x1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$caif_seqpacket(0x25, 0x5, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1, 0x0, 0x2000000005}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r4, @ANYRES32=r4], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$eJzs28tvG8UfAPDv2kn6/P1qqvLoAwgURMQjadJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSd8QRib+AE1wQcELiCndUqUK5tMDFaOPdxHbttA5ONtSfj7TJzO44M1/vjj07kw2gbw2nP5KIvRHxa0Tsq2ebCwzXf91cXpz6c3lxKola7Y0/kpVyN5YXp/Ki+ev25JmBiNInSRxuU+/8pcvnJqvVmYtZfmzh/Ltj85cuPzN7fvLszNmZCxOnTp04Pv7cyYlnexJnGteNQx/MHTn4yltXX5s6ffXtH79O8vhb4uiR4fUOPl6r9bi6Yv2vIZ0MFNgQulKud9MYXOn/+6IcaydvX7z8caGNAzZVrVar3df58FINuIslUXQLgGLkX/Tp/W++bdHQY1u4/kL9BiiN+2a21Y8MRCkrM9hyf9tLwxFxeumvL9ItNmceAgCgybfp+OfpbPzXtPBTisZ5of9nayiViLgnIvZHxMmIOBAR90aslL0/Ih7osv7WRZJbxz+la13+ya6k47/ns7Wt5vFfPvqLSjni73y4XInB5MxsdeZY9p6MxOCOND++Th3fvfTLZ52ONY7/0i2tPx8LZu24NrCj+TXTkwuT/ybmRtc/ijg00C7+ZHUlIL0sDkbEoQ3WMfvkV0c6Hbt9/M2GGjM9WGeqfRnxRP38L0VL/Llk/fXJsZ1RnTk2ll8Vt/rp5yuvd6q/2/h7LT3/u9te/6vxV5LG9dr57uu48tunHe9pNnr9DyVvNu17f3Jh4eJ4xFDyar3RjfsnWspNrJVP4x852r7/74+1d+JwRKQX8YMR8VBEPJy1/ZGIeDQijq4T/w8vPvZO856ki/g3Vxr/dFfnfy0xFK172ifK577/pqnSSnQRf3r+T6ykRrI9d/L5dyft2tjVDAAAAP89pYjYG0lpdDVdKo2O1v+H/0DsLlXn5heeOjP33oXp+jMClRgs5TNd9fng+nzoeHZbn+cnWvLHs3njz8u7VvKjU3PV6aKDhz63p0P/T/1eLrp1wKbzvBb0L/0f+pf+D/1L/4f+1ab/7yqiHcDWa/f9/2EB7QC2Xkv/t+wHfcT9P/Qv/R/6l/4PfWl+V9z+Ifntmti5PZrRn4koFVd7PkNV+JtwFycK/mACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADokX8CAAD//2Ts5lU=") r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r8 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x30000, 0x0, 0x1, 0x8, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m26.052308138s ago: executing program 4 (id=321): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r3, 0x10, 0x800, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 6m25.976569265s ago: executing program 4 (id=323): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, 0x0) r1 = syz_usb_connect$cdc_ecm(0x5, 0x159, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = creat(0x0, 0x4) r3 = dup2(r2, r2) getsockopt$inet6_mreq(r3, 0x29, 0x1c, 0x0, 0x0) pipe(0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r7, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 6m25.556562008s ago: executing program 4 (id=328): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6m25.553589709s ago: executing program 32 (id=328): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRES32=0x0], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000003c0)={0x1d, r6, 0xfffffffffffffffd, {0x0, 0xf0, 0x4}, 0x2}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m52.773355834s ago: executing program 0 (id=3129): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nojournal_checksum}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x1, 0xa8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000000240)="18", 0x1) tee(0xffffffffffffffff, r3, 0x8f5, 0x100000000000000) write$cgroup_type(r3, &(0x7f0000000180), 0x9) write(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$eJzs28tvG8UfAPDvrpP019cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgJC5YgqcUcckfgLOMEFASckrsAZVapQLi2cjNbebRzXdpNg1yH+fKRNZnbHmfl6duzZnWwAA2ss+5FE7IqIXyNitJ5dXWCs/uvm8uWZv5YvzyRRrb7xZ1Ird2P58kxRtHjdziIzFJF+ksSBFvUuXLx0drpSmbuQ5ycWz707sXDx0jNnzk2fnjs9d37qxIljRyefOz71bFfizOK6sf+D+YP7Xnnr6mszJ6++/ePXSRF/UxxdMtbp4OPVaper66/dDelkqI8NYV1K9WEaw7XxPxqlWOm80Xj54742DuiparVava/94aUqsIUl0e8WAP1RfNFn17/FdpemHpvC9RfqF0BZ3DfzrX5kKNK8zHDT9W03jUXEyaW/v8i2aL4Psb1HlQIAA+3bbP7zdKv5XxqN94X+n6+hlCPinojYExHHI2JvRNwbUSt7f0Q8sM76mxdJbp9/ptc2FNgaZfO/5/O1rdXzv2L2F+VSnttdi384OXWmMnckf08Ox/C2LD/ZoY7vXvrls3bHGud/2ZbVX8wF83ZcG9q2+jWz04vT/ybmRtc/itg/1Cr+5NZKQBIR+yJi/wbrOPPkVwfbHWsT/8ia/nAX1pmqX0Y8Ue//pWiKv5B0Xp+c+F9U5o5MFGfF7X76+crr7eq/c//3Vtb/O1qe/0X8v5eTxvXahfXXceW3T9teU270/B9J3ly17/3pxcULkxEjyau1fLlx/1RTuamV8ln8hw+1Hv97YuWdOBAR2Un8YEQ8FBEP521/JCIejYhDHeL/4cXH3tl4/L2VxT/bsf+jqf9XEiPRvKd1onT2+29WVVpeT/xZ/x+rpQ7ne9by+beWdm3sbAYAAID/njQidkWSjt9Kp+n4eP1/+PfGjrQyv7D41Kn5987P1p8RKMdwWtzpGm24HzqZX9YX+amm/NH8vvHnpe21/PjMfGW238HDgNvZZvxn/ij1u3VAz3leCwaX8Q+Dy/iHwWX8w+BqMf49egYDotX3/4d9aAdw9zWN/47LfiYGsLW4/ofBZfzD4DL+YSAtbI87PyS/NRJpRGyCZmyVRKSbohkSPUr0+5MJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4JAAD//5025W8=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x101880}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000203010800000000000000000700003508000100c77b6628"], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x20000810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$tun(r7, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltaction={0x60, 0x31, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x60}}, 0x200440c4) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64=r9, @ANYRESHEX=r9], &(0x7f0000000440)='GPL\x00', 0xd6c3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x13f, 0x9}}, 0x20) 2m52.270271614s ago: executing program 0 (id=3195): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10001, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendto$inet6(r1, &(0x7f0000000040)='\v', 0x1, 0x20008081, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x30}, 0xc) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2m52.135367255s ago: executing program 0 (id=3198): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept(r1, &(0x7f0000001780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f00000006c0)=0x80) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x4000) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/176, 0xb0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001740)='mem_connect\x00', r8}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r9) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000200)="4176adc3a0", 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001900)={0x0, 0x8, 0x6, [0xe0fe, 0x4, 0x1c0, 0x8, 0x5, 0x1ff]}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m50.005033378s ago: executing program 0 (id=3244): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x518, &(0x7f0000001000)="$eJzs3d1u09gWwPHlfogqR0JH5xwhVBXYlHNRpBKcBIIirjzOTrrBsSPbQe0VqmiLKlIYUUaa9maGG2ZGmnkIbucZRvMa8xRoHqEj2wlNaRMzpSRM9f9FsHfsZe9lN/KS29gWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgllu37ZIlnvE7q2o4tx4GrRHz++u7eaQZMa6IlfyTuTm5nE26/L/D2ZeS/xZlIXu3IHNJMyf7/7r07/v/nZnqLz8iobHY3dt/tt7tbr6cdCIT0tS+iQLTcppamShQtWrVvr3SiFTDeDpai2LdUm6onTgI1ZJ7U5VqtYrSxbWg4zfrjqf7E+/dKtt2VT0otrUTRoF/+0ExcleM5xm/mcYks5OYe8kH8aGJVaydllJb293NSl6SSVDpY4LKeUFlu1wulcrlUvVu7e492545NsH+gByLmPyHFpN1xkdw4PSmevVfPDHiS0dWRZ34cqUuoQTSGjK/p1f4LbmtR447WP/7Vf7y4ex5Sev/1ezd1WH1f0gu43vtyp7syzNZl650ZVNeTjyj8b6aosUXI5EEYqQlTjpF9aYoqUlVqmLLY1mRhkSipCFGPNESyZpEEotOP1GuhKLFkVgCCUXJkrhyU5SUpCY1qYgSLUVZk0A64ktT6uKka9mS7XS/V0bk+D6o9DFB5RFB1H98urM/iAOndNCv/wAAAAAA4Nyy0t++J+f/s3Il7TWMp+1JpwUAAAAAAM5Q+pf/haSZTXpXxOL8HwAAAACA88ZKr7GzRKQg17Je/0oofgkAAAAAAMA5kf79/2rSFJLeNbE4/wcAAAAA4Lz5Mfce+1H7gvX7nxKGs9br9ur/rR0niXN2prPlpj9cY9yYty72VpI21ZneO1cvWErke5HD+wW/6zVbeXlYZ5CA/CzXs5jrG1m70Z+TjVJoGE8X3cC7XxLHuTgV69X4m+fb30q6+T/5rYuWbG13N4tPXnQ30lxeJ2t5vdO7geKx+yiOyOVVer+F9JqLE7d4Nr0QozduIRvXHtz+qWzxqaFjHhwcfJdMOBzzjSxmMYuFrC0c3f65ZMxScdjW97IofeKWv5EbWcyNpRtZc0IW5bwsyoNZZDvh4MKQLP74LXv7t7Oo5GVROZ7FiJ/I8X0BAJOylVOFrOOF/xRHufFU9zeylMUszacH1pn5E47odt4R3f7E6vbrsWcgDauxybi/fFBV3yYLvB06buSVrWQXTr/a+Vou7e7t39reWX+6+XTzeblcqdp3bPtuWWbTzeg11B4AwAnyn7GTG2HdyTmr/s/7rxQU5Ym8kK5syHJ6tUH6jYMT11oY+BrCcs5Za2HgCS/LOWd1hYEHvXx8bGUMPwkAAMZnsV+H5fT1fznnvPtoLR99djxYywEAwOehw3dWIf7BCkPTflyq1UpOvKJVGLgPVWjqTa2MH+vQXXH8plbtMIgDN/CSziNT15GKOu12EMaqEYSqHURmNX3yu+o9+j3SLcePjRu1Pe1EWrmBHzturOomclW785VnohUdpgtHbe2ahnGd2AS+ioJO6OqiUpHWA4Gmrv3YNEzS9VU7NC0nXFOPAq/T0qquIzc07TjIVtgfy/iNIGylqy1OemcDAPCF2N3bf7be7W6+/IydSW8jAAA4iioNAAAAAAAAAAAAAAAAAAAAAMCXbxzX/9GhM8nOtHwRafzDOpM+MgH43P4KAAD//051WKo=") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x408000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='tlb_flush\x00', r3}, 0x10) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m49.920717765s ago: executing program 0 (id=3246): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x1010040, &(0x7f00000003c0)={[{@noquota}, {@debug}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@resgid}]}, 0x3, 0x4eb, &(0x7f0000001fc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)) 2m45.864628743s ago: executing program 0 (id=3331): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030c66181f2815389f20000000800000003000084020000000b00000080000000000000ff0d00000002000000ff0f00000d00000000000000930100000000"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 2m45.833258785s ago: executing program 33 (id=3331): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000030c66181f2815389f20000000800000003000084020000000b00000080000000000000ff0d00000002000000ff0f00000d00000000000000930100000000"], 0x0, 0x4a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 15.208310739s ago: executing program 6 (id=6778): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000003c0), 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x401, 0x4) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x7fffc, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYRESHEX=r9], 0x30}, 0x24000004) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 15.016854024s ago: executing program 6 (id=6781): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000140)={0x8, 0x2, 0x5}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x12b4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}}}, &(0x7f0000000400)=0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x13}, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007, 0x0, @perf_config_ext={0x1, 0xa}, 0x2, 0x2, 0x2, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x10000000000c0}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = epoll_create(0x3ff) syz_mount_image$ext4(&(0x7f00000004c0)='ext3\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000540)={[], [{@euid_gt}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r9, 0x0, 0xbf5, 0x2000402) r11 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r12 = open(&(0x7f0000000180)='./bus\x00', 0x12ba7e, 0x0) sendfile(r12, r11, 0x0, 0x7) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0xc, r9, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000380)={0x2002006}) sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000019300)="0f4d", 0x2}], 0x1}, 0x1) recvmsg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2002) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3183000000000000000019000000200001801400020076657468315f766c616e00000000000008000100", @ANYRES32=r3, @ANYBLOB="04edbe64ad11abf3d47d4565f184210872e548faccd802b1cc90ac23b49b8c85e8c283ec138303ab398623a7b2035cedb720edc0b67595a62398f83d24068ca9bebbbd3fd81fe9c401ee7f06b6782dd3bb66c14cf064e86de2de59507f84c5cd551a3aa976f0c46222cff163e46a3787209199480f6422f3deb924587fa1826d858b169cbdb8f5f27a85ef5f0341ffc177e894"], 0x34}}, 0x40010) 13.048933823s ago: executing program 6 (id=6793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xc}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) 11.561212864s ago: executing program 6 (id=6799): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) close(0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendfile(r4, r2, &(0x7f00000001c0)=0x7f, 0x4) wait4(r9, 0x0, 0x40000000, 0x0) 10.278233348s ago: executing program 6 (id=6816): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 9.719067083s ago: executing program 6 (id=6829): pipe(0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$eJzs3c9rG9kdAPDvSLZjJ26dlFIa01JDDwmUOHYamraXJumhOQQaaA6l9BAT26mJ8oPYgSYNJIFCW2ihlF7Dksv+A7kvue9tWdjd254XssuSZRd2g7XMaGRLthTLsiXZmc8HpMy8Gc17X41e3nsaPU8AhTWVPpUijkasXkkiJhq2jUdt41S+38vPH1xNH0lUq3/4LIkkT6vt/Y9YzV93KH1KIkYj4r3zEd8rb853+d7963OVaubZw4iTKzdun1y+d//E0o25awvXFm7Onvrl6TMzv5o9PbsrcR7K/71w8fc/+s/f//KLxfcrJ5I4G5eH/zYfTXF0pZq0SJyKqVithVhtTB+KiDPpQov3Zb/pKIQDvS8H3Snnn8fhiPhBTEQ5W6uZiKV/D7RwQE9VyxFVoKAS9R8Kqt4PqI/tOxsHX+5xr6R/XpyrDYA2xz9U+24kRrOx0cGXScPIqPbdxuFdyD/N49WDySfpI5q+h/hq7ewM7UI+7Tx6HBE/bBV/kpXtcBZpGn+paayfRMRMRIzk5fttF1k3Hqtuh9/DbL8Q24i/8TyUIuJs/m+afr7L/Kc2rPc7fgCK6fm5vCHPWuP19q+61jbV27/m/s94i7arG9tu/1pdaNmB9v2/ens/mvV7Shv6YWkxLrU+5PDGhI//deF/7fJv7P+9epBk5aj3BfvhxeOIyQ3x/zMNNu//pPEnLc5/usuVs53l8bsPPr3Qbltz/JNPOo1/05vcperTiGMtxz/rH7R06TXXJ08uLlUWZmrPLfN4590/v90u/27j3y3p+T/YJv6G81/a+Lr0PbndYR7PLj29MdJm2/iW8Zc+GUlq4836Mf46t7JyZzZiJLmY79KQfur1ZanvUz9GGv/xn7au/02f/8fNxxlrHMBs4fYfr79st62b899wMXm12mEZ2knjn9/6/G+q/2nafzvM48s/3f1xu20t4o/I4x/bSWAAAAAAAABQQKXsGmxSml5bLpWmp2vzZb8fB0uVW8srP1u8dffmfMTx7PeQw6X6le6J2nqSrs/mv4etr5/asP7ziDgSEf8vj2Xr01dvVeYHHTwAAAAAAAAAAAAAAAAAAADsEYfy+f/1+1R/Ua7N/wcKopc3mAP2NvUfiiur/5tu8bS1Az0oC9Bf2n8oLvUfikv9h+JS/6G41H8oLvUfikv9h+Laov67zA8AAAAA+9ORnzz/KImIR78eyx6pkXxbeXigRQN6rFUVrz4cQEGAvisPugDAwKxd+u9i+j+wv3U0xP86/+OAvS8OMABJq8Ssc1B9feV/3vKVTXQtAAAAAAAAAAAAAGB3HDvafv6/6f/wZvPbfCiuHcz/96cDYJ9z6w8orvUxvrt8QFFtNYt/tN2GDub/AwAAAAAAAAAAAAC7Yzx7JKXpfC7weJRK09MR34mIwzGcLC5VFmYi4rsR8WF5+EC6PjvoQgMAAAAAAAAAAAAAAAAAAMAbZvne/etzlcrCncaFbzalvNkL9bug9iGv38Q2XxVJ/9+WsYgY+Enp2cJQQ0oS8Sg983uiYHeWY28UI1sY8H9MAAAAAAAAAAAAAAAAAABQQA1zj1ubfKvPJQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/lu//3/vFgYdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwP30bAAD//8UxQX0=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x408042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f00000008c0), 0x0) 9.705899414s ago: executing program 34 (id=6829): pipe(0x0) add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x408042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r3, &(0x7f00000008c0), 0x0) 2.1010242s ago: executing program 3 (id=7009): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x17, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x5}, 0x10, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r3, 0x2b, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x10145e8, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000240)=0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000340)='cpu\t&-&&\t') mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4851}, 0x20000004) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.024951126s ago: executing program 1 (id=7012): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 2.024470956s ago: executing program 1 (id=7013): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x908a011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r6}, 0x18) r8 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x2f, 0x5, 0x0, 0x0, 0x0, @remote, @mcast2, 0x7800, 0x0, 0x2, 0xd279}}) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) sendmsg$unix(r10, &(0x7f0000000f40)={&(0x7f0000000980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000ac0)="d21acd5a564ffa1effdc3eeed87ebb35e4e1b4652a46f1f8f1236b3a63c4e1ce82f493f3867339aff640408283cba06193b3af184b87e762ca79bb6039f62a685993656cd955ce00e9534e70dd9dd4d728dfd24457a50b5a09f259aa3fa2e90f93fc9b5210bddf18ad279f7771004740ba958390b6b90c2fca389e485f375f3bf17fb1e9973cf819179807fd762ee1dc6569a746668e18e7d568b895219400423ac2454f2862d452dde35489984b6153f119bee195febe206e7a4b1a77c343de959e7ba96d0638a409ebeb3ae5372f336c561ead09b0666c92c15c42b197cae4b973cf245eefbfaceb0621167a21fef7f2d04e067a28", 0xf6}], 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="240000000000e43f0100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x4000000}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x0, 0x20) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r12, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4000000005060101000000000000000001000001296507430900030073797a310000000005800100070000000900030073797a30000000000900020073697a30"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r13 = openat(r11, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r14, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r0, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0000000d00000000010000070000000ccc0200", @ANYRES32=r0, @ANYBLOB='\v\x00'/20, @ANYRES32=r9, @ANYRES32=r11, @ANYBLOB="0300000005000000030000000100000000000000", @ANYRES32=r13, @ANYBLOB="8f00000032f81c470661b80cf30e6aafc3b99e7033ab96ebfdee6b218cababc358f39c0a78797e1177d8cfaad158a1"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x0, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', r9, @fallback=0xf, r11, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x5, 0x3}, 0x10, r15, 0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r17, r0, r16], &(0x7f00000004c0)=[{0x1, 0x2, 0xa, 0xc}, {0x4, 0x3, 0x8, 0x8}], 0x10, 0x9}, 0x94) 1.932985853s ago: executing program 1 (id=7015): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000f00)=0x196, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) recvmmsg(r2, &(0x7f000000a000)=[{{0x0, 0x3e00, 0x0}, 0x4}], 0x1, 0x12000, 0x0) 1.836971762s ago: executing program 1 (id=7018): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 1.791222855s ago: executing program 3 (id=7019): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@gettaction={0x38, 0x32, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1110000000000000af0c7a0002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000004b, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f00000000c0)="e5645de1ce1abe1e6c1e2c8581fb757ef49c978f6b2275febc6a61f89272589940d6d3fbf0a0f43bf674ada9a3f65523bb625b3407d32fc06aa7ace6f137c5c71bfcd3fa348e072b8f0c79b0ee30a9bfe513919269599e0dc78d8e9bdcec1c8d9b5627eb358186f892f5300ac4ba1a7857", 0x71}, {&(0x7f00000013c0)="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", 0x18c}, {&(0x7f0000000e80)="e8776b", 0x3}, {&(0x7f0000000f00)="8ca1f5715eb42cc4c4c2cab9ebd612b33393a3d35d776f9060fad1b35054c93774a962cbebba05c5fc691dd978343db6534bf50a684913c1dbfd67a96b56c1e5d9aa9a6a942d6e1a2a0d6ba005d9e628f14096166d3eaf00b318656a055c83760edcfd5503589e91aa3b389cf3dd456ca10c7d329d", 0x75}, {&(0x7f0000000f80)="bdf13ad7b53f8e1fd99c2cfdc13f85a65a3dbd557e2a2d05e838cafd5a0662998e0da180fc3bea178dcd947c5e20ca3fea888a1634811540b0d1a2101214d34d655edbe90ebc47c52b3ece499553854154a83db90e41d9ce4a4878c92dc7dc987393d232d14d0724d852220f4e1d36df15ea0b824d141853941ac26edb1ee9c2095ea80cb407aa6dbd5e45e1fca375b6927330500aa67d169d495606bf", 0x9d}, {&(0x7f0000001040)="92dc5e01519daa8919e5e4dd817b7f88f2cfbbf30cdfc4e76cd9e7aa385a24d9252e0c5ef8e0a2a3bac272b535dd8836c65c7c737a6912f316424d54d4d41afb64c5e510dd74eca3a614e405de317e5fb9aaee7f33fdf12de7d5c7ea0428b1226ec17ea00d11611f2053c1185b2a74aab0ae015eb7be9af296cdbc040c5eeb5d337d8ae566d453321bbadfdec3818ae22ab93705f45d726d48db21951f4591baa238fdf106ea45694db9cf5cd3ccc687f1c8fff4085dddbf5945f212a099bf60", 0xc0}, {&(0x7f0000001300)="f5dfbe6576086b619ce29d777e1edd0e", 0x10}, {&(0x7f0000002900)="2451d2d0a95b32c703814cf50d202d4a6075ecfb27099082c76ff0582b4030ac43e41d0f59aaa953e663c6aee42a4ae5bbc192dbc0e5865248d74c7fff7d5ee0588ad1ff01c34d83b4ded76e0b89b74aa4a115a765faac45f992ac0097094197cab64e1469018618148c409db9f68a0d1f33b95337fc270dd205a8cbd549f917177a3d4af9b229c0935ee9efd2831df7f4e1591be2", 0x95}, {&(0x7f0000002800)="4a1fd2c052b626fca7a28e38b7898c55f90d14ec5ff17efb0827015c1879c570faeb95d1b76c3df94946f5d4a30f321276a87868ddc65924609261776089058967b36dc55d786a1a6b33feb22366b1db38b5adcb342b9b4e16573b0a67adf4f91099382f9579ea1e2a08b717b442ac3bf782ada732f4429def4021495b6fd08fdce5f0367a46b15dbd3306f6ea3e9cb3c7c72f987509ab37e879b09c4444a2a1d0af34b601db3c9fb9c327d7312c20cc12c1216fc98df741f5caee4b362650193d36bba790af6b169956711777bc8f7bad7817e970b7bddd81c3a56d5b40e3099c8bc95fa6df", 0xe6}], 0xa}}], 0x1, 0x4040010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, 0x0, 0x4000005) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) 1.079760683s ago: executing program 5 (id=7027): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}, 0x48000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x18c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$kcm(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = dup(r2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 1.019327797s ago: executing program 5 (id=7028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="ecffffffa7c304096ee4d04e36"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000080000000000600"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000500)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2e32, 0x3, "90737f0000ffffffffffffffff1e277fffffeb"}) r11 = dup(r10) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0xb86f, 0x10, "8000"}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000100)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r12, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="10810180000000000000000000000009000000000000000100000e220030907865ef83f7775bcf0ddbfa95dc7100e4297b681bd9ed5d1e6f7716fdc67a6967d9817f39d296d8f84500"/87], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 971.970881ms ago: executing program 5 (id=7030): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x8, 0x0, 0x0) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0xc) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r5}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES64=r3, @ANYRES64=r4, @ANYRES16=r6, @ANYRES64=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8, 0x0, 0x8000000000000}, 0x9) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1801, 0x931b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0xc0109207, 0x0) 925.345885ms ago: executing program 3 (id=7032): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="b5ace4c70521b9b4"}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 440.950715ms ago: executing program 5 (id=7034): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) dup(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 433.904925ms ago: executing program 5 (id=7035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 402.038067ms ago: executing program 5 (id=7037): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept(r1, &(0x7f0000001780)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, &(0x7f00000006c0)=0x80) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}}, 0x4000) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000740)=""/4096, 0x1000, 0x0, &(0x7f0000000480)=""/176, 0xb0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001740)='mem_connect\x00', r8}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r9) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r0, &(0x7f0000000200), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000001900)={0x0, 0x8, 0x6, [0xe0fe, 0x4, 0x1c0, 0x8, 0x5, 0x1ff]}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 348.565142ms ago: executing program 2 (id=7039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xc}], 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 309.638555ms ago: executing program 1 (id=7040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}, 0x48000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x18c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$kcm(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = dup(r2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 282.906157ms ago: executing program 1 (id=7042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@gettaction={0x38, 0x32, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x800}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1110000000000000af0c7a0002"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000004b, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = gettid() r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r6, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r8, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001800)="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", 0x1000}, {&(0x7f00000000c0)="e5645de1ce1abe1e6c1e2c8581fb757ef49c978f6b2275febc6a61f89272589940d6d3fbf0a0f43bf674ada9a3f65523bb625b3407d32fc06aa7ace6f137c5c71bfcd3fa348e072b8f0c79b0ee30a9bfe513919269599e0dc78d8e9bdcec1c8d9b5627eb358186f892f5300ac4ba1a7857", 0x71}, {&(0x7f00000013c0)="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", 0x18c}, {&(0x7f0000000e80)="e8776b", 0x3}, {&(0x7f0000000f00)="8ca1f5715eb42cc4c4c2cab9ebd612b33393a3d35d776f9060fad1b35054c93774a962cbebba05c5fc691dd978343db6534bf50a684913c1dbfd67a96b56c1e5d9aa9a6a942d6e1a2a0d6ba005d9e628f14096166d3eaf00b318656a055c83760edcfd5503589e91aa3b389cf3dd456ca10c7d329d", 0x75}, {&(0x7f0000000f80)="bdf13ad7b53f8e1fd99c2cfdc13f85a65a3dbd557e2a2d05e838cafd5a0662998e0da180fc3bea178dcd947c5e20ca3fea888a1634811540b0d1a2101214d34d655edbe90ebc47c52b3ece499553854154a83db90e41d9ce4a4878c92dc7dc987393d232d14d0724d852220f4e1d36df15ea0b824d141853941ac26edb1ee9c2095ea80cb407aa6dbd5e45e1fca375b6927330500aa67d169d495606bf", 0x9d}, {&(0x7f0000001040)="92dc5e01519daa8919e5e4dd817b7f88f2cfbbf30cdfc4e76cd9e7aa385a24d9252e0c5ef8e0a2a3bac272b535dd8836c65c7c737a6912f316424d54d4d41afb64c5e510dd74eca3a614e405de317e5fb9aaee7f33fdf12de7d5c7ea0428b1226ec17ea00d11611f2053c1185b2a74aab0ae015eb7be9af296cdbc040c5eeb5d337d8ae566d453321bbadfdec3818ae22ab93705f45d726d48db21951f4591baa238fdf106ea45694db9cf5cd3ccc687f1c8fff4085dddbf5945f212a099bf60", 0xc0}, {&(0x7f0000001300)="f5dfbe6576086b619ce29d777e1edd0e", 0x10}, {&(0x7f0000002900)="2451d2d0a95b32c703814cf50d202d4a6075ecfb27099082c76ff0582b4030ac43e41d0f59aaa953e663c6aee42a4ae5bbc192dbc0e5865248d74c7fff7d5ee0588ad1ff01c34d83b4ded76e0b89b74aa4a115a765faac45f992ac0097094197cab64e1469018618148c409db9f68a0d1f33b95337fc270dd205a8cbd549f917177a3d4af9b229c0935ee9efd2831df7f4e1591be2", 0x95}, {&(0x7f0000002800)="4a1fd2c052b626fca7a28e38b7898c55f90d14ec5ff17efb0827015c1879c570faeb95d1b76c3df94946f5d4a30f321276a87868ddc65924609261776089058967b36dc55d786a1a6b33feb22366b1db38b5adcb342b9b4e16573b0a67adf4f91099382f9579ea1e2a08b717b442ac3bf782ada732f4429def4021495b6fd08fdce5f0367a46b15dbd3306f6ea3e9cb3c7c72f987509ab37e879b09c4444a2a1d0af34b601db3c9fb9c327d7312c20cc12c1216fc98df741f5caee4b362650193d36bba790af6b169956711777bc8f7bad7817e970b7bddd81c3a56d5b40e3099c8bc95fa6df", 0xe6}], 0xa}}], 0x1, 0x4040010) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, 0x0, 0x4000005) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) 264.197809ms ago: executing program 7 (id=7043): connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100"], 0x88}}, 0x0) 209.068163ms ago: executing program 7 (id=7044): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) r0 = memfd_secret(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) close(r0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f0000000080)="046538eca259f875f34a3f224e64473a081fb8e0876ca1c8c1b036ff4b087c871bb0b01e3d46e0a34eeac3f7e69dd5b6afdecf5341e4187dc0c9fe899336d08c58f577d1a1e0b4a537c50cb73c4cc33e598cfbe80548e120", &(0x7f0000000100)=""/47, &(0x7f0000000200)="4f2e4ce87dc395cc3f4a15e51bb594882b3d4a060084123a84f74e45f55f2730c5c1fa9ce6663d7c7393344cb1a92cf99266b12e0291222662b83b506b84079a10bd02680ad61f1ce3954b41a9f990cdd8f67e66be4ae9d5e5d0629cb98cb00dbc559d47fb8bf4a7e978b32b96b3ea3fde06c2b44e3ddc9b4cc68d8a5a1c8c9bed2afe62006e4fbde5671e1a4d005ffd3828d212425e0fd027be3e7f0e656fd2", &(0x7f00000002c0)="1d33cba13e3ec5f1abe3d33b1c545e0fb413abdef7b3cfc4b16ed79775579bfad707d541ba6d9661448bb1199897be9dc713a5e0ac6bfa80398c1efcb900df308e2c63c6d803fa502d99f378f47a52f881677662702a97f243bcf6af434918aab1de1a3428d7bb9b098349fe0b1ba0ba6fb533d4efbe509c5ae5376afdcc7a238a9cc1736bf0e08d5658ffd0be67d3f09b9ea07e48ed0eacb193890789623052031939fc751d1b8a97d4c053489d891996a907cdd894bd12010308067efde53c9d3100cd6694b9c84a1ee0f5a2b6c6643a42edbaf6563ca2958d0e0c190e3e908de163", 0x2, r3}, 0x38) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000000)=""/48, 0x30) ioctl$VFAT_IOCTL_READDIR_BOTH(r4, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 204.112013ms ago: executing program 7 (id=7045): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') 200.061834ms ago: executing program 2 (id=7046): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4000080) 176.962086ms ago: executing program 2 (id=7047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 176.490146ms ago: executing program 7 (id=7048): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000015000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) munlockall() r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x20) 167.277816ms ago: executing program 2 (id=7049): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b0001006970766c616e00000c0002800600010003"], 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfbe, 0x4, @perf_config_ext={0x8002, 0x5}, 0x1205, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) (async) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 112.846331ms ago: executing program 7 (id=7050): getpid() (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r1) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000002c0), 0x1008008, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB='dno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1, 0x4) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x20200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x40010) (async) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0005}]}) (async, rerun: 64) syz_open_dev$sg(&(0x7f0000000240), 0x10000007, 0x10100) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) (async, rerun: 64) open(&(0x7f00000000c0)='.\x00', 0x101400, 0x0) (async, rerun: 64) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r6, &(0x7f0000000180)='./bus\x00', 0x100, &(0x7f0000001dc0)={0x3, 0x0, 0xe0000}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) (rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newqdisc={0x190, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0x4, 0x9, 0x80000001, 0x31, 0x4, 0xfc, 0x20, 0x0, {0x0, 0x0, 0x5, 0x6539, 0x3}}}}, @TCA_STAB={0xc4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xc5, 0x2, 0x1, 0xb411ccf6572159d8, 0x1000, 0x8, 0x7}}, {0x12, 0x2, [0x0, 0x3, 0x8, 0x1, 0x400, 0xca87, 0xa]}}, {{0x1c, 0x1, {0x4, 0x5a, 0x7, 0x800, 0x1, 0x4, 0x7, 0x3}}, {0xa, 0x2, [0x1, 0x7, 0x2]}}, {{0x1c, 0x1, {0x5, 0x5, 0x6, 0x12000000, 0x0, 0x4, 0x7, 0x9}}, {0x16, 0x2, [0xba2, 0x0, 0x3, 0x4, 0x8944, 0x0, 0x2, 0xb, 0x0]}}, {{0x1c, 0x1, {0x8, 0x1, 0x7, 0x3, 0xdf0d38cf64b4d87b, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x0, 0x6, 0x5, 0x3, 0x5be, 0x7, 0x2, 0x200, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x23}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x2, 0x5, 0x2, 0x0, 0x3ff, 0x7}}, {0x12, 0x2, [0x0, 0x200, 0x8, 0x90, 0x0, 0x1, 0xf]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x190}}, 0x44006) (async) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x4100000000000000) 112.566221ms ago: executing program 7 (id=7051): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 78.596463ms ago: executing program 3 (id=7052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1}, 0x48000) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000bc0)={0x18c, r1, 0x0, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) sendmsg$kcm(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_raw(0x1d, 0x3, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = dup(r2) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 53.501446ms ago: executing program 3 (id=7053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="ecffffffa7c304096ee4d04e36"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000080000000000600"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000500)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESOCT=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r10, 0x5403, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2e32, 0x3, "90737f0000ffffffffffffffff1e277fffffeb"}) r11 = dup(r10) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000080)={0x4000, 0x2, 0x0, 0xb86f, 0x10, "8000"}) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000100)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r12, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc680000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003c0003803800008008000340000000022c0007800a0001006c696d69740000001c0002800c00024000000000000000050c000140000000000000000414000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 28.503218ms ago: executing program 3 (id=7054): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001040)=[{{&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48014) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r6, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000180)={0xd, 0x8, 0xfffffffc, 0xb6b, 0x4, "aa00003986b9ee6bd231334c1a280d7ea400"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48198, 0x800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pimreg0\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={r1, 0x160}, 0x8) 623.37µs ago: executing program 2 (id=7055): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x7, 0x0, 0x0, 0x0, 0x100, 0x70230, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfff, 0x8000000000000001}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=7056): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nojournal_checksum}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x1, 0xa8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="18", 0x1) tee(r0, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x101880}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000203010800000000000000000700003508000100c77b6628"], 0x1c}, 0x1, 0x0, 0x0, 0x400c8c0}, 0x20000810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = fcntl$dupfd(r8, 0x0, r8) write$tun(r9, &(0x7f0000000400)=ANY=[], 0xa2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@deltaction={0x60, 0x31, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x4}]}, 0x60}}, 0x200440c4) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000004c0)=ANY=[@ANYRES64=r11, @ANYRESHEX=r11], &(0x7f0000000440)='GPL\x00', 0xd6c3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380), 0x13f, 0x9}}, 0x20) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 397.278534][ T2701] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.287238][ T2701] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.317911][T21352] loop6: detected capacity change from 0 to 512 [ 397.325648][T21352] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 397.340135][T21352] EXT4-fs (loop6): 1 truncate cleaned up [ 397.543888][T21381] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6427'. [ 397.557217][T21381] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.625471][T21381] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.685563][T21381] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.735591][T21381] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.779649][T11333] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.790992][T11333] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.804866][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.818261][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.863740][T21398] FAULT_INJECTION: forcing a failure. [ 397.863740][T21398] name failslab, interval 1, probability 0, space 0, times 0 [ 397.876730][T21398] CPU: 1 UID: 0 PID: 21398 Comm: syz.3.6433 Not tainted syzkaller #0 PREEMPT(voluntary) [ 397.876746][T21398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.876751][T21398] Call Trace: [ 397.876756][T21398] [ 397.876760][T21398] __dump_stack+0x1d/0x30 [ 397.876773][T21398] dump_stack_lvl+0xe8/0x140 [ 397.876783][T21398] dump_stack+0x15/0x1b [ 397.876791][T21398] should_fail_ex+0x265/0x280 [ 397.876802][T21398] ? hugetlb_reserve_pages+0x393/0xc00 [ 397.876812][T21398] should_failslab+0x8c/0xb0 [ 397.876824][T21398] __kmalloc_cache_noprof+0x4c/0x320 [ 397.876839][T21398] hugetlb_reserve_pages+0x393/0xc00 [ 397.876852][T21398] hugetlbfs_file_mmap+0x27e/0x340 [ 397.876865][T21398] mmap_region+0xfb0/0x1630 [ 397.876888][T21398] do_mmap+0x9b3/0xbe0 [ 397.876904][T21398] vm_mmap_pgoff+0x17a/0x2e0 [ 397.876919][T21398] ksys_mmap_pgoff+0x2d0/0x310 [ 397.876934][T21398] x64_sys_call+0x14a3/0x2ff0 [ 397.876945][T21398] do_syscall_64+0xd2/0x200 [ 397.876958][T21398] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 397.876976][T21398] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 397.876988][T21398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.876998][T21398] RIP: 0033:0x7f80a295ebe9 [ 397.877007][T21398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.877016][T21398] RSP: 002b:00007f80a13c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 397.877033][T21398] RAX: ffffffffffffffda RBX: 00007f80a2b85fa0 RCX: 00007f80a295ebe9 [ 397.877040][T21398] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 397.877046][T21398] RBP: 00007f80a13c7090 R08: ffffffffffffffff R09: 0000000000000000 [ 397.877053][T21398] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002 [ 397.877059][T21398] R13: 00007f80a2b86038 R14: 00007f80a2b85fa0 R15: 00007ffc6af85f38 [ 397.877069][T21398] [ 397.877073][T21398] HugeTLB: unable to allocate vma specific lock [ 398.095782][T21404] loop6: detected capacity change from 0 to 512 [ 398.107761][T21404] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 398.123026][T21404] EXT4-fs (loop6): mount failed [ 398.148839][T21411] loop6: detected capacity change from 0 to 512 [ 398.156454][T21411] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 398.174831][T21411] EXT4-fs (loop6): 1 truncate cleaned up [ 398.181276][T21411] EXT4-fs mount: 6 callbacks suppressed [ 398.181292][T21411] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.293754][T21415] FAULT_INJECTION: forcing a failure. [ 398.293754][T21415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.307009][T21415] CPU: 1 UID: 0 PID: 21415 Comm: syz.6.6438 Not tainted syzkaller #0 PREEMPT(voluntary) [ 398.307100][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 398.307114][T21415] Call Trace: [ 398.307122][T21415] [ 398.307131][T21415] __dump_stack+0x1d/0x30 [ 398.307213][T21415] dump_stack_lvl+0xe8/0x140 [ 398.307234][T21415] dump_stack+0x15/0x1b [ 398.307252][T21415] should_fail_ex+0x265/0x280 [ 398.307301][T21415] should_fail+0xb/0x20 [ 398.307320][T21415] should_fail_usercopy+0x1a/0x20 [ 398.307344][T21415] _copy_from_user+0x1c/0xb0 [ 398.307381][T21415] memdup_user+0x5e/0xd0 [ 398.307407][T21415] strndup_user+0x68/0xb0 [ 398.307499][T21415] perf_uprobe_init+0x48/0x150 [ 398.307529][T21415] perf_uprobe_event_init+0xc4/0x140 [ 398.307558][T21415] perf_try_init_event+0xd9/0x540 [ 398.307634][T21415] ? perf_event_alloc+0xb1c/0x1740 [ 398.307710][T21415] perf_event_alloc+0xb27/0x1740 [ 398.307748][T21415] __se_sys_perf_event_open+0x615/0x11c0 [ 398.307777][T21415] ? __rcu_read_unlock+0x4f/0x70 [ 398.307806][T21415] __x64_sys_perf_event_open+0x67/0x80 [ 398.307901][T21415] x64_sys_call+0x7bd/0x2ff0 [ 398.307922][T21415] do_syscall_64+0xd2/0x200 [ 398.307954][T21415] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 398.307980][T21415] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 398.308048][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.308110][T21415] RIP: 0033:0x7f8a35b3ebe9 [ 398.308128][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.308221][T21415] RSP: 002b:00007f8a34586038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 398.308243][T21415] RAX: ffffffffffffffda RBX: 00007f8a35d66090 RCX: 00007f8a35b3ebe9 [ 398.308257][T21415] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 398.308271][T21415] RBP: 00007f8a34586090 R08: 0000000000000000 R09: 0000000000000000 [ 398.308284][T21415] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 398.308298][T21415] R13: 00007f8a35d66128 R14: 00007f8a35d66090 R15: 00007ffc32633038 [ 398.308386][T21415] [ 398.661603][T21422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6440'. [ 398.987615][T12580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.086307][T21439] loop2: detected capacity change from 0 to 512 [ 399.114451][T21439] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.129485][T21439] EXT4-fs (loop2): mount failed [ 399.141054][T21449] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6451'. [ 399.171003][T21456] loop5: detected capacity change from 0 to 164 [ 399.179370][T21456] Unable to read rock-ridge attributes [ 399.186258][T21449] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.213327][T21461] loop2: detected capacity change from 0 to 512 [ 399.220646][T21461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 399.232075][T21461] EXT4-fs (loop2): 1 truncate cleaned up [ 399.234517][T21449] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.238667][T21461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.274808][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.329312][T21449] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.415003][T21449] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.027406][T21488] loop5: detected capacity change from 0 to 512 [ 400.045513][T21488] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 400.063109][T21492] FAULT_INJECTION: forcing a failure. [ 400.063109][T21492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.065777][T21488] EXT4-fs (loop5): mount failed [ 400.076286][T21492] CPU: 0 UID: 0 PID: 21492 Comm: syz.1.6467 Not tainted syzkaller #0 PREEMPT(voluntary) [ 400.076316][T21492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.076361][T21492] Call Trace: [ 400.076369][T21492] [ 400.076379][T21492] __dump_stack+0x1d/0x30 [ 400.076401][T21492] dump_stack_lvl+0xe8/0x140 [ 400.076421][T21492] dump_stack+0x15/0x1b [ 400.076438][T21492] should_fail_ex+0x265/0x280 [ 400.076538][T21492] should_fail+0xb/0x20 [ 400.076556][T21492] should_fail_usercopy+0x1a/0x20 [ 400.076638][T21492] _copy_to_user+0x20/0xa0 [ 400.076666][T21492] simple_read_from_buffer+0xb5/0x130 [ 400.076688][T21492] proc_fail_nth_read+0x10e/0x150 [ 400.076715][T21492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.076750][T21492] vfs_read+0x1a8/0x770 [ 400.076770][T21492] ? __rcu_read_unlock+0x4f/0x70 [ 400.076792][T21492] ? __fget_files+0x184/0x1c0 [ 400.076842][T21492] ksys_read+0xda/0x1a0 [ 400.076863][T21492] __x64_sys_read+0x40/0x50 [ 400.076885][T21492] x64_sys_call+0x27bc/0x2ff0 [ 400.076905][T21492] do_syscall_64+0xd2/0x200 [ 400.076938][T21492] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 400.076961][T21492] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 400.076986][T21492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.077060][T21492] RIP: 0033:0x7f768c62d5fc [ 400.077077][T21492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.077094][T21492] RSP: 002b:00007f768b08f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.077197][T21492] RAX: ffffffffffffffda RBX: 00007f768c855fa0 RCX: 00007f768c62d5fc [ 400.077210][T21492] RDX: 000000000000000f RSI: 00007f768b08f0a0 RDI: 0000000000000004 [ 400.077230][T21492] RBP: 00007f768b08f090 R08: 0000000000000000 R09: 0000000000000000 [ 400.077242][T21492] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 400.077254][T21492] R13: 00007f768c856038 R14: 00007f768c855fa0 R15: 00007ffd4c4e3c18 [ 400.077274][T21492] [ 400.331338][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 400.331355][ T29] audit: type=1326 audit(400.307:39373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.360780][ T29] audit: type=1326 audit(400.307:39374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.388725][ T29] audit: type=1326 audit(400.307:39375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.391699][T21514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.411912][ T29] audit: type=1326 audit(400.307:39376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.442439][ T29] audit: type=1326 audit(400.307:39377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.465758][ T29] audit: type=1326 audit(400.307:39378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.488792][ T29] audit: type=1326 audit(400.307:39379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f768c62d69f code=0x7ffc0000 [ 400.511669][ T29] audit: type=1326 audit(400.307:39380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.534762][ T29] audit: type=1326 audit(400.307:39381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.557682][ T29] audit: type=1326 audit(400.307:39382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21509 comm="syz.1.6472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 400.669361][T21524] loop5: detected capacity change from 0 to 1024 [ 400.686057][T21524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.707620][T12935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.836475][T21537] loop5: detected capacity change from 0 to 1024 [ 400.844852][T21537] EXT4-fs: Ignoring removed nobh option [ 400.850533][T21537] EXT4-fs: Ignoring removed bh option [ 400.867914][T21537] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.961395][T21543] loop3: detected capacity change from 0 to 128 [ 400.969776][T21543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 400.978422][T21543] System zones: 1-3, 19-19, 35-36 [ 400.984125][T21543] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 401.283452][T19359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 401.305334][T21550] loop3: detected capacity change from 0 to 512 [ 401.317171][T21550] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 401.332274][T21550] EXT4-fs (loop3): mount failed [ 401.662157][T12935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.804380][T21563] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6486'. [ 401.825358][ T79] I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 401.879785][T21567] loop3: detected capacity change from 0 to 2048 [ 401.896681][T21567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.956379][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.975211][T21580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6490'. [ 402.079767][T21586] loop3: detected capacity change from 0 to 1024 [ 402.086655][T21586] EXT4-fs: Ignoring removed nobh option [ 402.092266][T21586] EXT4-fs: Ignoring removed bh option [ 402.125024][T21586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.265017][T11333] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.286705][T21598] loop2: detected capacity change from 0 to 1024 [ 402.309664][T21598] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 402.333546][T11333] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.357768][T11333] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.367696][T11333] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.390781][T21600] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6493'. [ 402.399919][T21600] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6493'. [ 402.412809][T21598] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 402.421125][T21598] EXT4-fs (loop2): orphan cleanup on readonly fs [ 402.428314][T21598] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 402.443192][T21598] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 402.450320][T21598] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6492: Freeing blocks not in datazone - block = 0, count = 4096 [ 402.464277][T21598] EXT4-fs (loop2): 1 orphan inode deleted [ 402.471007][T21598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.616678][T21605] FAULT_INJECTION: forcing a failure. [ 402.616678][T21605] name failslab, interval 1, probability 0, space 0, times 0 [ 402.629446][T21605] CPU: 0 UID: 0 PID: 21605 Comm: syz.6.6496 Not tainted syzkaller #0 PREEMPT(voluntary) [ 402.629569][T21605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.629584][T21605] Call Trace: [ 402.629591][T21605] [ 402.629600][T21605] __dump_stack+0x1d/0x30 [ 402.629676][T21605] dump_stack_lvl+0xe8/0x140 [ 402.629695][T21605] dump_stack+0x15/0x1b [ 402.629780][T21605] should_fail_ex+0x265/0x280 [ 402.629853][T21605] should_failslab+0x8c/0xb0 [ 402.629896][T21605] __kmalloc_noprof+0xa5/0x3e0 [ 402.629922][T21605] ? security_prepare_creds+0x52/0x120 [ 402.629943][T21605] security_prepare_creds+0x52/0x120 [ 402.629996][T21605] prepare_creds+0x34a/0x4c0 [ 402.630099][T21605] lookup_user_key+0x1fa/0xd10 [ 402.630131][T21605] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 402.630189][T21605] __se_sys_request_key+0x174/0x290 [ 402.630208][T21605] ? fput+0x8f/0xc0 [ 402.630315][T21605] __x64_sys_request_key+0x55/0x70 [ 402.630340][T21605] x64_sys_call+0x1d98/0x2ff0 [ 402.630363][T21605] do_syscall_64+0xd2/0x200 [ 402.630460][T21605] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 402.630485][T21605] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 402.630514][T21605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.630537][T21605] RIP: 0033:0x7f8a35b3ebe9 [ 402.630554][T21605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.630591][T21605] RSP: 002b:00007f8a345a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 402.630609][T21605] RAX: ffffffffffffffda RBX: 00007f8a35d65fa0 RCX: 00007f8a35b3ebe9 [ 402.630621][T21605] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 402.630635][T21605] RBP: 00007f8a345a7090 R08: 0000000000000000 R09: 0000000000000000 [ 402.630715][T21605] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 402.630729][T21605] R13: 00007f8a35d66038 R14: 00007f8a35d65fa0 R15: 00007ffc32633038 [ 402.630747][T21605] [ 402.632069][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.648098][T21607] loop6: detected capacity change from 0 to 512 [ 402.855327][T21607] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 402.870604][T21607] EXT4-fs (loop6): mount failed [ 402.969508][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.040086][T21633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.148860][T21651] loop2: detected capacity change from 0 to 164 [ 403.174854][T21651] Unable to read rock-ridge attributes [ 403.209966][T21665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.217246][T21665] IPv6: NLM_F_CREATE should be set when creating new route [ 403.224590][T21665] IPv6: NLM_F_CREATE should be set when creating new route [ 403.231422][T21668] loop6: detected capacity change from 0 to 512 [ 403.231960][T21665] IPv6: NLM_F_CREATE should be set when creating new route [ 403.255650][T21668] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 403.272748][T21668] EXT4-fs (loop6): mount failed [ 403.670174][T21697] loop5: detected capacity change from 0 to 164 [ 403.677494][T21697] Unable to read rock-ridge attributes [ 403.984340][T21700] loop2: detected capacity change from 0 to 512 [ 403.995184][T21700] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.015972][T21700] EXT4-fs (loop2): mount failed [ 404.056536][T21708] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.063862][T21708] IPv6: NLM_F_CREATE should be set when creating new route [ 404.071091][T21708] IPv6: NLM_F_CREATE should be set when creating new route [ 404.078272][T21708] IPv6: NLM_F_CREATE should be set when creating new route [ 404.237624][T21717] loop6: detected capacity change from 0 to 128 [ 404.262229][T21717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 404.277994][T21717] System zones: 1-3, 19-19, 35-36 [ 404.284717][T21717] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 404.355179][T21737] loop3: detected capacity change from 0 to 512 [ 404.365176][T21737] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.380052][T21737] EXT4-fs (loop3): mount failed [ 404.418574][T21743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.496069][T12580] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.682663][T21765] loop6: detected capacity change from 0 to 512 [ 404.696218][T21765] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 404.711262][T21765] EXT4-fs (loop6): mount failed [ 405.375134][T21788] loop3: detected capacity change from 0 to 128 [ 405.391635][T21788] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 405.401801][T21788] System zones: 1-3, 19-19, 35-36 [ 405.407799][T21788] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 405.429251][T21793] loop5: detected capacity change from 0 to 512 [ 405.445986][ T29] kauditd_printk_skb: 947 callbacks suppressed [ 405.446006][ T29] audit: type=1326 audit(405.427:40323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.446525][T21793] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 405.485898][ T29] audit: type=1326 audit(405.467:40324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.487646][T21793] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 405.509008][ T29] audit: type=1326 audit(405.467:40325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.549502][T21793] EXT4-fs (loop5): mount failed [ 405.555964][ T29] audit: type=1326 audit(405.467:40326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.610742][ T29] audit: type=1326 audit(405.587:40327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f80a28fade9 code=0x7ffc0000 [ 405.613970][T21798] loop2: detected capacity change from 0 to 164 [ 405.633815][ T29] audit: type=1326 audit(405.587:40328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.633853][ T29] audit: type=1326 audit(405.587:40329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21787 comm="syz.3.6567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 405.710083][T21798] Unable to read rock-ridge attributes [ 405.716400][T19359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.730964][ T29] audit: type=1326 audit(405.707:40330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 405.754212][ T29] audit: type=1326 audit(405.707:40331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21797 comm="syz.2.6570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 405.848840][T21816] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6577'. [ 405.862012][T21816] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.929584][T21820] loop6: detected capacity change from 0 to 1024 [ 405.965378][T21820] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.996825][T21820] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 406.005156][T21820] EXT4-fs (loop6): orphan cleanup on readonly fs [ 406.012269][T21820] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 406.027004][T21820] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 406.039744][T21820] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.6571: Freeing blocks not in datazone - block = 0, count = 4096 [ 406.053635][T21820] EXT4-fs (loop6): 1 orphan inode deleted [ 406.060147][T21820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 406.189327][T21816] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.275454][T21816] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.325443][T21816] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.379270][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.390299][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.401647][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.412398][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.523622][T12580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.566438][T21838] FAULT_INJECTION: forcing a failure. [ 406.566438][T21838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.579722][T21838] CPU: 1 UID: 0 PID: 21838 Comm: syz.6.6583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 406.579760][T21838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.579771][T21838] Call Trace: [ 406.579777][T21838] [ 406.579784][T21838] __dump_stack+0x1d/0x30 [ 406.579804][T21838] dump_stack_lvl+0xe8/0x140 [ 406.579823][T21838] dump_stack+0x15/0x1b [ 406.579910][T21838] should_fail_ex+0x265/0x280 [ 406.579933][T21838] should_fail+0xb/0x20 [ 406.579954][T21838] should_fail_usercopy+0x1a/0x20 [ 406.579980][T21838] _copy_from_user+0x1c/0xb0 [ 406.580060][T21838] ___sys_sendmsg+0xc1/0x1d0 [ 406.580093][T21838] __x64_sys_sendmsg+0xd4/0x160 [ 406.580137][T21838] x64_sys_call+0x191e/0x2ff0 [ 406.580194][T21838] do_syscall_64+0xd2/0x200 [ 406.580225][T21838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 406.580261][T21838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 406.580289][T21838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.580376][T21838] RIP: 0033:0x7f8a35b3ebe9 [ 406.580394][T21838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.580412][T21838] RSP: 002b:00007f8a345a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.580480][T21838] RAX: ffffffffffffffda RBX: 00007f8a35d65fa0 RCX: 00007f8a35b3ebe9 [ 406.580495][T21838] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 406.580510][T21838] RBP: 00007f8a345a7090 R08: 0000000000000000 R09: 0000000000000000 [ 406.580523][T21838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.580534][T21838] R13: 00007f8a35d66038 R14: 00007f8a35d65fa0 R15: 00007ffc32633038 [ 406.580552][T21838] [ 406.785780][T21840] loop6: detected capacity change from 0 to 512 [ 406.805289][T21840] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 406.822748][T21840] EXT4-fs (loop6): mount failed [ 406.840047][T21845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.919815][T21859] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6591'. [ 406.932489][ T79] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 406.943298][T21859] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.965434][T21835] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6582'. [ 406.974595][T21835] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6582'. [ 406.998220][T21859] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.066919][T21859] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.126117][T21859] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.183015][ T2701] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.201518][ T2701] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.213077][ T2701] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.228774][ T2701] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.358853][T21899] FAULT_INJECTION: forcing a failure. [ 407.358853][T21899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.372323][T21899] CPU: 0 UID: 0 PID: 21899 Comm: syz.5.6608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 407.372424][T21899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.372438][T21899] Call Trace: [ 407.372445][T21899] [ 407.372454][T21899] __dump_stack+0x1d/0x30 [ 407.372481][T21899] dump_stack_lvl+0xe8/0x140 [ 407.372502][T21899] dump_stack+0x15/0x1b [ 407.372588][T21899] should_fail_ex+0x265/0x280 [ 407.372615][T21899] should_fail+0xb/0x20 [ 407.372641][T21899] should_fail_usercopy+0x1a/0x20 [ 407.372664][T21899] _copy_from_iter+0x254/0xe80 [ 407.372693][T21899] ? __build_skb_around+0x1a0/0x200 [ 407.372741][T21899] ? __alloc_skb+0x223/0x320 [ 407.372766][T21899] netlink_sendmsg+0x471/0x6b0 [ 407.372791][T21899] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.372867][T21899] __sock_sendmsg+0x145/0x180 [ 407.372900][T21899] ____sys_sendmsg+0x31e/0x4e0 [ 407.372929][T21899] ___sys_sendmsg+0x17b/0x1d0 [ 407.372969][T21899] __x64_sys_sendmsg+0xd4/0x160 [ 407.373034][T21899] x64_sys_call+0x191e/0x2ff0 [ 407.373055][T21899] do_syscall_64+0xd2/0x200 [ 407.373085][T21899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 407.373113][T21899] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 407.373203][T21899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.373231][T21899] RIP: 0033:0x7f0b4faaebe9 [ 407.373250][T21899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.373304][T21899] RSP: 002b:00007f0b4e517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.373329][T21899] RAX: ffffffffffffffda RBX: 00007f0b4fcd5fa0 RCX: 00007f0b4faaebe9 [ 407.373342][T21899] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 407.373353][T21899] RBP: 00007f0b4e517090 R08: 0000000000000000 R09: 0000000000000000 [ 407.373365][T21899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.373385][T21899] R13: 00007f0b4fcd6038 R14: 00007f0b4fcd5fa0 R15: 00007ffcfb9f8a78 [ 407.373407][T21899] [ 407.624657][T21904] loop2: detected capacity change from 0 to 512 [ 407.648466][T21904] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 407.665906][T21904] EXT4-fs (loop2): mount failed [ 407.692271][T21915] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6615'. [ 407.715457][ T47] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 407.727785][T21915] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.845380][T21915] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.916126][T21915] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.966083][T21954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6632'. [ 408.036018][T21915] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.057233][T21963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 408.177277][T21975] loop6: detected capacity change from 0 to 164 [ 408.189532][T21975] Unable to read rock-ridge attributes [ 408.223425][T21980] loop3: detected capacity change from 0 to 512 [ 408.230327][T21980] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 408.241688][T21980] EXT4-fs (loop3): 1 truncate cleaned up [ 408.247681][T21980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.269991][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.325121][T21987] loop3: detected capacity change from 0 to 128 [ 408.334435][T21987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 408.350290][T21987] System zones: 1-3, 19-19, 35-36 [ 408.356036][T21987] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 408.537963][T19359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.057671][T22054] FAULT_INJECTION: forcing a failure. [ 409.057671][T22054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.070838][T22054] CPU: 0 UID: 0 PID: 22054 Comm: syz.6.6672 Not tainted syzkaller #0 PREEMPT(voluntary) [ 409.070914][T22054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.070925][T22054] Call Trace: [ 409.070931][T22054] [ 409.070939][T22054] __dump_stack+0x1d/0x30 [ 409.071036][T22054] dump_stack_lvl+0xe8/0x140 [ 409.071054][T22054] dump_stack+0x15/0x1b [ 409.071069][T22054] should_fail_ex+0x265/0x280 [ 409.071090][T22054] should_fail+0xb/0x20 [ 409.071117][T22054] should_fail_usercopy+0x1a/0x20 [ 409.071161][T22054] _copy_from_iter+0xd2/0xe80 [ 409.071185][T22054] ? __build_skb_around+0x1a0/0x200 [ 409.071291][T22054] ? __alloc_skb+0x223/0x320 [ 409.071309][T22054] netlink_sendmsg+0x471/0x6b0 [ 409.071336][T22054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.071412][T22054] __sock_sendmsg+0x145/0x180 [ 409.071506][T22054] ____sys_sendmsg+0x31e/0x4e0 [ 409.071532][T22054] ___sys_sendmsg+0x17b/0x1d0 [ 409.071571][T22054] __x64_sys_sendmsg+0xd4/0x160 [ 409.071611][T22054] x64_sys_call+0x191e/0x2ff0 [ 409.071694][T22054] do_syscall_64+0xd2/0x200 [ 409.071721][T22054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 409.071758][T22054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 409.071786][T22054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.071882][T22054] RIP: 0033:0x7f8a35b3ebe9 [ 409.071899][T22054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.071919][T22054] RSP: 002b:00007f8a345a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.071941][T22054] RAX: ffffffffffffffda RBX: 00007f8a35d65fa0 RCX: 00007f8a35b3ebe9 [ 409.071954][T22054] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 409.071968][T22054] RBP: 00007f8a345a7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.072052][T22054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.072136][T22054] R13: 00007f8a35d66038 R14: 00007f8a35d65fa0 R15: 00007ffc32633038 [ 409.072158][T22054] [ 409.364012][T22073] loop5: detected capacity change from 0 to 164 [ 409.371369][T22073] Unable to read rock-ridge attributes [ 409.456295][T22085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 409.497075][T22089] FAULT_INJECTION: forcing a failure. [ 409.497075][T22089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.510173][T22089] CPU: 0 UID: 0 PID: 22089 Comm: syz.1.6686 Not tainted syzkaller #0 PREEMPT(voluntary) [ 409.510206][T22089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.510217][T22089] Call Trace: [ 409.510225][T22089] [ 409.510232][T22089] __dump_stack+0x1d/0x30 [ 409.510256][T22089] dump_stack_lvl+0xe8/0x140 [ 409.510346][T22089] dump_stack+0x15/0x1b [ 409.510365][T22089] should_fail_ex+0x265/0x280 [ 409.510389][T22089] should_fail+0xb/0x20 [ 409.510406][T22089] should_fail_usercopy+0x1a/0x20 [ 409.510426][T22089] _copy_to_user+0x20/0xa0 [ 409.510535][T22089] simple_read_from_buffer+0xb5/0x130 [ 409.510560][T22089] proc_fail_nth_read+0x10e/0x150 [ 409.510591][T22089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.510664][T22089] vfs_read+0x1a8/0x770 [ 409.510688][T22089] ? __rcu_read_unlock+0x4f/0x70 [ 409.510712][T22089] ? __fget_files+0x184/0x1c0 [ 409.510740][T22089] ksys_read+0xda/0x1a0 [ 409.510761][T22089] __x64_sys_read+0x40/0x50 [ 409.510829][T22089] x64_sys_call+0x27bc/0x2ff0 [ 409.510853][T22089] do_syscall_64+0xd2/0x200 [ 409.510938][T22089] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 409.510963][T22089] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 409.510987][T22089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.511007][T22089] RIP: 0033:0x7f768c62d5fc [ 409.511028][T22089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 409.511048][T22089] RSP: 002b:00007f768b08f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.511073][T22089] RAX: ffffffffffffffda RBX: 00007f768c855fa0 RCX: 00007f768c62d5fc [ 409.511086][T22089] RDX: 000000000000000f RSI: 00007f768b08f0a0 RDI: 0000000000000004 [ 409.511097][T22089] RBP: 00007f768b08f090 R08: 0000000000000000 R09: 0000000000000000 [ 409.511111][T22089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.511123][T22089] R13: 00007f768c856038 R14: 00007f768c855fa0 R15: 00007ffd4c4e3c18 [ 409.511142][T22089] [ 409.749599][T22097] loop3: detected capacity change from 0 to 512 [ 409.756657][T22097] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 409.770615][T22097] EXT4-fs (loop3): 1 truncate cleaned up [ 409.777303][T22097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.804642][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.155778][T22106] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6693'. [ 410.165024][T22106] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6693'. [ 410.175808][T22106] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 410.175808][T22106] program syz.1.6693 not setting count and/or reply_len properly [ 410.266132][T22119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.303092][T22125] loop6: detected capacity change from 0 to 164 [ 410.309795][T22125] iso9660: Unknown parameter 'syzkaller' [ 410.321923][T22125] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6701'. [ 410.331041][T22125] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6701'. [ 410.371968][T22125] bond1: entered promiscuous mode [ 410.377245][T22125] bond1: entered allmulticast mode [ 410.391681][T22125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.405767][T22125] bond1 (unregistering): Released all slaves [ 410.498785][ T29] kauditd_printk_skb: 968 callbacks suppressed [ 410.498802][ T29] audit: type=1400 audit(410.477:41297): avc: denied { read } for pid=22134 comm="syz.1.6704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 410.586779][ T29] audit: type=1326 audit(410.567:41298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.5.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0b4fa4ade9 code=0x7ffc0000 [ 410.609858][ T29] audit: type=1326 audit(410.567:41299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.5.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4faaebe9 code=0x7ffc0000 [ 410.632835][ T29] audit: type=1326 audit(410.567:41300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22131 comm="syz.5.6703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4faaebe9 code=0x7ffc0000 [ 410.709380][ T29] audit: type=1326 audit(410.687:41301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.745370][ T29] audit: type=1326 audit(410.707:41302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.768620][ T29] audit: type=1326 audit(410.707:41303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.791795][ T29] audit: type=1326 audit(410.707:41304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.814880][ T29] audit: type=1326 audit(410.707:41305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.837930][ T29] audit: type=1326 audit(410.707:41306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22143 comm="syz.3.6707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f80a295ebe9 code=0x7ffc0000 [ 410.873650][T13432] bond0: (slave syz_tun): Releasing backup interface [ 410.932406][T22146] lo speed is unknown, defaulting to 1000 [ 410.948414][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.992192][T22146] chnl_net:caif_netlink_parms(): no params data found [ 411.004291][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.036326][T22146] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.043436][T22146] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.050735][T22146] bridge_slave_0: entered allmulticast mode [ 411.057395][T22146] bridge_slave_0: entered promiscuous mode [ 411.064221][T22146] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.071301][T22146] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.078489][T22146] bridge_slave_1: entered allmulticast mode [ 411.084777][T22146] bridge_slave_1: entered promiscuous mode [ 411.091681][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.112147][T22146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.122436][T22146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.140738][T22146] team0: Port device team_slave_0 added [ 411.147780][T22146] team0: Port device team_slave_1 added [ 411.159584][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.176062][T22146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.183235][T22146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.209145][T22146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.220389][T22146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.227395][T22146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.253449][T22146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.283366][T22146] hsr_slave_0: entered promiscuous mode [ 411.291711][T22146] hsr_slave_1: entered promiscuous mode [ 411.297836][T22146] debugfs: 'hsr0' already exists in 'hsr' [ 411.303615][T22146] Cannot create hsr debugfs directory [ 411.380034][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.397021][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.410032][ T12] bond0 (unregistering): Released all slaves [ 411.419321][ T12] bond1 (unregistering): Released all slaves [ 411.446365][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.481717][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.493514][T22175] loop6: detected capacity change from 0 to 512 [ 411.500582][T22175] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 411.515839][T22162] __nla_validate_parse: 4 callbacks suppressed [ 411.515853][T22162] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6709'. [ 411.521780][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.522139][T22162] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6709'. [ 411.551950][ T12] hsr_slave_0: left promiscuous mode [ 411.555285][T22162] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 411.555285][T22162] program syz.1.6709 not setting count and/or reply_len properly [ 411.560954][T22175] EXT4-fs (loop6): 1 truncate cleaned up [ 411.580232][ T12] hsr_slave_1: left promiscuous mode [ 411.580471][T22175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.585903][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.605198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.615184][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.622660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.630773][T12580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.643402][ T12] veth1_macvtap: left promiscuous mode [ 411.650566][ T12] veth0_macvtap: left promiscuous mode [ 411.659695][ T12] veth1_vlan: left promiscuous mode [ 411.665424][ T12] veth0_vlan: left promiscuous mode [ 411.736089][T22184] loop6: detected capacity change from 0 to 128 [ 411.744368][T22184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 411.757105][T22184] System zones: 1-3, 19-19, 35-36 [ 411.762951][T22184] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 411.793509][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.955023][T12580] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.139488][T22146] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.148377][T22146] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.156942][T22146] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 412.166066][T22146] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.198125][T22146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.211031][T22146] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.220331][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.227437][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.238946][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.246082][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.307928][T22146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.395781][T22225] loop2: detected capacity change from 0 to 512 [ 412.402759][T22225] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 412.413967][T22225] EXT4-fs (loop2): 1 truncate cleaned up [ 412.422815][T22225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.425643][T22146] veth0_vlan: entered promiscuous mode [ 412.448571][T22146] veth1_vlan: entered promiscuous mode [ 412.459767][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.463376][T22146] veth0_macvtap: entered promiscuous mode [ 412.479102][T22146] veth1_macvtap: entered promiscuous mode [ 412.491426][T22146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.503590][T22146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.516454][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.533105][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.542313][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.551450][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.578544][T22236] FAULT_INJECTION: forcing a failure. [ 412.578544][T22236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.591873][T22236] CPU: 1 UID: 0 PID: 22236 Comm: syz.3.6729 Not tainted syzkaller #0 PREEMPT(voluntary) [ 412.591901][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.591941][T22236] Call Trace: [ 412.591947][T22236] [ 412.591955][T22236] __dump_stack+0x1d/0x30 [ 412.591978][T22236] dump_stack_lvl+0xe8/0x140 [ 412.592030][T22236] dump_stack+0x15/0x1b [ 412.592049][T22236] should_fail_ex+0x265/0x280 [ 412.592068][T22236] should_fail+0xb/0x20 [ 412.592084][T22236] should_fail_usercopy+0x1a/0x20 [ 412.592103][T22236] _copy_to_user+0x20/0xa0 [ 412.592129][T22236] __x64_sys_ustat+0xd3/0x120 [ 412.592234][T22236] x64_sys_call+0xc88/0x2ff0 [ 412.592282][T22236] do_syscall_64+0xd2/0x200 [ 412.592384][T22236] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 412.592406][T22236] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 412.592430][T22236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.592452][T22236] RIP: 0033:0x7f80a295ebe9 [ 412.592544][T22236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.592564][T22236] RSP: 002b:00007f80a13c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000088 [ 412.592585][T22236] RAX: ffffffffffffffda RBX: 00007f80a2b85fa0 RCX: 00007f80a295ebe9 [ 412.592599][T22236] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000002 [ 412.592612][T22236] RBP: 00007f80a13c7090 R08: 0000000000000000 R09: 0000000000000000 [ 412.592624][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.592635][T22236] R13: 00007f80a2b86038 R14: 00007f80a2b85fa0 R15: 00007ffc6af85f38 [ 412.592655][T22236] [ 412.777037][T22240] loop5: detected capacity change from 0 to 164 [ 412.786790][T22240] Unable to read rock-ridge attributes [ 412.829854][T22245] sctp: [Deprecated]: syz.3.6732 (pid 22245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.829854][T22245] Use struct sctp_sack_info instead [ 412.977197][T22257] loop3: detected capacity change from 0 to 512 [ 412.987260][T22257] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 412.998520][T22257] EXT4-fs (loop3): 1 truncate cleaned up [ 413.007124][T22257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.034189][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.110555][T22275] loop3: detected capacity change from 0 to 1024 [ 413.118111][T22275] EXT4-fs: Ignoring removed nobh option [ 413.123694][T22275] EXT4-fs: Ignoring removed bh option [ 413.135227][T22275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.320109][T22275] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6743'. [ 413.329235][T22275] netlink: 260 bytes leftover after parsing attributes in process `syz.3.6743'. [ 413.355831][T22275] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 413.355831][T22275] program syz.3.6743 not setting count and/or reply_len properly [ 413.400072][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6746'. [ 413.427278][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.497622][T22290] loop3: detected capacity change from 0 to 128 [ 413.505557][T22290] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 413.513563][T22290] System zones: 1-3, 19-19, 35-36 [ 413.519252][T22290] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 413.551247][T22294] loop2: detected capacity change from 0 to 512 [ 413.559939][T22294] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 413.571039][T22294] EXT4-fs (loop2): 1 truncate cleaned up [ 413.578942][T22294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.606163][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.706233][T22305] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6752'. [ 413.719570][T19359] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.808471][T22315] loop2: detected capacity change from 0 to 1024 [ 413.815408][T22315] EXT4-fs: Ignoring removed nobh option [ 413.821012][T22315] EXT4-fs: Ignoring removed bh option [ 413.846888][T22315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.860908][T22320] FAULT_INJECTION: forcing a failure. [ 413.860908][T22320] name failslab, interval 1, probability 0, space 0, times 0 [ 413.873646][T22320] CPU: 0 UID: 0 PID: 22320 Comm: syz.6.6758 Not tainted syzkaller #0 PREEMPT(voluntary) [ 413.873662][T22320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.873668][T22320] Call Trace: [ 413.873672][T22320] [ 413.873676][T22320] __dump_stack+0x1d/0x30 [ 413.873712][T22320] dump_stack_lvl+0xe8/0x140 [ 413.873721][T22320] dump_stack+0x15/0x1b [ 413.873730][T22320] should_fail_ex+0x265/0x280 [ 413.873740][T22320] should_failslab+0x8c/0xb0 [ 413.873829][T22320] __kmalloc_noprof+0xa5/0x3e0 [ 413.873842][T22320] ? io_cache_alloc_new+0x2a/0xb0 [ 413.873856][T22320] io_cache_alloc_new+0x2a/0xb0 [ 413.873912][T22320] io_rsrc_node_alloc+0x97/0xf0 [ 413.873937][T22320] io_register_clone_buffers+0x61d/0x780 [ 413.873965][T22320] __se_sys_io_uring_register+0x733/0xeb0 [ 413.874028][T22320] ? fput+0x8f/0xc0 [ 413.874049][T22320] ? ksys_write+0x192/0x1a0 [ 413.874067][T22320] __x64_sys_io_uring_register+0x55/0x70 [ 413.874088][T22320] x64_sys_call+0x18a3/0x2ff0 [ 413.874185][T22320] do_syscall_64+0xd2/0x200 [ 413.874206][T22320] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 413.874232][T22320] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 413.874380][T22320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.874398][T22320] RIP: 0033:0x7f8a35b3ebe9 [ 413.874411][T22320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.874427][T22320] RSP: 002b:00007f8a34586038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 413.874476][T22320] RAX: ffffffffffffffda RBX: 00007f8a35d66090 RCX: 00007f8a35b3ebe9 [ 413.874485][T22320] RDX: 0000200000000000 RSI: 000000000000001e RDI: 0000000000000005 [ 413.874495][T22320] RBP: 00007f8a34586090 R08: 0000000000000000 R09: 0000000000000000 [ 413.874504][T22320] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 413.874513][T22320] R13: 00007f8a35d66128 R14: 00007f8a35d66090 R15: 00007ffc32633038 [ 413.874527][T22320] [ 414.170482][T22324] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6757'. [ 414.179647][T22324] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6757'. [ 414.202489][T22315] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 414.202489][T22315] program syz.2.6757 not setting count and/or reply_len properly [ 414.353016][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.437472][T22335] loop2: detected capacity change from 0 to 512 [ 414.445489][T22335] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.469187][T22335] EXT4-fs (loop2): 1 truncate cleaned up [ 414.475327][T22335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.501426][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.669739][T22349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6767'. [ 414.739694][T22354] loop2: detected capacity change from 0 to 512 [ 414.747973][T22354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 414.772753][T22354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 414.861365][T22364] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6770'. [ 414.896255][T22364] loop6: detected capacity change from 0 to 1024 [ 414.910437][T22364] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.6770: Failed to acquire dquot type 0 [ 414.926632][T22364] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 414.955081][T22364] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6770: corrupted inode contents [ 414.967827][T22364] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6770: mark_inode_dirty error [ 414.981408][T22364] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6770: corrupted inode contents [ 414.993817][T22364] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6770: mark_inode_dirty error [ 414.995849][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 415.016922][T22364] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6770: corrupted inode contents [ 415.030648][T22364] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 415.036892][T22372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 415.041202][T22364] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6770: corrupted inode contents [ 415.058812][T22364] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6770: mark_inode_dirty error [ 415.070421][T22364] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 415.080059][T22364] EXT4-fs (loop6): 1 truncate cleaned up [ 415.086310][T22364] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.106400][T22358] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 415.117730][T22358] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 415.141644][T12580] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.147398][T22376] loop2: detected capacity change from 0 to 512 [ 415.250235][T22376] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 415.261630][T22376] EXT4-fs (loop2): 1 truncate cleaned up [ 415.269899][T22376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.302992][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.549283][T22396] loop6: detected capacity change from 0 to 512 [ 415.595205][T22399] loop5: detected capacity change from 0 to 164 [ 415.801695][T22396] EXT4-fs: Mount option(s) incompatible with ext3 [ 415.812403][T22399] Unable to read rock-ridge attributes [ 415.823163][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 415.823180][ T29] audit: type=1326 audit(415.797:41690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.835519][T22396] loop6: detected capacity change from 0 to 512 [ 415.852797][ T29] audit: type=1326 audit(415.797:41691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.882152][ T29] audit: type=1326 audit(415.797:41692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.882179][ T29] audit: type=1326 audit(415.797:41693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.882205][ T29] audit: type=1326 audit(415.797:41694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.882244][ T29] audit: type=1326 audit(415.797:41695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.882271][ T29] audit: type=1326 audit(415.807:41696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.908849][T22396] ext4: Unknown parameter 'euid>00000000000000000000' [ 415.965963][ T29] audit: type=1326 audit(415.837:41697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 415.986465][T22406] loop3: detected capacity change from 0 to 1024 [ 416.002233][ T29] audit: type=1326 audit(415.837:41698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 416.010220][T22406] EXT4-fs: Ignoring removed nobh option [ 416.032153][ T29] audit: type=1326 audit(415.837:41699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22398 comm="syz.5.6782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 416.038531][T22406] EXT4-fs: Ignoring removed bh option [ 416.216975][T22406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.437052][T22406] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 416.437052][T22406] program syz.3.6784 not setting count and/or reply_len properly [ 416.471982][T22425] loop5: detected capacity change from 0 to 512 [ 416.489304][T22425] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 416.714132][T22425] EXT4-fs (loop5): 1 truncate cleaned up [ 416.720187][T22425] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.786684][T19359] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.808759][T22146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.968651][T22431] rdma_op ffff88810e048980 conn xmit_rdma 0000000000000000 [ 417.043310][T22434] __nla_validate_parse: 2 callbacks suppressed [ 417.043362][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'. [ 417.058612][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6789'. [ 417.067752][T22434] netlink: 'syz.3.6789': attribute type 11 has an invalid length. [ 417.404962][T22434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6789'. [ 417.413955][T22434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6789'. [ 417.422899][T22434] netlink: 'syz.3.6789': attribute type 11 has an invalid length. [ 417.513064][T22444] loop5: detected capacity change from 0 to 128 [ 417.537190][T22444] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 417.545217][T22444] FAT-fs (loop5): Filesystem has been set read-only [ 417.552730][T22444] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 417.560898][T22444] bio_check_eod: 102 callbacks suppressed [ 417.560914][T22444] syz.5.6802: attempt to access beyond end of device [ 417.560914][T22444] loop5: rw=2049, sector=2065, nr_sectors = 8 limit=128 [ 417.960148][T22453] loop5: detected capacity change from 0 to 1024 [ 417.980457][T22453] EXT4-fs: Ignoring removed nobh option [ 417.986145][T22453] EXT4-fs: Ignoring removed bh option [ 418.050672][T22453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.086229][T22388] syz.2.6776 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 418.100497][T22388] CPU: 1 UID: 0 PID: 22388 Comm: syz.2.6776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 418.100531][T22388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.100613][T22388] Call Trace: [ 418.100621][T22388] [ 418.100631][T22388] __dump_stack+0x1d/0x30 [ 418.100657][T22388] dump_stack_lvl+0xe8/0x140 [ 418.100680][T22388] dump_stack+0x15/0x1b [ 418.100699][T22388] dump_header+0x81/0x220 [ 418.100790][T22388] oom_kill_process+0x342/0x400 [ 418.100819][T22388] out_of_memory+0x979/0xb80 [ 418.100917][T22388] try_charge_memcg+0x5e6/0x9e0 [ 418.100945][T22388] obj_cgroup_charge_pages+0xa6/0x150 [ 418.100982][T22388] __memcg_kmem_charge_page+0x9f/0x170 [ 418.101012][T22388] __alloc_frozen_pages_noprof+0x188/0x360 [ 418.101088][T22388] alloc_pages_mpol+0xb3/0x250 [ 418.101127][T22388] alloc_pages_noprof+0x90/0x130 [ 418.101181][T22388] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 418.101219][T22388] __kvmalloc_node_noprof+0x30f/0x4e0 [ 418.101295][T22388] ? ip_set_alloc+0x1f/0x30 [ 418.101371][T22388] ? ip_set_alloc+0x1f/0x30 [ 418.101402][T22388] ip_set_alloc+0x1f/0x30 [ 418.101432][T22388] hash_netiface_create+0x282/0x740 [ 418.101539][T22388] ? __pfx_hash_netiface_create+0x10/0x10 [ 418.101572][T22388] ip_set_create+0x3c9/0x960 [ 418.101608][T22388] ? __nla_parse+0x40/0x60 [ 418.101638][T22388] nfnetlink_rcv_msg+0x4c3/0x590 [ 418.101712][T22388] netlink_rcv_skb+0x123/0x220 [ 418.101736][T22388] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 418.101828][T22388] nfnetlink_rcv+0x16b/0x1690 [ 418.101908][T22388] ? nlmon_xmit+0x4f/0x60 [ 418.101949][T22388] ? consume_skb+0x49/0x150 [ 418.101972][T22388] ? nlmon_xmit+0x4f/0x60 [ 418.102003][T22388] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 418.102033][T22388] ? __dev_queue_xmit+0x1200/0x2000 [ 418.102071][T22388] ? __dev_queue_xmit+0x182/0x2000 [ 418.102099][T22388] ? ref_tracker_free+0x37d/0x3e0 [ 418.102138][T22388] ? __netlink_deliver_tap+0x4dc/0x500 [ 418.102240][T22388] netlink_unicast+0x5bd/0x690 [ 418.102273][T22388] netlink_sendmsg+0x58b/0x6b0 [ 418.102361][T22388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.102388][T22388] __sock_sendmsg+0x145/0x180 [ 418.102417][T22388] ____sys_sendmsg+0x31e/0x4e0 [ 418.102439][T22388] ___sys_sendmsg+0x17b/0x1d0 [ 418.102473][T22388] __x64_sys_sendmsg+0xd4/0x160 [ 418.102555][T22388] x64_sys_call+0x191e/0x2ff0 [ 418.102575][T22388] do_syscall_64+0xd2/0x200 [ 418.102608][T22388] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 418.102637][T22388] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 418.102697][T22388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.102717][T22388] RIP: 0033:0x7fe3b284ebe9 [ 418.102733][T22388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.102835][T22388] RSP: 002b:00007fe3b12b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.102860][T22388] RAX: ffffffffffffffda RBX: 00007fe3b2a75fa0 RCX: 00007fe3b284ebe9 [ 418.102876][T22388] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 418.102890][T22388] RBP: 00007fe3b28d1e19 R08: 0000000000000000 R09: 0000000000000000 [ 418.102905][T22388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.102916][T22388] R13: 00007fe3b2a76038 R14: 00007fe3b2a75fa0 R15: 00007ffc1483cb48 [ 418.103013][T22388] [ 418.103020][T22388] memory: usage 307200kB, limit 307200kB, failcnt 597 [ 418.287345][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6795'. [ 418.292003][T22388] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 418.292023][T22388] kmem: usage 303364kB, limit 9007199254740988kB, failcnt 0 [ 418.296848][T22450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6795'. [ 418.301608][T22388] Memory cgroup stats for /syz2: [ 418.302141][T22388] cache 0 [ 418.339245][T22453] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 418.339245][T22453] program syz.5.6795 not setting count and/or reply_len properly [ 418.342157][T22388] rss 3919872 [ 418.498161][T22388] shmem 0 [ 418.501130][T22388] mapped_file 0 [ 418.504729][T22388] dirty 0 [ 418.507732][T22388] writeback 0 [ 418.511018][T22388] workingset_refault_anon 464 [ 418.515716][T22388] workingset_refault_file 891 [ 418.520394][T22388] swap 204800 [ 418.523713][T22388] swapcached 0 [ 418.527147][T22388] pgpgin 257229 [ 418.530592][T22388] pgpgout 256270 [ 418.534130][T22388] pgfault 298057 [ 418.537677][T22388] pgmajfault 106 [ 418.541251][T22388] inactive_anon 0 [ 418.544892][T22388] active_anon 0 [ 418.548351][T22388] inactive_file 3928064 [ 418.552478][T22388] active_file 0 [ 418.555942][T22388] unevictable 0 [ 418.559374][T22388] hierarchical_memory_limit 314572800 [ 418.564773][T22388] hierarchical_memsw_limit 9223372036854771712 [ 418.570977][T22388] total_cache 0 [ 418.574435][T22388] total_rss 3919872 [ 418.578238][T22388] total_shmem 0 [ 418.581754][T22388] total_mapped_file 0 [ 418.585760][T22388] total_dirty 0 [ 418.589289][T22388] total_writeback 0 [ 418.593104][T22388] total_workingset_refault_anon 464 [ 418.598386][T22388] total_workingset_refault_file 891 [ 418.603659][T22388] total_swap 204800 [ 418.607451][T22388] total_swapcached 0 [ 418.611369][T22388] total_pgpgin 257229 [ 418.615427][T22388] total_pgpgout 256270 [ 418.619519][T22388] total_pgfault 298057 [ 418.623569][T22388] total_pgmajfault 106 [ 418.627689][T22388] total_inactive_anon 0 [ 418.631821][T22388] total_active_anon 0 [ 418.635877][T22388] total_inactive_file 3928064 [ 418.640549][T22388] total_active_file 0 [ 418.644630][T22388] total_unevictable 0 [ 418.648590][T22388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.6776,pid=22387,uid=0 [ 418.664023][T22388] Memory cgroup out of memory: Killed process 22387 (syz.2.6776) total-vm:95944kB, anon-rss:4784kB, file-rss:22572kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 419.107979][T22146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.128335][T22473] FAULT_INJECTION: forcing a failure. [ 419.128335][T22473] name failslab, interval 1, probability 0, space 0, times 0 [ 419.141061][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.3.6801 Not tainted syzkaller #0 PREEMPT(voluntary) [ 419.141137][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.141157][T22473] Call Trace: [ 419.141165][T22473] [ 419.141173][T22473] __dump_stack+0x1d/0x30 [ 419.141198][T22473] dump_stack_lvl+0xe8/0x140 [ 419.141218][T22473] dump_stack+0x15/0x1b [ 419.141233][T22473] should_fail_ex+0x265/0x280 [ 419.141318][T22473] should_failslab+0x8c/0xb0 [ 419.141342][T22473] __kvmalloc_node_noprof+0x123/0x4e0 [ 419.141426][T22473] ? io_alloc_cache_init+0x31/0xa0 [ 419.141466][T22473] io_alloc_cache_init+0x31/0xa0 [ 419.141537][T22473] io_ring_ctx_alloc+0x2d8/0x6a0 [ 419.141589][T22473] io_uring_create+0x10f/0x610 [ 419.141624][T22473] __se_sys_io_uring_setup+0x1f7/0x210 [ 419.141650][T22473] __x64_sys_io_uring_setup+0x31/0x40 [ 419.141676][T22473] x64_sys_call+0x2b21/0x2ff0 [ 419.141701][T22473] do_syscall_64+0xd2/0x200 [ 419.141813][T22473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.141835][T22473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 419.141858][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.141877][T22473] RIP: 0033:0x7f80a295ebe9 [ 419.141958][T22473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.141979][T22473] RSP: 002b:00007f80a13c6fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 419.142000][T22473] RAX: ffffffffffffffda RBX: 00007f80a2b85fa0 RCX: 00007f80a295ebe9 [ 419.142012][T22473] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0c [ 419.142024][T22473] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 419.142064][T22473] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 419.142076][T22473] R13: 0000000000000000 R14: 0000000000003c0c R15: 0000000000000000 [ 419.142098][T22473] [ 419.551755][T22471] loop6: detected capacity change from 0 to 128 [ 419.623364][T22471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 419.644045][T22471] System zones: 1-3, 19-19, 35-36 [ 419.649801][T22471] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 419.665451][T22489] FAULT_INJECTION: forcing a failure. [ 419.665451][T22489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.678753][T22489] CPU: 0 UID: 0 PID: 22489 Comm: syz.5.6809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 419.678862][T22489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.678875][T22489] Call Trace: [ 419.678881][T22489] [ 419.678890][T22489] __dump_stack+0x1d/0x30 [ 419.678914][T22489] dump_stack_lvl+0xe8/0x140 [ 419.678973][T22489] dump_stack+0x15/0x1b [ 419.678989][T22489] should_fail_ex+0x265/0x280 [ 419.679012][T22489] should_fail+0xb/0x20 [ 419.679078][T22489] should_fail_usercopy+0x1a/0x20 [ 419.679100][T22489] _copy_to_user+0x20/0xa0 [ 419.679212][T22489] simple_read_from_buffer+0xb5/0x130 [ 419.679237][T22489] proc_fail_nth_read+0x10e/0x150 [ 419.679267][T22489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.679340][T22489] vfs_read+0x1a8/0x770 [ 419.679361][T22489] ? __fput+0x555/0x650 [ 419.679391][T22489] ? __rcu_read_unlock+0x4f/0x70 [ 419.679415][T22489] ? __fget_files+0x184/0x1c0 [ 419.679502][T22489] ksys_read+0xda/0x1a0 [ 419.679526][T22489] __x64_sys_read+0x40/0x50 [ 419.679550][T22489] x64_sys_call+0x27bc/0x2ff0 [ 419.679630][T22489] do_syscall_64+0xd2/0x200 [ 419.679666][T22489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.679691][T22489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 419.679718][T22489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.679762][T22489] RIP: 0033:0x7f1a0d8bd5fc [ 419.679780][T22489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.679866][T22489] RSP: 002b:00007f1a0c327030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.679888][T22489] RAX: ffffffffffffffda RBX: 00007f1a0dae5fa0 RCX: 00007f1a0d8bd5fc [ 419.679933][T22489] RDX: 000000000000000f RSI: 00007f1a0c3270a0 RDI: 0000000000000006 [ 419.679944][T22489] RBP: 00007f1a0c327090 R08: 0000000000000000 R09: 0000000000000000 [ 419.679955][T22489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.680047][T22489] R13: 00007f1a0dae6038 R14: 00007f1a0dae5fa0 R15: 00007fffea2249b8 [ 419.680128][T22489] [ 420.030711][T22505] FAULT_INJECTION: forcing a failure. [ 420.030711][T22505] name failslab, interval 1, probability 0, space 0, times 0 [ 420.043608][T22505] CPU: 0 UID: 0 PID: 22505 Comm: syz.1.6815 Not tainted syzkaller #0 PREEMPT(voluntary) [ 420.043634][T22505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 420.043646][T22505] Call Trace: [ 420.043653][T22505] [ 420.043662][T22505] __dump_stack+0x1d/0x30 [ 420.043684][T22505] dump_stack_lvl+0xe8/0x140 [ 420.043703][T22505] dump_stack+0x15/0x1b [ 420.043718][T22505] should_fail_ex+0x265/0x280 [ 420.043769][T22505] should_failslab+0x8c/0xb0 [ 420.043794][T22505] kmem_cache_alloc_noprof+0x50/0x310 [ 420.043823][T22505] ? audit_log_start+0x365/0x6c0 [ 420.043918][T22505] audit_log_start+0x365/0x6c0 [ 420.043952][T22505] audit_seccomp+0x48/0x100 [ 420.043979][T22505] ? __seccomp_filter+0x68c/0x10d0 [ 420.044043][T22505] __seccomp_filter+0x69d/0x10d0 [ 420.044067][T22505] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 420.044105][T22505] ? vfs_write+0x7e8/0x960 [ 420.044142][T22505] __secure_computing+0x82/0x150 [ 420.044161][T22505] syscall_trace_enter+0xcf/0x1e0 [ 420.044253][T22505] do_syscall_64+0xac/0x200 [ 420.044277][T22505] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 420.044299][T22505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 420.044321][T22505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.044419][T22505] RIP: 0033:0x7f768c62ebe9 [ 420.044435][T22505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.044450][T22505] RSP: 002b:00007f768b08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.044472][T22505] RAX: ffffffffffffffda RBX: 00007f768c855fa0 RCX: 00007f768c62ebe9 [ 420.044486][T22505] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 000000000000000b [ 420.044500][T22505] RBP: 00007f768b08f090 R08: 0000000000000000 R09: 0000000000000000 [ 420.044564][T22505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.044579][T22505] R13: 00007f768c856038 R14: 00007f768c855fa0 R15: 00007ffd4c4e3c18 [ 420.044598][T22505] [ 420.258721][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 420.272696][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6815'. [ 420.284577][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 420.302998][T12580] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 420.319254][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 420.336197][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 420.351402][T12580] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 420.407747][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 420.425909][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 420.440569][T12580] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 420.447997][T22514] lo speed is unknown, defaulting to 1000 [ 420.455807][T12580] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 420.501464][T22515] netlink: 'syz.1.6820': attribute type 12 has an invalid length. [ 420.511351][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6818'. [ 420.538470][T22515] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 420.557065][T22515] syzkaller0: entered promiscuous mode [ 420.562557][T22515] syzkaller0: entered allmulticast mode [ 420.599406][T22520] loop5: detected capacity change from 0 to 1024 [ 420.606338][T22520] EXT4-fs: Ignoring removed nobh option [ 420.612006][T22520] EXT4-fs: Ignoring removed bh option [ 420.683401][T22520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.701373][T22531] loop2: detected capacity change from 0 to 164 [ 420.709975][T22531] Unable to read rock-ridge attributes [ 420.825572][T12580] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 420.888656][T22520] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6822'. [ 420.891333][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 420.891348][ T29] audit: type=1326 audit(420.867:42078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f768c5cade9 code=0x7ffc0000 [ 420.897794][T22520] netlink: 260 bytes leftover after parsing attributes in process `syz.5.6822'. [ 420.936465][ T29] audit: type=1326 audit(420.867:42079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 420.937866][T22520] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 420.937866][T22520] program syz.5.6822 not setting count and/or reply_len properly [ 420.959549][ T29] audit: type=1326 audit(420.877:42080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.1.6827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f768c62ebe9 code=0x7ffc0000 [ 421.023609][T22545] lo speed is unknown, defaulting to 1000 [ 421.049765][T22146] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.112727][ T29] audit: type=1326 audit(421.087:42081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.136203][ T29] audit: type=1326 audit(421.087:42082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.138432][T22545] chnl_net:caif_netlink_parms(): no params data found [ 421.159435][ T29] audit: type=1326 audit(421.087:42083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.202461][ T29] audit: type=1326 audit(421.137:42084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.226116][ T29] audit: type=1326 audit(421.137:42085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.249321][ T29] audit: type=1326 audit(421.137:42086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.272316][ T29] audit: type=1326 audit(421.137:42087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22564 comm="syz.5.6835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0d8bebe9 code=0x7ffc0000 [ 421.309776][T22568] bridge_slave_1: left allmulticast mode [ 421.315565][T22568] bridge_slave_1: left promiscuous mode [ 421.321313][T22568] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.325677][T22573] loop5: detected capacity change from 0 to 512 [ 421.335119][T22573] EXT4-fs: inline encryption not supported [ 421.340978][T22573] ext2: Bad value for 'commit' [ 421.341152][T22568] bridge_slave_0: left allmulticast mode [ 421.351514][T22568] bridge_slave_0: left promiscuous mode [ 421.357258][T22568] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.358626][T22573] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 421.396459][T22573] netlink: '+}[@': attribute type 10 has an invalid length. [ 421.439362][T22573] team0: Port device geneve1 added [ 421.446349][T22545] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.453455][T22545] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.460771][T22545] bridge_slave_0: entered allmulticast mode [ 421.467771][T22545] bridge_slave_0: entered promiscuous mode [ 421.474620][T22545] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.481787][T22545] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.489032][T22545] bridge_slave_1: entered allmulticast mode [ 421.495518][T22545] bridge_slave_1: entered promiscuous mode [ 421.519199][T22545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.538120][T22545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.566296][T22545] team0: Port device team_slave_0 added [ 421.573114][T22545] team0: Port device team_slave_1 added [ 421.590376][T22545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.597524][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.623716][T22545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.635801][T22545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.642998][T22545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.669081][T22545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.689072][T22583] loop2: detected capacity change from 0 to 512 [ 421.708937][T22583] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6848: Failed to acquire dquot type 1 [ 421.720967][T22583] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6848: corrupted inode contents [ 421.723295][T22545] hsr_slave_0: entered promiscuous mode [ 421.735632][T22583] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.6848: mark_inode_dirty error [ 421.739341][T22545] hsr_slave_1: entered promiscuous mode [ 421.757745][T22545] debugfs: 'hsr0' already exists in 'hsr' [ 421.763488][T22545] Cannot create hsr debugfs directory [ 421.769621][T22583] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6848: corrupted inode contents [ 421.785326][T22583] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.6848: mark_inode_dirty error [ 421.799211][T22583] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6848: corrupted inode contents [ 421.811396][T22583] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 421.820268][T22583] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6848: corrupted inode contents [ 421.832574][T22583] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.6848: mark_inode_dirty error [ 421.846716][T22583] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 421.856269][T22583] EXT4-fs (loop2): 1 truncate cleaned up [ 421.862466][T22583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.882176][T22545] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 421.890627][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.891304][T22545] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 421.908649][T22545] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 421.917689][T22545] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 421.973201][T22545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.991288][T22545] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.004303][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.011498][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.038632][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.045813][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.119852][T22545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.271089][T22545] veth0_vlan: entered promiscuous mode [ 422.282184][T22545] veth1_vlan: entered promiscuous mode [ 422.303536][T22545] veth0_macvtap: entered promiscuous mode [ 422.311928][T22545] veth1_macvtap: entered promiscuous mode [ 422.321385][T22625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.326104][T22545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.342076][T22545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.355759][ T2701] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.366892][ T2701] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.380243][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.389790][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.432713][T22631] loop5: detected capacity change from 0 to 164 [ 422.439898][T22631] Unable to read rock-ridge attributes [ 422.631252][T22651] loop3: detected capacity change from 0 to 128 [ 422.639052][T22651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 422.649808][T22651] System zones: 1-3, 19-19, 35-36 [ 422.840127][T22660] __nla_validate_parse: 2 callbacks suppressed [ 422.840143][T22660] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6857'. [ 422.855543][T22660] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6857'. [ 422.867612][T22660] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 422.867612][T22660] program syz.1.6857 not setting count and/or reply_len properly [ 422.931862][T22668] loop2: detected capacity change from 0 to 128 [ 422.941126][T22668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 422.949213][T22668] System zones: 1-3, 19-19, 35-36 [ 423.132003][T22683] program syz.2.6863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.286117][T22691] loop5: detected capacity change from 0 to 512 [ 423.294601][T22691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 423.310129][T22689] loop2: detected capacity change from 0 to 512 [ 423.310434][T22691] EXT4-fs (loop5): 1 truncate cleaned up [ 423.333100][T22689] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz.2.6866: directory missing '..' [ 423.371004][T22698] FAULT_INJECTION: forcing a failure. [ 423.371004][T22698] name failslab, interval 1, probability 0, space 0, times 0 [ 423.383721][T22698] CPU: 1 UID: 0 PID: 22698 Comm: syz.2.6870 Not tainted syzkaller #0 PREEMPT(voluntary) [ 423.383803][T22698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.383818][T22698] Call Trace: [ 423.383825][T22698] [ 423.383834][T22698] __dump_stack+0x1d/0x30 [ 423.383859][T22698] dump_stack_lvl+0xe8/0x140 [ 423.383880][T22698] dump_stack+0x15/0x1b [ 423.383902][T22698] should_fail_ex+0x265/0x280 [ 423.383996][T22698] should_failslab+0x8c/0xb0 [ 423.384019][T22698] kmem_cache_alloc_noprof+0x50/0x310 [ 423.384043][T22698] ? audit_log_start+0x365/0x6c0 [ 423.384071][T22698] audit_log_start+0x365/0x6c0 [ 423.384159][T22698] audit_seccomp+0x48/0x100 [ 423.384295][T22698] ? __seccomp_filter+0x68c/0x10d0 [ 423.384332][T22698] __seccomp_filter+0x69d/0x10d0 [ 423.384352][T22698] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 423.384376][T22698] ? vfs_write+0x7e8/0x960 [ 423.384401][T22698] __secure_computing+0x82/0x150 [ 423.384493][T22698] syscall_trace_enter+0xcf/0x1e0 [ 423.384516][T22698] do_syscall_64+0xac/0x200 [ 423.384620][T22698] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 423.384641][T22698] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 423.384718][T22698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.384741][T22698] RIP: 0033:0x7fe3b284ebe9 [ 423.384759][T22698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.384833][T22698] RSP: 002b:00007fe3b12b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.384852][T22698] RAX: ffffffffffffffda RBX: 00007fe3b2a75fa0 RCX: 00007fe3b284ebe9 [ 423.384864][T22698] RDX: 00002000000001c0 RSI: 00000000400454d9 RDI: 0000000000000003 [ 423.384878][T22698] RBP: 00007fe3b12b7090 R08: 0000000000000000 R09: 0000000000000000 [ 423.384892][T22698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.384905][T22698] R13: 00007fe3b2a76038 R14: 00007fe3b2a75fa0 R15: 00007ffc1483cb48 [ 423.385001][T22698] [ 423.589081][T22699] loop2: detected capacity change from 0 to 512 [ 423.604564][T22701] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6871'. [ 423.626521][T22701] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.638402][T22698] EXT4-fs warning (device loop2): ext4_empty_dir:3099: inode #12: comm syz.2.6870: directory missing '..' [ 423.667016][T22701] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.737008][T22701] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.788940][T22712] loop2: detected capacity change from 0 to 128 [ 423.798881][T22705] loop7: detected capacity change from 0 to 512 [ 423.807191][T22705] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 423.809852][T22712] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 423.833535][T22701] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.844278][T22712] System zones: 1-3, 19-19, 35-36 [ 423.900043][ T2701] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.913231][T22723] loop7: detected capacity change from 0 to 512 [ 423.921718][T22723] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 423.929580][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.941649][T22723] EXT4-fs (loop7): 1 truncate cleaned up [ 423.959360][T22724] program syz.3.6880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.980889][T22724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 423.980931][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.003766][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.034367][T22731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6883'. [ 424.141362][T22743] netlink: 'syz.5.6888': attribute type 10 has an invalid length. [ 424.149406][T22743] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6888'. [ 424.175088][T22739] lo speed is unknown, defaulting to 1000 [ 424.206370][T22743] dummy0: entered promiscuous mode [ 424.212873][T22743] bridge0: port 3(dummy0) entered blocking state [ 424.219327][T22743] bridge0: port 3(dummy0) entered disabled state [ 424.227098][T22743] dummy0: entered allmulticast mode [ 424.233159][T22743] bridge0: port 3(dummy0) entered blocking state [ 424.239631][T22743] bridge0: port 3(dummy0) entered forwarding state [ 424.243499][T22750] netlink: 'syz.2.6891': attribute type 10 has an invalid length. [ 424.254213][T22750] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6891'. [ 424.278173][T22757] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6893'. [ 424.293459][T22750] dummy0: entered promiscuous mode [ 424.303543][T22750] bridge0: port 3(dummy0) entered blocking state [ 424.310061][T22750] bridge0: port 3(dummy0) entered disabled state [ 424.317842][T22760] netlink: 240 bytes leftover after parsing attributes in process `syz.5.6895'. [ 424.318932][T22750] dummy0: entered allmulticast mode [ 424.334344][T22750] bridge0: port 3(dummy0) entered blocking state [ 424.340707][T22750] bridge0: port 3(dummy0) entered forwarding state [ 424.358614][T22760] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.375368][T22762] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6896'. [ 424.398388][T22765] FAULT_INJECTION: forcing a failure. [ 424.398388][T22765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.411555][T22765] CPU: 0 UID: 0 PID: 22765 Comm: syz.1.6898 Not tainted syzkaller #0 PREEMPT(voluntary) [ 424.411630][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.411640][T22765] Call Trace: [ 424.411646][T22765] [ 424.411653][T22765] __dump_stack+0x1d/0x30 [ 424.411675][T22765] dump_stack_lvl+0xe8/0x140 [ 424.411743][T22765] dump_stack+0x15/0x1b [ 424.411761][T22765] should_fail_ex+0x265/0x280 [ 424.411811][T22765] should_fail+0xb/0x20 [ 424.411830][T22765] should_fail_usercopy+0x1a/0x20 [ 424.411900][T22765] _copy_from_user+0x1c/0xb0 [ 424.411991][T22765] ___sys_sendmsg+0xc1/0x1d0 [ 424.412037][T22765] __x64_sys_sendmsg+0xd4/0x160 [ 424.412061][T22765] x64_sys_call+0x191e/0x2ff0 [ 424.412154][T22765] do_syscall_64+0xd2/0x200 [ 424.412177][T22765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.412199][T22765] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 424.412222][T22765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.412283][T22765] RIP: 0033:0x7f768c62ebe9 [ 424.412297][T22765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.412313][T22765] RSP: 002b:00007f768b08f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.412336][T22765] RAX: ffffffffffffffda RBX: 00007f768c855fa0 RCX: 00007f768c62ebe9 [ 424.412348][T22765] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 424.412361][T22765] RBP: 00007f768b08f090 R08: 0000000000000000 R09: 0000000000000000 [ 424.412374][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.412507][T22765] R13: 00007f768c856038 R14: 00007f768c855fa0 R15: 00007ffd4c4e3c18 [ 424.412526][T22765] [ 424.631802][T22760] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.644893][T22771] netlink: 'syz.2.6897': attribute type 4 has an invalid length. [ 424.666907][T22771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22771 comm=syz.2.6897 [ 424.681635][T22760] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.711634][T22778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.748217][T22760] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.813185][T22780] loop3: detected capacity change from 0 to 512 [ 424.820779][T22780] EXT4-fs: Ignoring removed orlov option [ 424.827377][T22780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 424.847610][T22780] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 424.865847][T22785] loop2: detected capacity change from 0 to 128 [ 424.872546][T22780] EXT4-fs (loop3): 1 orphan inode deleted [ 424.879175][T22785] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 424.882527][T22787] loop7: detected capacity change from 0 to 128 [ 424.895566][T22787] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 424.935036][T22794] FAULT_INJECTION: forcing a failure. [ 424.935036][T22794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.948327][T22794] CPU: 0 UID: 0 PID: 22794 Comm: syz.2.6908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 424.948359][T22794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 424.948378][T22794] Call Trace: [ 424.948386][T22794] [ 424.948396][T22794] __dump_stack+0x1d/0x30 [ 424.948420][T22794] dump_stack_lvl+0xe8/0x140 [ 424.948437][T22794] dump_stack+0x15/0x1b [ 424.948452][T22794] should_fail_ex+0x265/0x280 [ 424.948473][T22794] should_fail+0xb/0x20 [ 424.948511][T22794] should_fail_usercopy+0x1a/0x20 [ 424.948536][T22794] _copy_from_user+0x1c/0xb0 [ 424.948568][T22794] __x64_sys_epoll_ctl+0x92/0x100 [ 424.948647][T22794] x64_sys_call+0x706/0x2ff0 [ 424.948670][T22794] do_syscall_64+0xd2/0x200 [ 424.948748][T22794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.948773][T22794] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 424.948802][T22794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.948840][T22794] RIP: 0033:0x7fe3b284ebe9 [ 424.948859][T22794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.948954][T22794] RSP: 002b:00007fe3b12b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 424.949017][T22794] RAX: ffffffffffffffda RBX: 00007fe3b2a75fa0 RCX: 00007fe3b284ebe9 [ 424.949032][T22794] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000003 [ 424.949047][T22794] RBP: 00007fe3b12b7090 R08: 0000000000000000 R09: 0000000000000000 [ 424.949061][T22794] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.949076][T22794] R13: 00007fe3b2a76038 R14: 00007fe3b2a75fa0 R15: 00007ffc1483cb48 [ 424.949134][T22794] [ 425.223145][T22812] loop2: detected capacity change from 0 to 128 [ 425.241139][T22813] netlink: 'syz.7.6915': attribute type 4 has an invalid length. [ 425.251532][T22812] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 425.641036][T22838] FAULT_INJECTION: forcing a failure. [ 425.641036][T22838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.654305][T22838] CPU: 0 UID: 0 PID: 22838 Comm: syz.2.6923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 425.654336][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.654369][T22838] Call Trace: [ 425.654376][T22838] [ 425.654384][T22838] __dump_stack+0x1d/0x30 [ 425.654406][T22838] dump_stack_lvl+0xe8/0x140 [ 425.654481][T22838] dump_stack+0x15/0x1b [ 425.654497][T22838] should_fail_ex+0x265/0x280 [ 425.654516][T22838] should_fail+0xb/0x20 [ 425.654533][T22838] should_fail_usercopy+0x1a/0x20 [ 425.654552][T22838] copy_fpstate_to_sigframe+0x628/0x7d0 [ 425.654652][T22838] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 425.654818][T22838] ? x86_task_fpu+0x36/0x60 [ 425.654862][T22838] get_sigframe+0x34d/0x490 [ 425.654961][T22838] ? get_signal+0xdc8/0xf70 [ 425.655030][T22838] x64_setup_rt_frame+0xa8/0x580 [ 425.655050][T22838] arch_do_signal_or_restart+0x27c/0x480 [ 425.655077][T22838] exit_to_user_mode_loop+0x7a/0x100 [ 425.655101][T22838] do_syscall_64+0x1d6/0x200 [ 425.655248][T22838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 425.655273][T22838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 425.655298][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.655396][T22838] RIP: 0033:0x7fe3b284ebe9 [ 425.655411][T22838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.655427][T22838] RSP: 002b:00007fe3b12b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 425.655449][T22838] RAX: 00000000000001f5 RBX: 00007fe3b2a75fa0 RCX: 00007fe3b284ebe9 [ 425.655464][T22838] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000000001f5 [ 425.655523][T22838] RBP: 00007fe3b12b7090 R08: 0000000000000000 R09: 0000000000000000 [ 425.655535][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.655549][T22838] R13: 00007fe3b2a76038 R14: 00007fe3b2a75fa0 R15: 00007ffc1483cb48 [ 425.655568][T22838] [ 425.934719][T22856] ref_ctr_offset mismatch. inode: 0x50f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 425.955309][T22859] loop2: detected capacity change from 0 to 128 [ 425.964950][T22859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 425.966701][ T29] kauditd_printk_skb: 703 callbacks suppressed [ 425.966716][ T29] audit: type=1400 audit(425.947:42787): avc: denied { connect } for pid=22855 comm="syz.3.6931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 425.973097][T22859] System zones: 1-3, 19-19, 35-36 [ 426.028649][ T29] audit: type=1326 audit(426.007:42788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.051930][ T29] audit: type=1326 audit(426.007:42789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.052188][T22867] loop7: detected capacity change from 0 to 512 [ 426.075018][ T29] audit: type=1326 audit(426.007:42790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.104222][ T29] audit: type=1326 audit(426.007:42791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.127476][ T29] audit: type=1326 audit(426.007:42792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.146750][T22867] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 426.150898][ T29] audit: type=1326 audit(426.007:42793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fe3b284ebe9 code=0x7ffc0000 [ 426.160944][T22867] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 426.185700][ T29] audit: type=1400 audit(426.117:42794): avc: denied { write } for pid=22855 comm="syz.3.6931" path="socket:[89013]" dev="sockfs" ino=89013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 426.223270][T22867] EXT4-fs (loop7): mount failed [ 426.235413][ T29] audit: type=1326 audit(426.217:42795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22851 comm="syz.2.6930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe3b27eade9 code=0x7ffc0000 [ 426.319150][T22880] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6938'. [ 426.382001][T22892] loop7: detected capacity change from 0 to 512 [ 426.395093][T22892] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 426.410253][T22892] EXT4-fs (loop7): mount failed [ 426.429743][T22895] sctp: [Deprecated]: syz.2.6942 (pid 22895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.429743][T22895] Use struct sctp_sack_info instead [ 426.694091][T22920] loop7: detected capacity change from 0 to 512 [ 426.706637][T22920] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 426.721681][T22920] EXT4-fs (loop7): mount failed [ 426.840251][T22941] FAULT_INJECTION: forcing a failure. [ 426.840251][T22941] name failslab, interval 1, probability 0, space 0, times 0 [ 426.853171][T22941] CPU: 1 UID: 0 PID: 22941 Comm: syz.7.6963 Not tainted syzkaller #0 PREEMPT(voluntary) [ 426.853195][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.853214][T22941] Call Trace: [ 426.853219][T22941] [ 426.853226][T22941] __dump_stack+0x1d/0x30 [ 426.853240][T22941] dump_stack_lvl+0xe8/0x140 [ 426.853250][T22941] dump_stack+0x15/0x1b [ 426.853281][T22941] should_fail_ex+0x265/0x280 [ 426.853292][T22941] should_failslab+0x8c/0xb0 [ 426.853357][T22941] __kmalloc_cache_node_noprof+0x54/0x320 [ 426.853439][T22941] ? __get_vm_area_node+0x106/0x1d0 [ 426.853490][T22941] __get_vm_area_node+0x106/0x1d0 [ 426.853508][T22941] __vmalloc_node_range_noprof+0x273/0xe00 [ 426.853575][T22941] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 426.853639][T22941] ? avc_has_perm_noaudit+0x1b1/0x200 [ 426.853656][T22941] ? cred_has_capability+0x210/0x280 [ 426.853670][T22941] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 426.853713][T22941] __vmalloc_noprof+0x83/0xc0 [ 426.853732][T22941] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 426.853748][T22941] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 426.853764][T22941] ? bpf_prog_alloc+0x2a/0x150 [ 426.853804][T22941] bpf_prog_alloc+0x3c/0x150 [ 426.853820][T22941] bpf_prog_load+0x514/0x1070 [ 426.853865][T22941] ? security_bpf+0x2b/0x90 [ 426.853889][T22941] __sys_bpf+0x462/0x7b0 [ 426.853925][T22941] __x64_sys_bpf+0x41/0x50 [ 426.853955][T22941] x64_sys_call+0x2aea/0x2ff0 [ 426.853979][T22941] do_syscall_64+0xd2/0x200 [ 426.854058][T22941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 426.854085][T22941] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 426.854128][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.854156][T22941] RIP: 0033:0x7f63b77aebe9 [ 426.854201][T22941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.854218][T22941] RSP: 002b:00007f63b620f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.854239][T22941] RAX: ffffffffffffffda RBX: 00007f63b79d5fa0 RCX: 00007f63b77aebe9 [ 426.854252][T22941] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 426.854264][T22941] RBP: 00007f63b620f090 R08: 0000000000000000 R09: 0000000000000000 [ 426.854276][T22941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.854347][T22941] R13: 00007f63b79d6038 R14: 00007f63b79d5fa0 R15: 00007fffe70e7778 [ 426.854367][T22941] [ 427.091831][T22941] syz.7.6963: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 427.108113][T22941] CPU: 1 UID: 0 PID: 22941 Comm: syz.7.6963 Not tainted syzkaller #0 PREEMPT(voluntary) [ 427.108142][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.108156][T22941] Call Trace: [ 427.108163][T22941] [ 427.108192][T22941] __dump_stack+0x1d/0x30 [ 427.108267][T22941] dump_stack_lvl+0xe8/0x140 [ 427.108289][T22941] dump_stack+0x15/0x1b [ 427.108307][T22941] warn_alloc+0x12b/0x1a0 [ 427.108387][T22941] __vmalloc_node_range_noprof+0x297/0xe00 [ 427.108471][T22941] ? avc_has_perm_noaudit+0x1b1/0x200 [ 427.108496][T22941] ? cred_has_capability+0x210/0x280 [ 427.108577][T22941] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 427.108602][T22941] __vmalloc_noprof+0x83/0xc0 [ 427.108745][T22941] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 427.108775][T22941] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 427.108802][T22941] ? bpf_prog_alloc+0x2a/0x150 [ 427.108851][T22941] bpf_prog_alloc+0x3c/0x150 [ 427.108878][T22941] bpf_prog_load+0x514/0x1070 [ 427.108925][T22941] ? security_bpf+0x2b/0x90 [ 427.108997][T22941] __sys_bpf+0x462/0x7b0 [ 427.109047][T22941] __x64_sys_bpf+0x41/0x50 [ 427.109074][T22941] x64_sys_call+0x2aea/0x2ff0 [ 427.109176][T22941] do_syscall_64+0xd2/0x200 [ 427.109277][T22941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.109303][T22941] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 427.109369][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.109393][T22941] RIP: 0033:0x7f63b77aebe9 [ 427.109411][T22941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.109485][T22941] RSP: 002b:00007f63b620f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.109504][T22941] RAX: ffffffffffffffda RBX: 00007f63b79d5fa0 RCX: 00007f63b77aebe9 [ 427.109515][T22941] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 427.109584][T22941] RBP: 00007f63b620f090 R08: 0000000000000000 R09: 0000000000000000 [ 427.109596][T22941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.109607][T22941] R13: 00007f63b79d6038 R14: 00007f63b79d5fa0 R15: 00007fffe70e7778 [ 427.109625][T22941] [ 427.109631][T22941] Mem-Info: [ 427.321184][T22950] loop2: detected capacity change from 0 to 512 [ 427.323469][T22941] active_anon:8666 inactive_anon:7 isolated_anon:0 [ 427.323469][T22941] active_file:22953 inactive_file:2598 isolated_file:0 [ 427.323469][T22941] unevictable:0 dirty:485 writeback:0 [ 427.323469][T22941] slab_reclaimable:3912 slab_unreclaimable:33471 [ 427.323469][T22941] mapped:29893 shmem:4519 pagetables:1488 [ 427.323469][T22941] sec_pagetables:0 bounce:0 [ 427.323469][T22941] kernel_misc_reclaimable:0 [ 427.323469][T22941] free:1831399 free_pcp:39005 free_cma:0 [ 427.378112][T22941] Node 0 active_anon:34548kB inactive_anon:28kB active_file:91812kB inactive_file:10392kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119572kB dirty:1940kB writeback:0kB shmem:18076kB kernel_stack:5056kB pagetables:5952kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 427.405789][T22941] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 427.415050][T22950] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 427.434968][T22941] lowmem_reserve[]: 0 2883 7862 7862 [ 427.449727][T22941] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 427.461036][T22950] EXT4-fs (loop2): mount failed [ 427.485429][T22941] lowmem_reserve[]: 0 0 4978 4978 [ 427.490316][T22941] Node 0 Normal free:4361040kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34664kB inactive_anon:28kB active_file:91812kB inactive_file:10392kB unevictable:0kB writepending:1940kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:151848kB local_pcp:6112kB free_cma:0kB [ 427.490458][T22941] lowmem_reserve[]: 0 0 0 0 [ 427.490488][T22941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 427.490707][T22941] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 427.490910][T22941] Node 0 Normal: 977*4kB (UME) 558*8kB (UME) 569*16kB (M) 385*32kB (UM) 226*64kB (UM) 97*128kB (UM) 58*256kB (UM) 44*512kB (UME) 59*1024kB (UME) 38*2048kB (UME) 1008*4096kB (UM) = 4361060kB [ 427.491174][T22941] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 427.491193][T22941] 30070 total pagecache pages [ 427.491201][T22941] 12 pages in swap cache [ 427.491208][T22941] Free swap = 124948kB [ 427.491275][T22941] Total swap = 124996kB [ 427.491283][T22941] 2097051 pages RAM [ 427.491290][T22941] 0 pages HighMem/MovableOnly [ 427.491297][T22941] 80444 pages reserved [ 427.702758][T22970] SELinux: policydb version 133 does not match my version range 15-35 [ 427.712412][T22970] SELinux: failed to load policy [ 427.742528][T22978] loop7: detected capacity change from 0 to 512 [ 427.758515][T22978] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6977: Failed to acquire dquot type 1 [ 427.981082][T23016] 9pnet_fd: Insufficient options for proto=fd [ 428.114471][T23037] loop2: detected capacity change from 0 to 512 [ 428.121521][T23037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 428.147235][T23037] EXT4-fs (loop2): 1 truncate cleaned up [ 428.192935][T19177] EXT4-fs unmount: 21 callbacks suppressed [ 428.192954][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.259145][T23028] __nla_validate_parse: 3 callbacks suppressed [ 428.259195][T23028] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 428.286419][T23028] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 428.297290][T23028] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 428.373423][T23046] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7004'. [ 428.382571][T23046] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7004'. [ 428.382723][T23064] loop7: detected capacity change from 0 to 512 [ 428.399112][T23046] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 428.399112][T23046] program syz.1.7004 not setting count and/or reply_len properly [ 428.399537][T23064] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.7008: Invalid inode bitmap blk 4 in block_group 0 [ 428.434531][T23064] EXT4-fs (loop7): Remounting filesystem read-only [ 428.441930][T23064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.461626][T23064] netlink: 164 bytes leftover after parsing attributes in process `syz.7.7008'. [ 428.484103][T22545] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.487750][T23069] random: crng reseeded on system resumption [ 428.551592][T23069] loop3: detected capacity change from 0 to 8192 [ 428.557588][T23075] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7013'. [ 428.786773][T23092] loop7: detected capacity change from 0 to 1024 [ 428.800288][T23092] EXT4-fs: Ignoring removed nobh option [ 428.805954][T23092] EXT4-fs: Ignoring removed bh option [ 428.818820][T23092] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.995622][T23092] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7020'. [ 429.004794][T23092] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7020'. [ 429.018243][T23092] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 429.018243][T23092] program syz.7.7020 not setting count and/or reply_len properly [ 429.096976][T22545] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.132260][T23103] syzkaller1: entered promiscuous mode [ 429.137927][T23103] syzkaller1: entered allmulticast mode [ 429.395231][ T4282] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.414862][ T4282] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.432998][ T4282] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.451142][ T4282] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.623545][T23126] loop7: detected capacity change from 0 to 1024 [ 429.668315][T23126] EXT4-fs: Ignoring removed nobh option [ 429.674000][T23126] EXT4-fs: Ignoring removed bh option [ 429.725255][T23129] lo speed is unknown, defaulting to 1000 [ 429.760627][T23126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.975775][T23126] netlink: 260 bytes leftover after parsing attributes in process `syz.7.7031'. [ 429.995262][T23126] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 429.995262][T23126] program syz.7.7031 not setting count and/or reply_len properly [ 430.057629][T22545] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.175935][T23146] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.226859][T23146] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.275531][T23146] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.305837][T23146] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.322172][T23162] loop7: detected capacity change from 0 to 128 [ 430.328982][T23162] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 430.409515][T23177] 9pnet_fd: Insufficient options for proto=fd [ 430.409662][T23175] lo speed is unknown, defaulting to 1000 [ 430.565590][T23194] loop2: detected capacity change from 0 to 1024 [ 430.572342][T23194] EXT4-fs: Ignoring removed nobh option [ 430.578172][T23194] EXT4-fs: Ignoring removed bh option [ 430.597554][T23194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.760079][T23202] ================================================================== [ 430.768203][T23202] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 430.775247][T23202] [ 430.777575][T23202] write to 0xffff88811a88e5b8 of 8 bytes by task 23200 on cpu 1: [ 430.785291][T23202] shmem_fallocate+0x221/0x840 [ 430.790066][T23202] vfs_fallocate+0x3b6/0x400 [ 430.794752][T23202] madvise_vma_behavior+0x192d/0x1cf0 [ 430.800150][T23202] madvise_do_behavior+0x5b7/0x970 [ 430.805269][T23202] do_madvise+0x10e/0x190 [ 430.809604][T23202] __x64_sys_madvise+0x64/0x80 [ 430.814374][T23202] x64_sys_call+0x1f1a/0x2ff0 [ 430.819053][T23202] do_syscall_64+0xd2/0x200 [ 430.823661][T23202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.829727][T23202] [ 430.832048][T23202] read to 0xffff88811a88e5b8 of 8 bytes by task 23202 on cpu 0: [ 430.839673][T23202] shmem_fault+0x90/0x250 [ 430.844034][T23202] __do_fault+0xb9/0x200 [ 430.848286][T23202] handle_mm_fault+0xf78/0x2c20 [ 430.853147][T23202] __get_user_pages+0x102e/0x1fa0 [ 430.858192][T23202] __mm_populate+0x243/0x3a0 [ 430.862786][T23202] vm_mmap_pgoff+0x232/0x2e0 [ 430.867379][T23202] ksys_mmap_pgoff+0xc2/0x310 [ 430.872063][T23202] x64_sys_call+0x14a3/0x2ff0 [ 430.876745][T23202] do_syscall_64+0xd2/0x200 [ 430.881253][T23202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.887581][T23202] [ 430.889902][T23202] value changed: 0x0000000000000000 -> 0xffffc90001c63b58 [ 430.897002][T23202] [ 430.899325][T23202] Reported by Kernel Concurrency Sanitizer on: [ 430.905471][T23202] CPU: 0 UID: 0 PID: 23202 Comm: syz.3.7054 Not tainted syzkaller #0 PREEMPT(voluntary) [ 430.915278][T23202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 430.925331][T23202] ================================================================== [ 430.961966][T23194] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 430.961966][T23194] program syz.2.7056 not setting count and/or reply_len properly [ 431.082980][T19177] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.668370][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.679399][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.689656][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.700775][ T2701] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0