last executing test programs: 1m53.576448623s ago: executing program 3 (id=464): r0 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m53.444236387s ago: executing program 3 (id=465): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)}], 0x2) 1m53.442565207s ago: executing program 3 (id=466): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c050}, 0x1) 1m52.576024953s ago: executing program 3 (id=482): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008400}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syncfs(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200800, 0x8) fcntl$getflags(r1, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x50) (fail_nth: 3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc010) 1m52.531674777s ago: executing program 3 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0800000018140100000000000300f5ff0700010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) unshare(0x26020480) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESOCT=r4, @ANYBLOB="68dc6426018eb2c38e0ad8a09dc1116fa1fbdcc4968ad88b45864bbc814dcce3db2a51e624526bfb8eb9edfaf39eb0285df53cb45a2074f2339ebf36fca3d53d153e972dcb", @ANYRES16, @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x83}, 0x0, 0x0, 0x10000, 0x0, 0x202, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) unshare(0x40080) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) readlinkat(r10, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/219, 0xdb) 1m52.379446062s ago: executing program 3 (id=484): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) io_setup(0x3, &(0x7f0000019240)) 1m37.325549146s ago: executing program 32 (id=484): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r1, 0xee01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) io_setup(0x3, &(0x7f0000019240)) 1m24.129234958s ago: executing program 5 (id=1039): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0x5a, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r5 = socket$inet(0x2, 0x3, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000640)={0x60000, 0x102, 0x14}, 0x18) (async) r7 = memfd_secret(0x80000) move_mount(r6, &(0x7f0000000680)='./file0\x00', r7, &(0x7f0000000700)='./file0\x00', 0x40) r8 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r8, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r11, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e24, 0x103, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x0, {[0x32, 0x5d7, 0x4, 0x1, 0x2, 0xfffffffe, 0xd, 0x5]}}, 0x5c) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r13, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r13, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}}, 0x40) 1m24.072989324s ago: executing program 5 (id=1041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m23.973390353s ago: executing program 5 (id=1046): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) 1m23.917393279s ago: executing program 5 (id=1049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0800000018140100000000000300f5ff0700010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x0) unshare(0x26020480) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESOCT=r4, @ANYBLOB="68dc6426018eb2c38e0ad8a09dc1116fa1fbdcc4968ad88b45864bbc814dcce3db2a51e624526bfb8eb9edfaf39eb0285df53cb45a2074f2339ebf36fca3d53d153e972dcb", @ANYRES16, @ANYRES32=r2, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x83}, 0x0, 0x0, 0x10000, 0x0, 0x202, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) r7 = socket$inet6(0xa, 0x5, 0x0) r8 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073113f000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) unshare(0x40080) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20080, 0x51) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000080)={0x8}) readlinkat(r10, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/219, 0xdb) 1m23.843634406s ago: executing program 5 (id=1051): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x6, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 1m23.330674797s ago: executing program 5 (id=1059): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700), 0x0, 0x400c010, &(0x7f00000007c0)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6}, 0x94) timerfd_create(0x7, 0x80800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m23.329817807s ago: executing program 33 (id=1059): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @private0, 0x8}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000700), 0x0, 0x400c010, &(0x7f00000007c0)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYRES16], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6}, 0x94) timerfd_create(0x7, 0x80800) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 43.167316208s ago: executing program 4 (id=1929): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYBLOB="565141938774434efba31a8bcce1e06b8ff2dd9e7510fc466469001eee5aee9192f07ea8f48782c54ad5cd477091a9a8267069e9be74b1a1c980204d8e2f36e3f5d45a3fcbb2892cc9dd"], 0x5c}}, 0x24004085) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800000000000000000000106100"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x4004944) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 42.307032823s ago: executing program 4 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 42.244016849s ago: executing program 4 (id=1950): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000d8753471e959a8ed3027be7c728f26ffd2406370ca13a51a72e6d0e3cec53ca3702aa55d015a9820bf7fbd79d66512f2092455800ab838cd4daa6ee2fc3c5dd0afa66786030045d0a98e2d7e59a6da8772c83087c34435d8b9fd5fd99ca93da72557b60eb65a247af0c7daead5c2d74e95c13552e3ae56b24e9d2e99b07d53728397c77867f432bd9d85ad7f1033171b29c09c6f6a9db346ef1cb9b1f59ffc5215f2f303c316e4cbc975cca927b0", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r3) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4, 0x300}]}}, @address_reply={0xd}}}}}, 0x0) mincore(&(0x7f0000ff8000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/138) 41.01956523s ago: executing program 4 (id=1963): socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b", 0xb}], 0x1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000880)='./file0\x00', 0x2000c2, &(0x7f0000000940)={[{@fat=@umask={'umask', 0x3d, 0x20000000000}}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@nodots}, {@dots}, {@nodots}, {@dots}]}, 0xfe, 0x25f, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x896ae9c37ee5a8ae) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x2, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/16) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={r7, 0x7f, 0x20}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000007c0)={r7, 0x9}, &(0x7f0000000800)=0x8) syz_read_part_table(0x634, &(0x7f0000000000)="$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") 40.934362909s ago: executing program 4 (id=1965): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 40.694261722s ago: executing program 4 (id=1967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000002000000061107f000000000095"], 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xffffffff80000002, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 40.657073806s ago: executing program 34 (id=1967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000002000000061107f000000000095"], 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xffffffff80000002, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 40.471054094s ago: executing program 0 (id=1971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 40.401511822s ago: executing program 0 (id=1973): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='rpcgss_unwrap_failed\x00', r0, 0x0, 0x1}, 0xd) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000800)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x4e22, 0x18, 0x0, @wg=@data={0x3, 0x800}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141afbff02000010240001801400018008000100e000000108000200e00000010cb65c5e0500010000000000180002801400018008000100ac1414aa08000200ac1e"], 0x50}, 0x1, 0x0, 0x0, 0x4000810}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20900, 0x64, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x2}, 0x18) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 40.388566513s ago: executing program 0 (id=1974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 40.293391992s ago: executing program 0 (id=1976): socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400192340834b", 0xb}], 0x1) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0xc0, &(0x7f0000000080)=ANY=[@ANYBLOB="646f74732c6e66732c71756965742c6e6f646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c646f74732c6572726f72733d636f6e74696e7565008000000000000074732c00"], 0x1, 0x23d, &(0x7f0000000a40)="$eJzs3cFq1EAcBvB/220be7Fn8RDw4qmobxBkBTEgrOSgJwPVSytCeome9jF8Bh/Jx+ipt4hN6NZUPUjadJvfD5Z87MfAzGVnDzO77x9+Ojr8fPKx+fEtkiSNWcQyziL2YzO2orXRPTfP805ctgwAYN0sFmU29hwY0MbVt6oqK7cjYvdKU3y/mUkBAAAAAAAAAAAwNOf/AWB6nP+/+6oqK/e672+/c/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGM9Z09xv/vEae34AwPDs/wAwPfZ/AJge+z8ATM+bt+9eZXk+X6RpEnG6rIu6aJ9t/+JlPn+SnttfjTqt62K7y/n8adun/X6vG//sj/1OPH7U9r+656/zXr8bh9e9eAAAAAAAAAAAAAAAAAAAALglDtILvfv9W21/8Le+TZd+H6B3f38WD2Y3tgwAAAAAAAAAAAAAAAAAAABYaydfvh6Vx8cfKkG4CPfiP0YlcTsmLwwSxv5kAgAAAAAAAAAAAAAAAACA6Vld+h17JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwntX//19fGHuNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDT8DAAA//8GmZGk") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000880)='./file0\x00', 0x2000c2, &(0x7f0000000940)={[{@fat=@umask={'umask', 0x3d, 0x20000000000}}, {@fat=@errors_continue}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@nodots}, {@dots}, {@nodots}, {@dots}]}, 0xfe, 0x25f, &(0x7f0000000140)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x896ae9c37ee5a8ae) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x2, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=""/16) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={r7, 0x7f, 0x20}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000007c0)={r7, 0x9}, &(0x7f0000000800)=0x8) syz_read_part_table(0x634, &(0x7f0000000000)="$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") 40.215550299s ago: executing program 0 (id=1978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000002000000061107f000000000095"], 0x0, 0x5}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000000ffffffffaa3e56feb5bb0000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0xffffffff80000002, 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 39.817664379s ago: executing program 0 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 39.80435039s ago: executing program 35 (id=1983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 2.516859382s ago: executing program 1 (id=2700): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket(0x10, 0x80002, 0x0) unshare(0x2040400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, 0x0, 0x20000000}, 0x20) 2.499397113s ago: executing program 1 (id=2701): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYRESOCT, @ANYBLOB="565141938774434efba31a8bcce1e06b8ff2dd9e7510fc466469001eee5aee9192f07ea8f48782c54ad5cd477091a9a8267069e9be74b1a1c980204d8e2f36e3f5d45a3fcbb2892cc9dd"], 0x5c}}, 0x24004085) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000070000000000000800000000000000000000106100"], 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x0, 0x0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x478}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x4004944) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.470303986s ago: executing program 1 (id=2702): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 2.43096395s ago: executing program 1 (id=2703): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r3, 0x2d) tkill(r4, 0x14) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040), 0x4) r5 = dup3(r0, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x2, 0x3, 0xff) connect$inet(r7, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_elf32(r7, 0x0, 0x14) 2.43046471s ago: executing program 1 (id=2704): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x20, 0x20, 0x17, 0x0}) 2.43012784s ago: executing program 1 (id=2705): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8971, &(0x7f0000000000)={'netdevsim0\x00', @remote}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0x213e, &(0x7f0000000080)={0x0, 0x81df, 0x400, 0x1, 0x40000333}, &(0x7f0000000340), &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x4) vmsplice(r3, &(0x7f0000000880)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000200)}, {&(0x7f0000001300)="da02", 0x2}, {&(0x7f00000002c0)='@', 0x1}], 0x4, 0x0) 1.522096009s ago: executing program 6 (id=2741): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000480)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) process_mrelease(0xffffffffffffffff, 0x700000000000000) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000003c0), &(0x7f0000000400)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000600)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async) r4 = syz_io_uring_setup(0x13be, &(0x7f00000002c0)={0x0, 0x5745, 0x1, 0x3, 0x25c}, &(0x7f0000000240), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000380)={0x3}, 0x1) statx(0xffffffffffffffff, 0x0, 0x1000, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.249273536s ago: executing program 6 (id=2744): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.145419817s ago: executing program 6 (id=2745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {0xfff3}, {0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (fail_nth: 4) 897.694201ms ago: executing program 6 (id=2746): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000d00b7080000000000007b8af8ff00000000bfa200000000000400020000f8ffffffb7034cfb4abf76f8edae0000000085000000430000009500000000000000000059f6f8cdd9e59f33ee4b6688857e829e359f2c0eb8dce3120dd172b437cddad0839f5137eeed450fbd936e65b8cd7d922151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 895.695621ms ago: executing program 6 (id=2749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0, 0x91}, 0x20000811) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0x20, &(0x7f0000000e80)={&(0x7f0000001000)=""/4096, 0x1000, 0x0, &(0x7f0000000d80)=""/233, 0xe9}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1852000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket(0x28, 0x5, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r4}, @exit], &(0x7f0000000400)='GPL\x00', 0x6, 0x1b, &(0x7f00000004c0)=""/27, 0x41100, 0x2e, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000c00)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000c40)=[{0x1, 0x3, 0x1, 0xb}, {0x1, 0x3, 0xe}, {0x3, 0x1, 0xc, 0x1}, {0x5, 0x2, 0x9}, {0x1, 0x2, 0x10, 0x5}, {0x2, 0x4, 0xa, 0x8}, {0x0, 0x1, 0x2, 0x6}], 0x10, 0x999}, 0x94) close(r10) connect$vsock_stream(r7, &(0x7f0000000240)={0x28, 0x0, 0x2710}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xcb58c9f2fa78421b}, 0x40c0080) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000340)) sendmsg$NFT_BATCH(r13, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8153786d33e3adae}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x198, 0x0, 0xa, 0x300, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x100, 0x6, "94aa5e2579ea327e5f45f49b7bf78bc8922c5b6d0adc5eaabcab2bfa0408d25d9c909a5231ae3c27f7a2d459e54a0d6faafbf93c8ffb9e28ae30d51ad1c8a94da61822144240965e8b6e5acc436e84dc4b7ac79fe15f3a9669e2b9499ae162ff876ce00a7616bb511dbaf827784e840b39f380f974b517c075c65831c66ff7f00c3e4f15d84ef3c3bbb8ccdfc22d083478ab20de93b7c77fd672bdc22d0d9037907f6976b7376b2abf8abdc79a6f657dee536121870209ec8dcfffec8c6df5637c3c6623cce59a11f24a0af620a33a4da6861d4217656c4e1942df39d2895f373eff73fe450cee46aff83c29941bfac40af01a7ed05053e4c406f092"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x3f, 0x6, "68ac2b3bea35a03baf8d849e8bcd613dda3bd40ff8b5679d28d4249a5b607e43e126da834cad38069b2034f282f7fdff2e1a938031280ddf3b345e"}]}, @NFT_MSG_DELRULE={0x1c, 0x8, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_DELTABLE={0x334, 0x2, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xb6, 0x6, "dd2e25e46eb5a8190de3dd988ddd4f76d3aa396d459a7d853a4f74f7613c470d1c89db6a13e8e1d057d77b9e7765fe9c9ede13cf9bfba6b33986eea8a908e61141df824608fb2e00aeb25d2e3450264ed5e0d41dbeac1b3e92d4b43bc846547cbdf519f2b4a4c03ad856c01b2fba6136b0d5c335b88348c1071f9aad47ce16684c167fea026f705322102fbf1bb9f7bd15de81f5456f8842e364c09a1f25005643f3c9958b0bfabb393aa83f3bad88b28b81"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0xae, 0x6, "139aefd52cf1dfe55bc5bba73fe7c0f702fd0eb240786d0a19c0738c4fba3a9c09bc40ab5d57e08ee7958d9e1000f7311c5db4fd281a7e320ef13a8eb3590a6197cca0c407deb2ad3f365fec5466a6b4575df9b6e780a00a2e9f8afc9b4dcef6305b2e07ae28bb1e7fd94c0978a4207150c14d33d5e390be275ca6ae3e007994069aa876aab2f473e141cb0fb3fd5eab3d15d52914ce611898e0d6f5c1f8fac1c4b017cba035956dbe9c"}, @NFTA_TABLE_USERDATA={0xba, 0x6, "4c5406271e01102fedfe5850b34753b2229d6bfd9bb2da6e3da8d2eb030865b34cc1e58c4c9c784e89f78fa51f496da4d7716b2807e89e66bbc288eb1d342668dad9beeac6720a1b38acdbc3215123d113ae4060488399483992370088d4397ee7be89308d6f22c681a03ef3ed1fc6932331013437766c383453f3be78c71ad73d1a8f8953363533bb796a2895f68680bf299a329e766801307b9abb5e71ac13ddfdf37b3d09a24e15ac9d5fa55081aec75ddbc5662b"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "4a51d42d98618408ea0021549c1bd8d3ac60ea3789d13cc17bad66a3c43c57ec7067e32cd1a107253ac45c166b8e1aae6307644435c3d24e1b8f3f7e341039a87807e842b1f69a0742d35ce433d7b5eacc6c26baa0ef43bc9954f76681d9a0ca4673e3acf3baf184b0cd1904b717117af636b39b725822a7b63bc05ddc4259123ab27c83a59380ad762dac570d7d29f509794bfc23e0de6d655e0ce358426bc0f60e76b1d0b0c72494a670dcf74aada7da4328"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x5c0}, 0x1, 0x0, 0x0, 0xc14}, 0x4081) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) r15 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r15, 0xffffffffffffffff, 0x0) 394.884831ms ago: executing program 7 (id=2771): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000d00b7080000000000007b8af8ff00000000bfa200000000000400020000f8ffffffb7034cfb4abf76f8edae0000000085000000430000009500000000000000000059f6f8cdd9e59f33ee4b6688857e829e359f2c0eb8dce3120dd172b437cddad0839f5137eeed450fbd936e65b8cd7d922151"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 351.803945ms ago: executing program 7 (id=2773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x4, @local, 'vcan0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000240)='./file1\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5, 0x0, 0x20000}, 0x18) socket$kcm(0x21, 0x2, 0x2) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x90}, 0x880) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a300000000040000380"], 0x10c}}, 0x0) 283.852772ms ago: executing program 2 (id=2775): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002dc0)={'syztnl2\x00', &(0x7f0000002d40)={'syztnl1\x00', 0x0, 0x4, 0x3c, 0x8, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x7, 0x80, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)=@gettfilter={0x4c, 0x2e, 0x310, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x6}, {0x6, 0xfff4}, {0xfff3, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0xf8}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000085) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r2) 283.339482ms ago: executing program 2 (id=2776): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffffffffff38, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = getpid() kcmp(r3, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000001300)=@gcm_256={{0x304}, "67c3f71b0f188109", "2c9e910757c2725dd5795f705ac44b9d43498e33fe93a0c9001c5c65f7107d0d", "ddfb00", "5a3e2c1b40238e79"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace030000f5", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d03a", "29a78ab9b0a4e8ae"}, 0x38) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500"/15, @ANYRES32, @ANYBLOB="0000000000000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 283.000572ms ago: executing program 7 (id=2777): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000b00000000000000008500000017000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000001f00)="de4dc043102f0e202515a02eac23", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket(0x10, 0x3, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x1ff) sendto$inet6(r1, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r3}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) 259.455034ms ago: executing program 7 (id=2779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000200000000000000000085000000050000001801000020646c25000000000099892827267a7794000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$packet(0x11, 0x2, 0x300) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 245.087605ms ago: executing program 2 (id=2781): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) socket$kcm(0x10, 0x2, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x8) splice(r2, 0x0, r0, 0x0, 0x6, 0xb) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x10003, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0xee00) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = fspick(r7, &(0x7f0000000180)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200026bd7000fcdbdf2510000000050035000300000008002b00b900000008003a000080000008003b000000000008000300", @ANYRES32=r9, @ANYBLOB="08003100130900007f84011148cf378358bf2f760a60f619b5d72e69a98f79ded44349112b8f3d16cd5c6404a1ba3fc59d51ff"], 0x23}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000200)=""/106, 0x6a}], 0x1) write$binfmt_elf64(r5, &(0x7f00000001c0)=ANY=[], 0x10034) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000001850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x2) socket(0x29, 0xa, 0x7) 111.877978ms ago: executing program 8 (id=2786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) 83.431961ms ago: executing program 8 (id=2787): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x1843}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b4000000000090001"], 0xb8}}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000004fdffffff181165d4ef9be2af100000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) socket(0x10, 0x80002, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'hsr0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x5f, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r10, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 83.015151ms ago: executing program 2 (id=2788): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x407, 0x100000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002dc0)={'syztnl2\x00', &(0x7f0000002d40)={'syztnl1\x00', 0x0, 0x4, 0x3c, 0x8, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x7, 0x80, 0x8}}) sendmsg$nl_route_sched(r0, &(0x7f0000002ec0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e00)=@gettfilter={0x4c, 0x2e, 0x310, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x6}, {0x6, 0xfff4}, {0xfff3, 0xf}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0xf8}, {0x8, 0xb, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x2000085) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r2) 82.489952ms ago: executing program 8 (id=2789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x24000000}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 40.872655ms ago: executing program 8 (id=2790): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3000091, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES8, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRESOCT], 0x0, 0x23e, &(0x7f0000000600)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") (async, rerun: 64) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0xc0500, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) (async, rerun: 64) ioctl$TCFLSH(r0, 0x541b, 0xffffffffffffc) (async, rerun: 64) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) 40.534895ms ago: executing program 2 (id=2791): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 39.678156ms ago: executing program 7 (id=2792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000580)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYBLOB="05b7819e85cba755b981b2edbe58f33db31f285131d61c19b627ab8c26b7efefb25ff1390a9786b2a822709a9397c53e2035c7155112f3d47a92ea70198ff78d24d6c5a25ab8897d56d39a7090e08fe8011e14557e76a0a91050ee1847d0933a16f4f0e8e065c86d44535a663223964016f79ed08a0f0f4126b85eef9c023cc7e828954120b31729dfc3c5e4d3950c644b8711239f44ed115670a44929a9f70c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x200000000000000, 0x1, 0x1}}, 0x40) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRES64=r1, @ANYRES64, @ANYRES8=r3], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 39.168356ms ago: executing program 2 (id=2793): syz_emit_ethernet(0x32, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @empty, {[@noop]}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000900000000000000080000008500000027000000770000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) write$snapshot(r1, &(0x7f0000000040)="49c57d1100eb49d89b80b165932e3826daa72f7c7d927194e8308b1e7b9c7ea15f396326e37a516f531634b502f91f777fc6a84fbd45ebf2d0cf5bbe37f1f242ddd3dc26a089c43bf8d09985546f68f2643098916bcb548d3d341e2cb8f382a045", 0x61) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x0, 0x310, 0x0, 0x0, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 2.792439ms ago: executing program 8 (id=2794): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r3 = gettid() r4 = gettid() tkill(r3, 0x12) tkill(r3, 0x2d) tkill(r4, 0x14) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040), 0x4) r5 = dup3(r0, r0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket(0x2, 0x3, 0xff) connect$inet(r7, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_elf32(r7, 0x0, 0x14) 2.001249ms ago: executing program 6 (id=2795): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) futex_waitv(&(0x7f0000001080)=[{0x3, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000001100), 0x1) 356.42µs ago: executing program 7 (id=2796): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000640), 0x1, 0x451, &(0x7f00000001c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x1800001, &(0x7f0000000040)={[{@uid={'uid', 0x3d, r3}}]}) socket(0x10, 0x803, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x17c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14c, 0x2, [@TCA_CGROUP_ACT={0x5b}]}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) (async) pread64(r9, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$EXT4_IOC_GETFSUUID(r10, 0x8008662c, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000680), 0x109002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r13, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r14, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) (async) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r13, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x4c, r14, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) sendmsg$NL80211_CMD_START_AP(r11, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="00042bbd7000fedbdf250f00000008000300", @ANYRES32=r15, @ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) 0s ago: executing program 8 (id=2797): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x18) lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) kernel console output (not intermixed with test programs): it: type=1400 audit(1760047288.144:10680): avc: denied { map_create } for pid=9577 comm="syz.7.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.517797][ T29] audit: type=1400 audit(1760047288.144:10681): avc: denied { perfmon } for pid=9577 comm="syz.7.2080" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.555324][ T29] audit: type=1400 audit(1760047288.144:10682): avc: denied { map_read map_write } for pid=9577 comm="syz.7.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.575421][ T29] audit: type=1400 audit(1760047288.144:10683): avc: denied { prog_load } for pid=9577 comm="syz.7.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 138.594596][ T29] audit: type=1400 audit(1760047288.144:10684): avc: denied { bpf } for pid=9577 comm="syz.7.2080" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.615365][ T29] audit: type=1400 audit(1760047288.154:10685): avc: denied { create } for pid=9577 comm="syz.7.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 138.636440][ T29] audit: type=1400 audit(1760047288.154:10686): avc: denied { write } for pid=9577 comm="syz.7.2080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 139.025218][ T9605] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2088'. [ 139.046173][ T9607] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.083915][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2089'. [ 139.187245][ T9622] lo speed is unknown, defaulting to 1000 [ 139.234878][ T9626] loop6: detected capacity change from 0 to 512 [ 139.264813][ T9626] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2096: error while reading EA inode 32 err=-116 [ 139.321666][ T9626] EXT4-fs (loop6): Remounting filesystem read-only [ 139.328528][ T9626] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 139.346050][ T9626] EXT4-fs (loop6): 1 orphan inode deleted [ 139.352603][ T9626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.366010][ T9626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.447766][ T9636] 9pnet: Could not find request transport: fd0x0000000000000003 [ 139.512325][ T9646] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 139.525699][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2104'. [ 139.590520][ T9652] bridge: RTM_NEWNEIGH with invalid ether address [ 139.621347][ T9652] loop6: detected capacity change from 0 to 8192 [ 139.640463][ T9652] loop6: p1 p2 < > p3 p4 < p5 > [ 139.645424][ T9652] loop6: partition table partially beyond EOD, truncated [ 139.652755][ T9652] loop6: p1 size 100663296 extends beyond EOD, truncated [ 139.662863][ T9652] loop6: p2 start 591104 is beyond EOD, truncated [ 139.669314][ T9652] loop6: p3 start 33572980 is beyond EOD, truncated [ 139.676086][ T9656] loop2: detected capacity change from 0 to 512 [ 139.683104][ T9652] loop6: p5 size 100663296 extends beyond EOD, truncated [ 139.683679][ T9656] EXT4-fs: Ignoring removed i_version option [ 139.696756][ T9656] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 139.737410][ T9661] loop2: detected capacity change from 0 to 512 [ 139.750751][ T9661] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 139.758770][ T9661] EXT4-fs (loop2): orphan cleanup on readonly fs [ 139.768076][ T9661] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #16: comm syz.2.2109: corrupted inode contents [ 139.780421][ T9661] EXT4-fs (loop2): Remounting filesystem read-only [ 139.787147][ T9661] EXT4-fs (loop2): 1 truncate cleaned up [ 139.792966][ T5095] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.797748][ T9665] lo speed is unknown, defaulting to 1000 [ 139.803610][ T5095] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 139.803827][ T5095] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 139.830912][ T9661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.843243][ T9667] loop6: detected capacity change from 0 to 512 [ 139.875703][ T9667] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2110: error while reading EA inode 32 err=-116 [ 139.888542][ T9667] EXT4-fs (loop6): Remounting filesystem read-only [ 139.905219][ T9667] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 139.918635][ T9667] EXT4-fs (loop6): 1 orphan inode deleted [ 139.925062][ T9667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.940975][ T9667] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.977922][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.062678][ T9682] 9pnet: Could not find request transport: fd0x0000000000000003 [ 140.114986][ T9695] netlink: 'syz.6.2119': attribute type 2 has an invalid length. [ 140.226200][ T9705] lo speed is unknown, defaulting to 1000 [ 140.242250][ T9703] lo speed is unknown, defaulting to 1000 [ 140.277100][ T9708] loop1: detected capacity change from 0 to 512 [ 140.356890][ T9708] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2123: error while reading EA inode 32 err=-116 [ 140.398184][ T9708] EXT4-fs (loop1): Remounting filesystem read-only [ 140.418428][ T9708] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 140.429042][ T9719] SELinux: failed to load policy [ 140.446413][ T9708] EXT4-fs (loop1): 1 orphan inode deleted [ 140.460983][ T9727] 9pnet: Could not find request transport: fd0x0000000000000003 [ 140.461464][ T9708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.484220][ T9708] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.558563][ T9738] loop6: detected capacity change from 0 to 1024 [ 140.573736][ T9738] EXT4-fs: Ignoring removed bh option [ 140.579315][ T9738] EXT4-fs: inline encryption not supported [ 140.598708][ T9738] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.606515][ T9736] sd 0:0:1:0: device reset [ 140.615063][ T9738] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2135: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.625414][ T9743] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2137'. [ 140.639127][ T9742] SELinux: Context system_u:object_r:sulogin_exec_t:s0 is not valid (left unmapped). [ 140.639148][ T9738] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2135: lblock 0 mapped to illegal pblock 48 (length 1) [ 140.682937][ T9736] loop2: detected capacity change from 0 to 1024 [ 140.690703][ T9736] EXT4-fs: Ignoring removed nobh option [ 140.696373][ T9736] EXT4-fs: Ignoring removed bh option [ 140.702438][ T9738] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.2135: Failed to acquire dquot type 0 [ 140.724046][ T9738] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 140.734206][ T9747] loop8: detected capacity change from 0 to 1024 [ 140.741647][ T9747] EXT4-fs: Ignoring removed bh option [ 140.748124][ T9736] EXT4-fs: Mount option(s) incompatible with ext2 [ 140.754857][ T9747] EXT4-fs: inline encryption not supported [ 140.764976][ T9738] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2135: mark_inode_dirty error [ 140.787710][ T9747] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.808826][ T9738] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 140.830792][ T9738] EXT4-fs (loop6): 1 orphan inode deleted [ 140.837082][ T9738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.849999][ T5097] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 140.910895][ T9747] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2138: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.925082][ T5097] EXT4-fs error (device loop6): ext4_release_dquot:6981: comm kworker/u8:31: Failed to release dquot type 0 [ 140.963787][ T9747] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2138: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.015169][ T9738] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.023362][ T9747] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2138: Failed to acquire dquot type 0 [ 141.085519][ T9747] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 141.108472][ T9747] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2138: mark_inode_dirty error [ 141.151136][ T6725] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.155487][ T9747] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 141.166317][ T9768] sd 0:0:1:0: device reset [ 141.175022][ T9747] EXT4-fs (loop8): 1 orphan inode deleted [ 141.175469][ T9747] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.182515][ T9766] 9pnet_fd: Insufficient options for proto=fd [ 141.203632][ T5094] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:28: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.255189][ T9768] loop7: detected capacity change from 0 to 1024 [ 141.260007][ T5094] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:28: Failed to release dquot type 0 [ 141.263325][ T9768] EXT4-fs: Ignoring removed nobh option [ 141.283683][ T9768] EXT4-fs: Ignoring removed bh option [ 141.284091][ T9768] EXT4-fs: Mount option(s) incompatible with ext2 [ 141.288420][ T9747] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 141.303845][ T9253] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.335375][ T9772] lo speed is unknown, defaulting to 1000 [ 141.345320][ T9779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.347069][ T9776] loop6: detected capacity change from 0 to 512 [ 141.359929][ T9779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2151'. [ 141.379477][ T9776] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2148: error while reading EA inode 32 err=-116 [ 141.452241][ T9777] SELinux: failed to load policy [ 141.529251][ T9776] EXT4-fs (loop6): Remounting filesystem read-only [ 141.535852][ T9776] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 141.546282][ T9776] EXT4-fs (loop6): 1 orphan inode deleted [ 141.564216][ T9776] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.592409][ T9802] 9pnet_fd: Insufficient options for proto=fd [ 141.611235][ T9776] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.629452][ T9804] loop1: detected capacity change from 0 to 1024 [ 141.647509][ T9804] EXT4-fs: Ignoring removed nobh option [ 141.653177][ T9804] EXT4-fs: Ignoring removed bh option [ 141.683049][ T9804] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 141.711789][ T9804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.726999][ T9815] loop2: detected capacity change from 0 to 512 [ 141.757067][ T9815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.787506][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.787844][ T9819] SELinux: failed to load policy [ 141.822851][ T9815] EXT4-fs (loop2): 1 orphan inode deleted [ 141.828702][ T9815] EXT4-fs (loop2): 1 truncate cleaned up [ 141.840551][ T9826] lo speed is unknown, defaulting to 1000 [ 141.871370][ T9815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.947409][ T9815] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.2.2161: path /447/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 141.995256][ T9815] EXT4-fs (loop2): Remounting filesystem read-only [ 142.002062][ T9841] loop1: detected capacity change from 0 to 512 [ 142.010457][ T9841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 142.027925][ T9841] EXT4-fs (loop1): 1 orphan inode deleted [ 142.033760][ T9841] EXT4-fs (loop1): 1 truncate cleaned up [ 142.050156][ T9841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.078960][ T9841] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.1.2169: path /413/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 142.083680][ T9847] lo speed is unknown, defaulting to 1000 [ 142.103540][ T9841] EXT4-fs (loop1): Remounting filesystem read-only [ 142.168928][ T9855] lo speed is unknown, defaulting to 1000 [ 142.270996][ T9859] SELinux: failed to load policy [ 142.318400][ T9861] lo speed is unknown, defaulting to 1000 [ 142.397174][ T9867] 9pnet_fd: Insufficient options for proto=fd [ 142.426149][ T9869] FAULT_INJECTION: forcing a failure. [ 142.426149][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 142.439046][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.7.2183 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.439076][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.439090][ T9869] Call Trace: [ 142.439097][ T9869] [ 142.439104][ T9869] __dump_stack+0x1d/0x30 [ 142.439123][ T9869] dump_stack_lvl+0xe8/0x140 [ 142.439211][ T9869] dump_stack+0x15/0x1b [ 142.439230][ T9869] should_fail_ex+0x265/0x280 [ 142.439268][ T9869] should_failslab+0x8c/0xb0 [ 142.439427][ T9869] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 142.439459][ T9869] ? __alloc_skb+0x101/0x320 [ 142.439489][ T9869] __alloc_skb+0x101/0x320 [ 142.439519][ T9869] inet_ifmcaddr_notify+0x64/0x120 [ 142.439544][ T9869] __ip_mc_dec_group+0x1ac/0x3d0 [ 142.439564][ T9869] ip_mc_down+0x13d/0x1c0 [ 142.439583][ T9869] inetdev_event+0x1b3/0xc10 [ 142.439681][ T9869] ? __rcu_read_unlock+0x4f/0x70 [ 142.439709][ T9869] ? ib_netdevice_event+0x281/0x5f0 [ 142.439734][ T9869] ? __pfx_arp_netdev_event+0x10/0x10 [ 142.439757][ T9869] ? __pfx_inetdev_event+0x10/0x10 [ 142.439865][ T9869] raw_notifier_call_chain+0x6f/0x1b0 [ 142.439896][ T9869] ? call_netdevice_notifiers_info+0x9c/0x100 [ 142.439937][ T9869] call_netdevice_notifiers_info+0xae/0x100 [ 142.439974][ T9869] netif_close_many+0x170/0x240 [ 142.440008][ T9869] unregister_netdevice_many_notify+0x437/0x15d0 [ 142.440043][ T9869] ? __queue_delayed_work+0xb4/0x1e0 [ 142.440145][ T9869] ? queue_delayed_work_on+0x106/0x170 [ 142.440242][ T9869] unregister_netdevice_queue+0x1f5/0x220 [ 142.440272][ T9869] __tun_detach+0x82c/0xb30 [ 142.440348][ T9869] ? __pfx_tun_chr_close+0x10/0x10 [ 142.440374][ T9869] tun_chr_close+0x5a/0x100 [ 142.440398][ T9869] __fput+0x298/0x650 [ 142.440432][ T9869] fput_close_sync+0x6e/0x120 [ 142.440532][ T9869] __x64_sys_close+0x56/0xf0 [ 142.440549][ T9869] x64_sys_call+0x273c/0x3000 [ 142.440569][ T9869] do_syscall_64+0xd2/0x200 [ 142.440592][ T9869] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.440680][ T9869] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.440703][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.440753][ T9869] RIP: 0033:0x7f4392e5eec9 [ 142.440770][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.440790][ T9869] RSP: 002b:00007f43918bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 142.440810][ T9869] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5eec9 [ 142.440823][ T9869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 142.440835][ T9869] RBP: 00007f43918bf090 R08: 0000000000000000 R09: 0000000000000000 [ 142.440888][ T9869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.440901][ T9869] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 142.440919][ T9869] [ 142.727719][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.801294][ T9880] loop6: detected capacity change from 0 to 128 [ 142.808920][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.811728][ T9880] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.840949][ T9880] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.868051][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2190'. [ 142.904932][ T6725] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.948400][ T9885] SELinux: failed to load policy [ 142.983937][ T9888] lo speed is unknown, defaulting to 1000 [ 143.047817][ T9894] lo speed is unknown, defaulting to 1000 [ 143.068609][ T9891] loop1: detected capacity change from 0 to 512 [ 143.105112][ T9891] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2189: error while reading EA inode 32 err=-116 [ 143.135303][ T9891] EXT4-fs (loop1): Remounting filesystem read-only [ 143.142354][ T9891] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 143.152714][ T9891] EXT4-fs (loop1): 1 orphan inode deleted [ 143.158925][ T9891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.172006][ T9891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.202265][ T9917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 143.244787][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2201'. [ 143.321908][ T9929] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2205'. [ 143.398619][ T9934] vhci_hcd: invalid port number 96 [ 143.403775][ T9934] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 143.412714][ T9934] netlink: 'syz.1.2206': attribute type 1 has an invalid length. [ 143.436703][ T9934] bond2: entered promiscuous mode [ 143.441898][ T9934] bond2: entered allmulticast mode [ 143.448373][ T9922] lo speed is unknown, defaulting to 1000 [ 143.470137][ T29] kauditd_printk_skb: 1284 callbacks suppressed [ 143.470151][ T29] audit: type=1400 audit(1760047293.124:11959): avc: denied { accept } for pid=9933 comm="syz.1.2206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 143.732381][ T9943] loop1: detected capacity change from 0 to 2048 [ 143.742271][ T29] audit: type=1326 audit(1760047293.394:11960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.766407][ T29] audit: type=1326 audit(1760047293.394:11961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.790156][ T29] audit: type=1326 audit(1760047293.394:11962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.813848][ T29] audit: type=1326 audit(1760047293.394:11963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.837448][ T29] audit: type=1326 audit(1760047293.394:11964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.860995][ T29] audit: type=1326 audit(1760047293.394:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.861207][ T9950] FAULT_INJECTION: forcing a failure. [ 143.861207][ T9950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.884482][ T29] audit: type=1326 audit(1760047293.394:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.897489][ T9950] CPU: 1 UID: 0 PID: 9950 Comm: syz.6.2209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.897539][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.897554][ T9950] Call Trace: [ 143.897561][ T9950] [ 143.897568][ T9950] __dump_stack+0x1d/0x30 [ 143.897591][ T9950] dump_stack_lvl+0xe8/0x140 [ 143.897612][ T9950] dump_stack+0x15/0x1b [ 143.897650][ T9950] should_fail_ex+0x265/0x280 [ 143.897687][ T9950] should_fail+0xb/0x20 [ 143.897754][ T9950] should_fail_usercopy+0x1a/0x20 [ 143.897776][ T9950] _copy_to_user+0x20/0xa0 [ 143.897803][ T9950] simple_read_from_buffer+0xb5/0x130 [ 143.897828][ T9950] proc_fail_nth_read+0x10e/0x150 [ 143.897940][ T9950] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.898000][ T9950] vfs_read+0x1a8/0x770 [ 143.898023][ T9950] ? __rcu_read_unlock+0x4f/0x70 [ 143.898050][ T9950] ? __fget_files+0x184/0x1c0 [ 143.898109][ T9950] ksys_read+0xda/0x1a0 [ 143.898134][ T9950] __x64_sys_read+0x40/0x50 [ 143.898169][ T9950] x64_sys_call+0x27c0/0x3000 [ 143.898191][ T9950] do_syscall_64+0xd2/0x200 [ 143.898217][ T9950] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.898247][ T9950] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.898277][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.898301][ T9950] RIP: 0033:0x7fdc4421d8dc [ 143.898317][ T9950] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 143.898375][ T9950] RSP: 002b:00007fdc42c3d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.898396][ T9950] RAX: ffffffffffffffda RBX: 00007fdc44476180 RCX: 00007fdc4421d8dc [ 143.898410][ T9950] RDX: 000000000000000f RSI: 00007fdc42c3d0a0 RDI: 0000000000000009 [ 143.898423][ T9950] RBP: 00007fdc42c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 143.898436][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.898450][ T9950] R13: 00007fdc44476218 R14: 00007fdc44476180 R15: 00007ffedf0f85d8 [ 143.898470][ T9950] [ 143.941422][ T9943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 143.943863][ T29] audit: type=1326 audit(1760047293.394:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9946 comm="syz.7.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 143.954661][ T9939] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, [ 144.009913][ T29] audit: type=1400 audit(1760047293.604:11968): avc: denied { append } for pid=9939 comm="syz.1.2208" path="/418/file2/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.011928][ T9939] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.046097][ T9956] lo speed is unknown, defaulting to 1000 [ 144.219109][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 144.220552][ T9959] sd 0:0:1:0: device reset [ 144.237310][ T9957] loop6: detected capacity change from 0 to 512 [ 144.330241][ T9957] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2213: error while reading EA inode 32 err=-116 [ 144.347277][ T9957] EXT4-fs (loop6): Remounting filesystem read-only [ 144.357907][ T9957] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 144.375858][ T9957] EXT4-fs (loop6): 1 orphan inode deleted [ 144.382340][ T9957] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.397226][ T9957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.415117][ T9985] netlink: 'syz.2.2220': attribute type 13 has an invalid length. [ 144.499970][ T9990] lo speed is unknown, defaulting to 1000 [ 144.536226][ T9994] netlink: 'syz.8.2221': attribute type 16 has an invalid length. [ 144.544102][ T9994] netlink: 'syz.8.2221': attribute type 17 has an invalid length. [ 144.544554][ T9995] loop6: detected capacity change from 0 to 512 [ 144.558156][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2224'. [ 144.561758][ T9995] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2223: error while reading EA inode 32 err=-116 [ 144.587152][ T9995] EXT4-fs (loop6): Remounting filesystem read-only [ 144.594343][ T9995] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 144.604697][ T9995] EXT4-fs (loop6): 1 orphan inode deleted [ 144.611165][ T9995] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.623876][ T9995] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.712795][ T9990] netlink: 'syz.6.2223': attribute type 4 has an invalid length. [ 144.752008][T10007] siw: device registration error -23 [ 144.777994][T10009] lo speed is unknown, defaulting to 1000 [ 144.838538][T10006] lo speed is unknown, defaulting to 1000 [ 144.899609][T10021] netlink: 'syz.6.2233': attribute type 13 has an invalid length. [ 144.945157][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 145.003027][T10029] program syz.2.2231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.010604][T10024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.020439][T10024] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.030581][T10024] net_ratelimit: 11 callbacks suppressed [ 145.030588][T10024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.342159][T10028] lo speed is unknown, defaulting to 1000 [ 145.402247][T10041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 145.470907][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2241'. [ 145.497630][T10045] lo speed is unknown, defaulting to 1000 [ 145.642013][T10054] vhci_hcd: invalid port number 96 [ 145.647225][T10054] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 145.663696][T10054] netlink: 'syz.8.2244': attribute type 1 has an invalid length. [ 145.700819][T10054] bond1: entered promiscuous mode [ 145.705934][T10054] bond1: entered allmulticast mode [ 145.878511][T10068] lo speed is unknown, defaulting to 1000 [ 145.902241][T10075] loop8: detected capacity change from 0 to 512 [ 145.929185][T10075] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2248: error while reading EA inode 32 err=-116 [ 146.018822][T10075] EXT4-fs (loop8): Remounting filesystem read-only [ 146.055268][T10075] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 146.065498][T10075] EXT4-fs (loop8): 1 orphan inode deleted [ 146.073014][T10075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.089544][T10075] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.269593][T10086] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.323531][T10086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2253'. [ 146.377035][T10094] sd 0:0:1:0: device reset [ 146.433645][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2260'. [ 146.435039][T10101] vhci_hcd: invalid port number 96 [ 146.447735][T10101] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 146.497315][T10112] netlink: 'syz.2.2264': attribute type 13 has an invalid length. [ 146.505168][T10112] netlink: 'syz.2.2264': attribute type 27 has an invalid length. [ 146.589336][T10092] lo speed is unknown, defaulting to 1000 [ 146.671619][T10126] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.704662][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2269'. [ 146.725307][T10117] lo speed is unknown, defaulting to 1000 [ 146.956153][T10141] loop1: detected capacity change from 0 to 512 [ 146.970892][T10136] lo speed is unknown, defaulting to 1000 [ 146.997232][T10141] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2272: error while reading EA inode 32 err=-116 [ 147.020271][T10141] EXT4-fs (loop1): Remounting filesystem read-only [ 147.056101][T10141] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 147.070169][T10141] EXT4-fs (loop1): 1 orphan inode deleted [ 147.076352][T10141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.102485][T10141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.292436][T10165] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2280'. [ 147.376308][T10167] vhci_hcd: invalid port number 96 [ 147.381640][T10167] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 147.452497][T10169] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 147.481873][T10169] SELinux: failed to load policy [ 147.608660][T10175] SELinux: failed to load policy [ 147.690206][T10183] lo speed is unknown, defaulting to 1000 [ 147.745052][T10186] loop1: detected capacity change from 0 to 512 [ 147.829839][T10186] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2287: error while reading EA inode 32 err=-116 [ 147.872771][T10186] EXT4-fs (loop1): Remounting filesystem read-only [ 147.906637][T10186] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 148.009579][T10186] EXT4-fs (loop1): 1 orphan inode deleted [ 148.034843][T10186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.058852][T10186] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.098825][T10207] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 149.121617][T10207] SELinux: failed to load policy [ 149.158030][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 149.158044][ T29] audit: type=1400 audit(1760047298.804:12824): avc: denied { tracepoint } for pid=10211 comm="syz.2.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.224174][T10217] serio: Serial port ptm0 [ 149.260005][ T29] audit: type=1400 audit(1760047298.904:12825): avc: denied { ioctl } for pid=10224 comm="syz.1.2301" path="socket:[31257]" dev="sockfs" ino=31257 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.285879][ T29] audit: type=1400 audit(1760047298.914:12826): avc: denied { create } for pid=10224 comm="syz.1.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.300714][T10229] loop1: detected capacity change from 0 to 512 [ 149.311941][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2300'. [ 149.353931][T10229] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 149.361942][ T29] audit: type=1400 audit(1760047298.974:12827): avc: denied { mounton } for pid=10224 comm="syz.1.2301" path="/439/file0" dev="tmpfs" ino=2325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 149.384898][ T29] audit: type=1326 audit(1760047299.004:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10235 comm="syz.7.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 149.399744][T10229] EXT4-fs (loop1): orphan cleanup on readonly fs [ 149.408633][ T29] audit: type=1326 audit(1760047299.004:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10235 comm="syz.7.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 149.438361][ T29] audit: type=1326 audit(1760047299.004:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10235 comm="syz.7.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 149.464192][ T29] audit: type=1400 audit(1760047299.064:12831): avc: denied { create } for pid=10237 comm="syz.8.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 149.485910][T10229] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #16: comm syz.1.2301: corrupted inode contents [ 149.497934][T10229] EXT4-fs (loop1): Remounting filesystem read-only [ 149.512630][ T29] audit: type=1400 audit(1760047299.164:12832): avc: denied { ioctl } for pid=10237 comm="syz.8.2303" path="socket:[31277]" dev="sockfs" ino=31277 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.542208][T10229] EXT4-fs (loop1): 1 truncate cleaned up [ 149.547945][ T5097] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.558505][ T5097] Quota error (device loop1): write_blk: dquota write failed [ 149.565903][ T5097] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 149.579940][T10245] loop2: detected capacity change from 0 to 512 [ 149.587275][T10239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10239 comm=syz.8.2303 [ 149.605699][ T5097] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 149.616794][T10229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.640401][T10245] EXT4-fs (loop2): too many log groups per flexible block group [ 149.648271][T10245] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 149.660638][T10245] EXT4-fs (loop2): mount failed [ 149.676023][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.678768][T10252] lo speed is unknown, defaulting to 1000 [ 149.709409][T10254] FAULT_INJECTION: forcing a failure. [ 149.709409][T10254] name failslab, interval 1, probability 0, space 0, times 0 [ 149.722195][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.1.2307 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.722260][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 149.722273][T10254] Call Trace: [ 149.722280][T10254] [ 149.722287][T10254] __dump_stack+0x1d/0x30 [ 149.722358][T10254] dump_stack_lvl+0xe8/0x140 [ 149.722432][T10254] dump_stack+0x15/0x1b [ 149.722509][T10254] should_fail_ex+0x265/0x280 [ 149.722550][T10254] ? audit_log_d_path+0x8d/0x150 [ 149.722573][T10254] should_failslab+0x8c/0xb0 [ 149.722600][T10254] __kmalloc_cache_noprof+0x4c/0x4a0 [ 149.722649][T10254] audit_log_d_path+0x8d/0x150 [ 149.722672][T10254] audit_log_d_path_exe+0x42/0x70 [ 149.722697][T10254] audit_log_task+0x1e9/0x250 [ 149.722735][T10254] ? kstrtouint+0x76/0xc0 [ 149.722792][T10254] audit_seccomp+0x61/0x100 [ 149.722823][T10254] ? __seccomp_filter+0x82d/0x1250 [ 149.722854][T10254] __seccomp_filter+0x83e/0x1250 [ 149.722886][T10254] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 149.723001][T10254] ? vfs_write+0x7e8/0x960 [ 149.723023][T10254] ? __rcu_read_unlock+0x4f/0x70 [ 149.723053][T10254] ? __fget_files+0x184/0x1c0 [ 149.723087][T10254] __secure_computing+0x82/0x150 [ 149.723118][T10254] syscall_trace_enter+0xcf/0x1e0 [ 149.723146][T10254] do_syscall_64+0xac/0x200 [ 149.723168][T10254] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 149.723224][T10254] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 149.723256][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.723326][T10254] RIP: 0033:0x7fa9ad7deec9 [ 149.723341][T10254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.723362][T10254] RSP: 002b:00007fa9ac23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 149.723391][T10254] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 149.723406][T10254] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.723417][T10254] RBP: 00007fa9ac23f090 R08: 0000000000000000 R09: 0000000000000000 [ 149.723429][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.723441][T10254] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 149.723460][T10254] [ 149.960769][T10259] loop7: detected capacity change from 0 to 512 [ 149.970739][T10259] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2306: error while reading EA inode 32 err=-116 [ 150.000550][T10259] EXT4-fs (loop7): Remounting filesystem read-only [ 150.007379][T10259] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 150.017991][T10259] EXT4-fs (loop7): 1 orphan inode deleted [ 150.029157][T10259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.042401][T10259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.067232][T10274] loop2: detected capacity change from 0 to 1024 [ 150.081685][T10274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.197136][T10274] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.2313: Allocating blocks 449-513 which overlap fs metadata [ 150.257884][T10274] lo speed is unknown, defaulting to 1000 [ 150.320757][T10295] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2320'. [ 150.352842][T10273] EXT4-fs (loop2): pa ffff888106e63930: logic 48, phys. 177, len 21 [ 150.360926][T10273] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 150.375480][T10295] loop8: detected capacity change from 0 to 512 [ 150.384189][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.428880][T10295] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.442220][T10295] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.512630][T10305] vhci_hcd: invalid port number 96 [ 150.517785][T10305] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 150.589160][ T9253] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.668377][T10312] SELinux: failed to load policy [ 150.670032][T10314] FAULT_INJECTION: forcing a failure. [ 150.670032][T10314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.686565][T10314] CPU: 0 UID: 0 PID: 10314 Comm: syz.2.2327 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.686592][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.686620][T10314] Call Trace: [ 150.686625][T10314] [ 150.686631][T10314] __dump_stack+0x1d/0x30 [ 150.686652][T10314] dump_stack_lvl+0xe8/0x140 [ 150.686673][T10314] dump_stack+0x15/0x1b [ 150.686691][T10314] should_fail_ex+0x265/0x280 [ 150.686782][T10314] should_fail+0xb/0x20 [ 150.686814][T10314] should_fail_usercopy+0x1a/0x20 [ 150.686837][T10314] strncpy_from_user+0x25/0x230 [ 150.686894][T10314] ? kmem_cache_alloc_noprof+0x242/0x480 [ 150.686972][T10314] ? getname_flags+0x80/0x3b0 [ 150.687043][T10314] getname_flags+0xae/0x3b0 [ 150.687149][T10314] do_sys_openat2+0x60/0x110 [ 150.687182][T10314] __x64_sys_openat+0xf2/0x120 [ 150.687218][T10314] x64_sys_call+0x2eab/0x3000 [ 150.687309][T10314] do_syscall_64+0xd2/0x200 [ 150.687335][T10314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.687364][T10314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.687388][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.687549][T10314] RIP: 0033:0x7f74f025d710 [ 150.687566][T10314] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 150.687584][T10314] RSP: 002b:00007f74eecbef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 150.687602][T10314] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f74f025d710 [ 150.687654][T10314] RDX: 0000000000000002 RSI: 00007f74eecbefa0 RDI: 00000000ffffff9c [ 150.687667][T10314] RBP: 00007f74eecbefa0 R08: 0000000000000000 R09: 0000000000000000 [ 150.687681][T10314] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 150.687694][T10314] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 150.687714][T10314] [ 150.902718][T10317] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2329'. [ 150.950857][T10317] loop1: detected capacity change from 0 to 1024 [ 150.968494][T10317] ext4: Unknown parameter 'subj_user' [ 150.999879][T10317] SELinux: Context system_u:object is not valid (left unmapped). [ 151.013498][T10329] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.015843][T10326] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2333'. [ 151.029530][T10330] lo speed is unknown, defaulting to 1000 [ 151.047444][T10326] hsr_slave_0: left promiscuous mode [ 151.072417][T10326] hsr_slave_1: left promiscuous mode [ 151.078008][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2331'. [ 151.109031][T10338] vhci_hcd: invalid port number 96 [ 151.114264][T10338] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.141095][T10342] vhci_hcd: invalid port number 96 [ 151.146238][T10342] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 151.153971][T10342] netlink: 'syz.7.2338': attribute type 1 has an invalid length. [ 151.196012][T10342] bond1: entered promiscuous mode [ 151.201432][T10342] bond1: entered allmulticast mode [ 151.206780][T10340] lo speed is unknown, defaulting to 1000 [ 151.254962][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2341'. [ 151.365868][T10367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10367 comm=syz.6.2341 [ 151.393675][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2341'. [ 151.538297][T10373] FAULT_INJECTION: forcing a failure. [ 151.538297][T10373] name failslab, interval 1, probability 0, space 0, times 0 [ 151.551094][T10373] CPU: 1 UID: 0 PID: 10373 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.551125][T10373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.551140][T10373] Call Trace: [ 151.551147][T10373] [ 151.551155][T10373] __dump_stack+0x1d/0x30 [ 151.551233][T10373] dump_stack_lvl+0xe8/0x140 [ 151.551253][T10373] dump_stack+0x15/0x1b [ 151.551272][T10373] should_fail_ex+0x265/0x280 [ 151.551310][T10373] should_failslab+0x8c/0xb0 [ 151.551398][T10373] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 151.551425][T10373] ? __alloc_skb+0x101/0x320 [ 151.551492][T10373] __alloc_skb+0x101/0x320 [ 151.551513][T10373] ? audit_log_start+0x342/0x720 [ 151.551532][T10373] audit_log_start+0x3a0/0x720 [ 151.551551][T10373] ? kstrtouint+0x76/0xc0 [ 151.551631][T10373] audit_seccomp+0x48/0x100 [ 151.551729][T10373] ? __seccomp_filter+0x82d/0x1250 [ 151.551769][T10373] __seccomp_filter+0x83e/0x1250 [ 151.551797][T10373] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.551831][T10373] ? vfs_write+0x7e8/0x960 [ 151.551884][T10373] ? __rcu_read_unlock+0x4f/0x70 [ 151.551913][T10373] ? __fget_files+0x184/0x1c0 [ 151.551978][T10373] __secure_computing+0x82/0x150 [ 151.552066][T10373] syscall_trace_enter+0xcf/0x1e0 [ 151.552094][T10373] do_syscall_64+0xac/0x200 [ 151.552117][T10373] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 151.552150][T10373] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 151.552174][T10373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.552194][T10373] RIP: 0033:0x7fa9ad7deec9 [ 151.552218][T10373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.552240][T10373] RSP: 002b:00007fa9ac23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 151.552262][T10373] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 151.552289][T10373] RDX: 0000000000000001 RSI: 0000000000800000 RDI: 0000200000000000 [ 151.552303][T10373] RBP: 00007fa9ac23f090 R08: 0000000000000000 R09: 0000000000000000 [ 151.552317][T10373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.552331][T10373] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 151.552354][T10373] [ 151.847773][T10381] lo speed is unknown, defaulting to 1000 [ 151.855915][T10379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.895870][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 151.898021][T10387] loop7: detected capacity change from 0 to 512 [ 151.932827][T10389] loop8: detected capacity change from 0 to 512 [ 151.944991][T10383] lo speed is unknown, defaulting to 1000 [ 152.016790][T10387] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2349: error while reading EA inode 32 err=-116 [ 152.077330][T10389] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2347: error while reading EA inode 32 err=-116 [ 152.090362][T10394] SELinux: failed to load policy [ 152.095762][T10387] EXT4-fs (loop7): Remounting filesystem read-only [ 152.128461][T10387] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 152.161472][T10387] EXT4-fs (loop7): 1 orphan inode deleted [ 152.167433][T10389] EXT4-fs (loop8): Remounting filesystem read-only [ 152.181693][T10387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.221071][T10389] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 152.237023][T10391] lo speed is unknown, defaulting to 1000 [ 152.254179][T10387] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.269570][T10389] EXT4-fs (loop8): 1 orphan inode deleted [ 152.296094][T10389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.426127][T10389] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.803385][T10420] xt_CT: No such helper "netbios-ns" [ 152.809488][T10420] syz.7.2357 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 152.839653][T10420] loop7: detected capacity change from 0 to 512 [ 152.851386][T10420] EXT4-fs (loop7): too many log groups per flexible block group [ 152.859301][T10420] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 152.869632][T10420] EXT4-fs (loop7): mount failed [ 153.057467][T10437] SELinux: failed to load policy [ 153.209746][T10447] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2367'. [ 153.220418][T10446] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2366'. [ 153.279804][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2369'. [ 153.312822][T10454] loop1: detected capacity change from 0 to 1024 [ 153.330108][T10454] EXT4-fs: Ignoring removed orlov option [ 153.372082][T10452] lo speed is unknown, defaulting to 1000 [ 153.385901][T10461] loop6: detected capacity change from 0 to 512 [ 153.553904][T10461] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2368: error while reading EA inode 32 err=-116 [ 153.596390][T10461] EXT4-fs (loop6): Remounting filesystem read-only [ 153.615798][T10472] random: crng reseeded on system resumption [ 153.629768][T10461] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 153.677303][T10461] EXT4-fs (loop6): 1 orphan inode deleted [ 153.969673][T10478] vhci_hcd: invalid port number 96 [ 153.974804][T10478] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.002012][T10478] netlink: 'syz.2.2376': attribute type 1 has an invalid length. [ 154.111197][T10478] bond1: entered promiscuous mode [ 154.116248][T10478] bond1: entered allmulticast mode [ 154.161252][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 154.161267][ T29] audit: type=1326 audit(1760047303.814:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc4421eacb code=0x7ffc0000 [ 154.203270][T10488] loop6: detected capacity change from 0 to 128 [ 154.269635][ T29] audit: type=1326 audit(1760047303.884:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc4421db2a code=0x7ffc0000 [ 154.293270][ T29] audit: type=1326 audit(1760047303.884:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc4421db2a code=0x7ffc0000 [ 154.316878][ T29] audit: type=1326 audit(1760047303.884:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc4421d617 code=0x7ffc0000 [ 154.340541][ T29] audit: type=1326 audit(1760047303.894:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdc4422066a code=0x7ffc0000 [ 154.393435][T10488] ext4 filesystem being mounted at /278/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.428635][T10502] netlink: 'syz.7.2384': attribute type 8 has an invalid length. [ 154.436523][T10502] netem: change failed [ 154.440959][T10502] futex_wake_op: syz.7.2384 tries to shift op by 32; fix this program [ 154.583452][ T29] audit: type=1326 audit(1760047304.064:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc4421d710 code=0x7ffc0000 [ 154.607143][ T29] audit: type=1326 audit(1760047304.064:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fdc4421dc17 code=0x7ffc0000 [ 154.616195][T10511] lo speed is unknown, defaulting to 1000 [ 154.630664][ T29] audit: type=1326 audit(1760047304.064:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc4421d710 code=0x7ffc0000 [ 154.630704][ T29] audit: type=1326 audit(1760047304.064:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 154.683542][ T29] audit: type=1326 audit(1760047304.064:13208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10487 comm="syz.6.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 154.722296][T10509] SELinux: failed to load policy [ 154.744329][T10516] loop7: detected capacity change from 0 to 512 [ 154.761398][T10516] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2388: error while reading EA inode 32 err=-116 [ 154.871773][T10516] EXT4-fs (loop7): Remounting filesystem read-only [ 154.878479][T10516] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 154.894994][T10516] EXT4-fs (loop7): 1 orphan inode deleted [ 154.963724][T10526] netlink: 'syz.1.2393': attribute type 13 has an invalid length. [ 154.971594][T10526] netlink: 'syz.1.2393': attribute type 27 has an invalid length. [ 154.991436][T10527] netlink: 'syz.2.2392': attribute type 1 has an invalid length. [ 155.009379][T10527] bond2: entered promiscuous mode [ 155.014729][T10527] bond2: entered allmulticast mode [ 155.299847][T10547] SELinux: failed to load policy [ 155.344639][T10552] netlink: 'syz.1.2403': attribute type 13 has an invalid length. [ 155.352865][T10552] netlink: 'syz.1.2403': attribute type 27 has an invalid length. [ 155.404770][T10556] __nla_validate_parse: 2 callbacks suppressed [ 155.404787][T10556] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2405'. [ 155.436485][T10556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2405'. [ 155.543119][T10566] vhci_hcd: invalid port number 96 [ 155.548331][T10566] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 155.566346][T10566] netlink: 'syz.7.2409': attribute type 1 has an invalid length. [ 155.600191][T10568] vhci_hcd: invalid port number 96 [ 155.605342][T10568] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 155.719301][T10566] bond2: entered promiscuous mode [ 155.724389][T10566] bond2: entered allmulticast mode [ 155.833346][T10588] FAULT_INJECTION: forcing a failure. [ 155.833346][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 155.846087][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.7.2416 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.846118][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.846132][T10588] Call Trace: [ 155.846138][T10588] [ 155.846217][T10588] __dump_stack+0x1d/0x30 [ 155.846322][T10588] dump_stack_lvl+0xe8/0x140 [ 155.846416][T10588] dump_stack+0x15/0x1b [ 155.846433][T10588] should_fail_ex+0x265/0x280 [ 155.846553][T10588] should_failslab+0x8c/0xb0 [ 155.846582][T10588] __kvmalloc_node_noprof+0x12e/0x670 [ 155.846616][T10588] ? nf_hook_entries_grow+0x1c1/0x460 [ 155.846647][T10588] ? __rcu_read_unlock+0x34/0x70 [ 155.846696][T10588] nf_hook_entries_grow+0x1c1/0x460 [ 155.846729][T10588] ? __kernel_text_address+0xd/0x40 [ 155.846765][T10588] __nf_register_net_hook+0x18e/0x480 [ 155.846797][T10588] ? should_fail_ex+0xdb/0x280 [ 155.846847][T10588] nf_register_net_hook+0x88/0x130 [ 155.846898][T10588] nf_register_net_hooks+0x44/0x150 [ 155.846932][T10588] nf_defrag_ipv4_enable+0x6e/0xc0 [ 155.846966][T10588] nf_ct_netns_do_get+0x13c/0x380 [ 155.847072][T10588] nf_ct_netns_get+0x87/0xc0 [ 155.847104][T10588] conntrack_mt_check+0x35/0xa0 [ 155.847132][T10588] xt_check_match+0x2aa/0x4f0 [ 155.847175][T10588] ? xt_find_match+0x1d1/0x210 [ 155.847204][T10588] ? xt_find_match+0x1b5/0x210 [ 155.847235][T10588] translate_table+0xa9c/0xf90 [ 155.847342][T10588] ? _copy_from_user+0x89/0xb0 [ 155.847373][T10588] do_ipt_set_ctl+0x66f/0x820 [ 155.847407][T10588] ? lock_sock_nested+0x112/0x140 [ 155.847445][T10588] nf_setsockopt+0x199/0x1b0 [ 155.847481][T10588] ip_setsockopt+0x102/0x110 [ 155.847557][T10588] udp_setsockopt+0x99/0xb0 [ 155.847586][T10588] sock_common_setsockopt+0x69/0x80 [ 155.847610][T10588] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 155.847635][T10588] __sys_setsockopt+0x184/0x200 [ 155.847669][T10588] __x64_sys_setsockopt+0x64/0x80 [ 155.847733][T10588] x64_sys_call+0x20ec/0x3000 [ 155.847760][T10588] do_syscall_64+0xd2/0x200 [ 155.847833][T10588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.847863][T10588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.847888][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.847914][T10588] RIP: 0033:0x7f4392e5eec9 [ 155.847931][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.848030][T10588] RSP: 002b:00007f43918bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.848053][T10588] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5eec9 [ 155.848068][T10588] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 155.848083][T10588] RBP: 00007f43918bf090 R08: 0000000000000538 R09: 0000000000000000 [ 155.848098][T10588] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 155.848113][T10588] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 155.848136][T10588] [ 155.848158][T10588] xt_conntrack: cannot load conntrack support for proto=2 [ 155.944694][T10592] loop2: detected capacity change from 0 to 128 [ 156.154514][T10592] vfat: Bad value for 'shortname' [ 156.213185][T10592] loop2: detected capacity change from 0 to 512 [ 156.241612][T10592] msdos: Unknown parameter 'dot…' [ 156.565474][T10622] lo speed is unknown, defaulting to 1000 [ 156.618148][T10638] loop1: detected capacity change from 0 to 512 [ 156.636730][T10638] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 156.642780][T10636] vhci_hcd: invalid port number 96 [ 156.651745][T10636] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 156.698666][T10638] EXT4-fs (loop1): 1 truncate cleaned up [ 156.793328][T10641] vhci_hcd: invalid port number 96 [ 156.798463][T10641] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 156.825107][T10641] netlink: 'syz.8.2435': attribute type 1 has an invalid length. [ 156.868230][T10641] bond2: entered promiscuous mode [ 156.873515][T10641] bond2: entered allmulticast mode [ 156.888391][T10646] netlink: 'syz.2.2437': attribute type 13 has an invalid length. [ 156.896321][T10646] netlink: 'syz.2.2437': attribute type 27 has an invalid length. [ 156.974858][T10643] loop1: detected capacity change from 0 to 512 [ 156.981932][T10643] EXT4-fs: Ignoring removed orlov option [ 156.988525][T10643] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 157.004018][T10643] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.2436: bad orphan inode 131083 [ 157.020349][T10656] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 157.095417][T10643] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.2436: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 157.131288][T10643] 9pnet_fd: Insufficient options for proto=fd [ 157.163190][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2440'. [ 157.301374][T10669] loop2: detected capacity change from 0 to 1024 [ 157.318050][T10669] EXT4-fs: Ignoring removed orlov option [ 157.330091][T10672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2446'. [ 157.406179][T10678] vhci_hcd: invalid port number 96 [ 157.411554][T10678] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 157.425594][T10682] loop1: detected capacity change from 0 to 512 [ 157.435030][T10682] ext4: Unknown parameter 'euid>00000000000000032896' [ 157.495005][T10678] netlink: 'syz.6.2449': attribute type 1 has an invalid length. [ 157.519305][T10678] bond2: entered promiscuous mode [ 157.524488][T10678] bond2: entered allmulticast mode [ 157.736160][T10696] tmpfs: Bad value for 'mpol' [ 157.868504][T10715] netlink: 'syz.1.2455': attribute type 4 has an invalid length. [ 157.885255][T10717] netlink: 'syz.6.2463': attribute type 9 has an invalid length. [ 157.915368][T10720] FAULT_INJECTION: forcing a failure. [ 157.915368][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.928450][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz.2.2464 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.928494][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.928509][T10720] Call Trace: [ 157.928515][T10720] [ 157.928523][T10720] __dump_stack+0x1d/0x30 [ 157.928544][T10720] dump_stack_lvl+0xe8/0x140 [ 157.928567][T10720] dump_stack+0x15/0x1b [ 157.928585][T10720] should_fail_ex+0x265/0x280 [ 157.928660][T10720] should_fail+0xb/0x20 [ 157.928715][T10720] should_fail_usercopy+0x1a/0x20 [ 157.928815][T10720] _copy_to_user+0x20/0xa0 [ 157.928857][T10720] simple_read_from_buffer+0xb5/0x130 [ 157.928885][T10720] proc_fail_nth_read+0x10e/0x150 [ 157.928919][T10720] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.929037][T10720] vfs_read+0x1a8/0x770 [ 157.929131][T10720] ? __rcu_read_unlock+0x4f/0x70 [ 157.929220][T10720] ? __fget_files+0x184/0x1c0 [ 157.929252][T10720] ksys_read+0xda/0x1a0 [ 157.929279][T10720] __x64_sys_read+0x40/0x50 [ 157.929306][T10720] x64_sys_call+0x27c0/0x3000 [ 157.929349][T10720] do_syscall_64+0xd2/0x200 [ 157.929371][T10720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.929397][T10720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.929462][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.929488][T10720] RIP: 0033:0x7f74f025d8dc [ 157.929506][T10720] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.929525][T10720] RSP: 002b:00007f74eecbf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.929613][T10720] RAX: ffffffffffffffda RBX: 00007f74f04b5fa0 RCX: 00007f74f025d8dc [ 157.929626][T10720] RDX: 000000000000000f RSI: 00007f74eecbf0a0 RDI: 0000000000000006 [ 157.929638][T10720] RBP: 00007f74eecbf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.929650][T10720] R10: 000000000000002a R11: 0000000000000246 R12: 0000000000000001 [ 157.929665][T10720] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 157.929690][T10720] [ 158.245809][T10729] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2469'. [ 158.310187][T10741] loop1: detected capacity change from 0 to 512 [ 158.367665][T10747] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.387207][T10741] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 158.398426][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.410230][T10741] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2474: invalid indirect mapped block 2683928664 (level 1) [ 158.450292][T10741] EXT4-fs (loop1): 1 truncate cleaned up [ 158.451013][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.464370][T10741] EXT4-fs mount: 14 callbacks suppressed [ 158.464386][T10741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.482829][T10747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2475'. [ 158.484184][T10741] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.504363][T10741] FAULT_INJECTION: forcing a failure. [ 158.504363][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 158.517022][T10741] CPU: 0 UID: 0 PID: 10741 Comm: syz.1.2474 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.517050][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.517091][T10741] Call Trace: [ 158.517097][T10741] [ 158.517105][T10741] __dump_stack+0x1d/0x30 [ 158.517186][T10741] dump_stack_lvl+0xe8/0x140 [ 158.517209][T10741] dump_stack+0x15/0x1b [ 158.517227][T10741] should_fail_ex+0x265/0x280 [ 158.517267][T10741] should_failslab+0x8c/0xb0 [ 158.517421][T10741] kmem_cache_alloc_noprof+0x50/0x480 [ 158.517451][T10741] ? prepare_creds+0x37/0x4c0 [ 158.517482][T10741] prepare_creds+0x37/0x4c0 [ 158.517511][T10741] __sys_setuid+0x67/0x310 [ 158.517568][T10741] __x64_sys_setuid+0x1e/0x30 [ 158.517586][T10741] x64_sys_call+0x1a84/0x3000 [ 158.517606][T10741] do_syscall_64+0xd2/0x200 [ 158.517631][T10741] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.517674][T10741] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.517695][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.517715][T10741] RIP: 0033:0x7fa9ad7deec9 [ 158.517729][T10741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.517747][T10741] RSP: 002b:00007fa9ac23f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 158.517798][T10741] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 158.517810][T10741] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 158.517825][T10741] RBP: 00007fa9ac23f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.517837][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.517850][T10741] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 158.517915][T10741] [ 158.708944][T10756] lo speed is unknown, defaulting to 1000 [ 158.861586][T10755] FAULT_INJECTION: forcing a failure. [ 158.861586][T10755] name failslab, interval 1, probability 0, space 0, times 0 [ 158.874229][T10755] CPU: 0 UID: 0 PID: 10755 Comm: syz.7.2477 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.874356][T10755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.874370][T10755] Call Trace: [ 158.874376][T10755] [ 158.874384][T10755] __dump_stack+0x1d/0x30 [ 158.874407][T10755] dump_stack_lvl+0xe8/0x140 [ 158.874430][T10755] dump_stack+0x15/0x1b [ 158.874447][T10755] should_fail_ex+0x265/0x280 [ 158.874527][T10755] ? __pfx_proc_self_get_link+0x10/0x10 [ 158.874557][T10755] ? proc_self_get_link+0x97/0x110 [ 158.874592][T10755] should_failslab+0x8c/0xb0 [ 158.874650][T10755] __kmalloc_cache_noprof+0x4c/0x4a0 [ 158.874681][T10755] ? __pfx_proc_self_get_link+0x10/0x10 [ 158.874711][T10755] proc_self_get_link+0x97/0x110 [ 158.874743][T10755] pick_link+0x47d/0x830 [ 158.874813][T10755] step_into+0x790/0x7f0 [ 158.874842][T10755] ? inode_permission+0x106/0x310 [ 158.874874][T10755] link_path_walk+0x571/0x900 [ 158.874971][T10755] path_openat+0x1de/0x2170 [ 158.874993][T10755] ? _parse_integer_limit+0x170/0x190 [ 158.875041][T10755] do_filp_open+0x109/0x230 [ 158.875077][T10755] do_sys_openat2+0xa6/0x110 [ 158.875141][T10755] __x64_sys_openat+0xf2/0x120 [ 158.875175][T10755] x64_sys_call+0x2eab/0x3000 [ 158.875196][T10755] do_syscall_64+0xd2/0x200 [ 158.875221][T10755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.875277][T10755] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.875299][T10755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.875324][T10755] RIP: 0033:0x7f4392e5d710 [ 158.875357][T10755] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 158.875378][T10755] RSP: 002b:00007f439189df60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 158.875400][T10755] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4392e5d710 [ 158.875434][T10755] RDX: 0000000000000000 RSI: 00007f4392ee207e RDI: 00000000ffffff9c [ 158.875446][T10755] RBP: 00007f4392ee207e R08: 0000000000000000 R09: 0000000000000000 [ 158.875458][T10755] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 158.875470][T10755] R13: 00007f43930b6128 R14: 00007f43930b6090 R15: 00007ffcdb99b978 [ 158.875493][T10755] [ 159.165947][T10766] lo speed is unknown, defaulting to 1000 [ 159.212056][T10766] loop1: detected capacity change from 0 to 512 [ 159.223869][T10766] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2479: error while reading EA inode 32 err=-116 [ 159.240797][T10766] EXT4-fs (loop1): Remounting filesystem read-only [ 159.256329][T10766] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 159.267370][T10766] EXT4-fs (loop1): 1 orphan inode deleted [ 159.274214][T10766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.287175][T10766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.300492][T10772] loop2: detected capacity change from 0 to 128 [ 159.313704][T10774] FAULT_INJECTION: forcing a failure. [ 159.313704][T10774] name failslab, interval 1, probability 0, space 0, times 0 [ 159.326421][T10774] CPU: 1 UID: 0 PID: 10774 Comm: syz.6.2482 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.326514][T10774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.326549][T10774] Call Trace: [ 159.326555][T10774] [ 159.326562][T10774] __dump_stack+0x1d/0x30 [ 159.326587][T10774] dump_stack_lvl+0xe8/0x140 [ 159.326683][T10774] dump_stack+0x15/0x1b [ 159.326702][T10774] should_fail_ex+0x265/0x280 [ 159.326741][T10774] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 159.326819][T10774] should_failslab+0x8c/0xb0 [ 159.326849][T10774] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 159.326909][T10774] ? shmem_alloc_inode+0x34/0x50 [ 159.326933][T10774] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 159.326956][T10774] shmem_alloc_inode+0x34/0x50 [ 159.326977][T10774] alloc_inode+0x40/0x170 [ 159.327004][T10774] new_inode+0x1d/0xe0 [ 159.327169][T10774] shmem_get_inode+0x244/0x750 [ 159.327194][T10774] __shmem_file_setup+0x113/0x210 [ 159.327244][T10774] shmem_file_setup+0x3b/0x50 [ 159.327281][T10774] __se_sys_memfd_create+0x2c3/0x590 [ 159.327308][T10774] __x64_sys_memfd_create+0x31/0x40 [ 159.327334][T10774] x64_sys_call+0x2ac2/0x3000 [ 159.327394][T10774] do_syscall_64+0xd2/0x200 [ 159.327420][T10774] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.327453][T10774] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.327487][T10774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.327517][T10774] RIP: 0033:0x7fdc4421eec9 [ 159.327536][T10774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.327558][T10774] RSP: 002b:00007fdc42c7ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 159.327697][T10774] RAX: ffffffffffffffda RBX: 00000000000005d6 RCX: 00007fdc4421eec9 [ 159.327711][T10774] RDX: 00007fdc42c7edec RSI: 0000000000000000 RDI: 00007fdc442a2960 [ 159.327727][T10774] RBP: 0000200000000600 R08: 00007fdc42c7eb07 R09: 0000000000000000 [ 159.327742][T10774] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 159.327799][T10774] R13: 00007fdc42c7edec R14: 00007fdc42c7edf0 R15: 00007ffedf0f85d8 [ 159.327823][T10774] [ 159.541676][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 159.541740][ T29] audit: type=1400 audit(1760047309.014:13841): avc: denied { mount } for pid=10769 comm="syz.2.2480" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.592688][T10776] loop6: detected capacity change from 0 to 128 [ 159.604560][T10776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.638596][T10780] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2484'. [ 159.721517][T10785] vhci_hcd: invalid port number 96 [ 159.726663][T10785] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 159.767920][T10790] loop6: detected capacity change from 0 to 2048 [ 159.811280][T10790] loop6: p1 p2 p3 [ 159.818749][ T29] audit: type=1400 audit(1760047309.464:13842): avc: denied { write } for pid=10789 comm="syz.6.2490" name="loop6p1" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.834485][T10797] loop7: detected capacity change from 0 to 512 [ 159.848661][ T29] audit: type=1400 audit(1760047309.464:13843): avc: denied { open } for pid=10789 comm="syz.6.2490" path="/dev/loop6p1" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 159.872515][T10793] loop1: detected capacity change from 0 to 8192 [ 159.880279][T10797] EXT4-fs (loop7): too many log groups per flexible block group [ 159.888327][T10797] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 159.895570][T10797] EXT4-fs (loop7): mount failed [ 159.904606][ T29] audit: type=1400 audit(1760047309.554:13844): avc: denied { ioctl } for pid=10792 comm="syz.1.2491" path="socket:[33944]" dev="sockfs" ino=33944 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 159.999730][ T29] audit: type=1400 audit(1760047309.584:13845): avc: denied { bind } for pid=10792 comm="syz.1.2491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 160.019270][ T29] audit: type=1400 audit(1760047309.604:13846): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 160.084121][T10809] lo speed is unknown, defaulting to 1000 [ 160.093287][T10813] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2498'. [ 160.133898][ T29] audit: type=1400 audit(1760047309.754:13847): avc: denied { read } for pid=10810 comm="syz.7.2497" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 160.142879][T10814] loop1: detected capacity change from 0 to 512 [ 160.157323][ T29] audit: type=1400 audit(1760047309.754:13848): avc: denied { open } for pid=10810 comm="syz.7.2497" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 160.177369][T10816] lo speed is unknown, defaulting to 1000 [ 160.188250][ T29] audit: type=1400 audit(1760047309.764:13849): avc: denied { ioctl } for pid=10810 comm="syz.7.2497" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 160.296315][T10814] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2494: error while reading EA inode 32 err=-116 [ 160.320909][T10830] random: crng reseeded on system resumption [ 160.332516][T10823] lo speed is unknown, defaulting to 1000 [ 160.359338][T10814] EXT4-fs (loop1): Remounting filesystem read-only [ 160.382702][T10814] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 160.419538][T10814] EXT4-fs (loop1): 1 orphan inode deleted [ 160.442051][T10814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.499284][T10814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.521590][ T29] audit: type=1400 audit(1760047310.174:13850): avc: denied { mounton } for pid=10832 comm="syz.7.2504" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 160.572650][T10838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 160.634726][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2505'. [ 160.639442][T10843] FAULT_INJECTION: forcing a failure. [ 160.639442][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 160.656370][T10843] CPU: 1 UID: 0 PID: 10843 Comm: syz.1.2506 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.656402][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.656467][T10843] Call Trace: [ 160.656474][T10843] [ 160.656481][T10843] __dump_stack+0x1d/0x30 [ 160.656501][T10843] dump_stack_lvl+0xe8/0x140 [ 160.656521][T10843] dump_stack+0x15/0x1b [ 160.656538][T10843] should_fail_ex+0x265/0x280 [ 160.656601][T10843] should_failslab+0x8c/0xb0 [ 160.656627][T10843] kmem_cache_alloc_noprof+0x50/0x480 [ 160.656655][T10843] ? ioctx_alloc+0xf5/0x4e0 [ 160.656682][T10843] ? __fget_files+0x184/0x1c0 [ 160.656775][T10843] ioctx_alloc+0xf5/0x4e0 [ 160.656803][T10843] __se_sys_io_setup+0x6b/0x1b0 [ 160.656828][T10843] __x64_sys_io_setup+0x31/0x40 [ 160.656854][T10843] x64_sys_call+0x2f0e/0x3000 [ 160.656933][T10843] do_syscall_64+0xd2/0x200 [ 160.656958][T10843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.657045][T10843] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.657065][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.657089][T10843] RIP: 0033:0x7fa9ad7deec9 [ 160.657107][T10843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.657178][T10843] RSP: 002b:00007fa9ac23f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 160.657201][T10843] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 160.657216][T10843] RDX: 0000000000000000 RSI: 0000200000000b80 RDI: 0000000000000001 [ 160.657230][T10843] RBP: 00007fa9ac23f090 R08: 0000000000000000 R09: 0000000000000000 [ 160.657244][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.657256][T10843] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 160.657276][T10843] [ 160.876999][T10841] lo speed is unknown, defaulting to 1000 [ 160.906426][T10848] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2508'. [ 161.049445][T10862] FAULT_INJECTION: forcing a failure. [ 161.049445][T10862] name failslab, interval 1, probability 0, space 0, times 0 [ 161.062135][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.7.2513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.062196][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.062208][T10862] Call Trace: [ 161.062214][T10862] [ 161.062221][T10862] __dump_stack+0x1d/0x30 [ 161.062241][T10862] dump_stack_lvl+0xe8/0x140 [ 161.062317][T10862] dump_stack+0x15/0x1b [ 161.062337][T10862] should_fail_ex+0x265/0x280 [ 161.062391][T10862] should_failslab+0x8c/0xb0 [ 161.062423][T10862] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 161.062453][T10862] ? sidtab_sid2str_get+0xa0/0x130 [ 161.062554][T10862] kmemdup_noprof+0x2b/0x70 [ 161.062582][T10862] sidtab_sid2str_get+0xa0/0x130 [ 161.062613][T10862] security_sid_to_context_core+0x1eb/0x2e0 [ 161.062721][T10862] security_sid_to_context+0x27/0x40 [ 161.062752][T10862] selinux_lsmprop_to_secctx+0x67/0xf0 [ 161.062784][T10862] security_lsmprop_to_secctx+0x1a0/0x1c0 [ 161.062842][T10862] audit_log_subj_ctx+0xa4/0x3e0 [ 161.062864][T10862] ? skb_put+0xa9/0xf0 [ 161.062894][T10862] audit_log_task_context+0x48/0x70 [ 161.063001][T10862] audit_log_task+0xf4/0x250 [ 161.063035][T10862] ? kstrtouint+0x76/0xc0 [ 161.063066][T10862] audit_seccomp+0x61/0x100 [ 161.063099][T10862] ? __seccomp_filter+0x82d/0x1250 [ 161.063151][T10862] __seccomp_filter+0x83e/0x1250 [ 161.063180][T10862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.063293][T10862] ? vfs_write+0x7e8/0x960 [ 161.063326][T10862] __secure_computing+0x82/0x150 [ 161.063424][T10862] syscall_trace_enter+0xcf/0x1e0 [ 161.063457][T10862] do_syscall_64+0xac/0x200 [ 161.063495][T10862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 161.063527][T10862] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 161.063621][T10862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.063643][T10862] RIP: 0033:0x7f4392e5eec9 [ 161.063660][T10862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.063757][T10862] RSP: 002b:00007f43918bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 161.063776][T10862] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5eec9 [ 161.063788][T10862] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 161.063820][T10862] RBP: 00007f43918bf090 R08: 0000200000000180 R09: 0000000000000000 [ 161.063836][T10862] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.063851][T10862] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 161.063874][T10862] [ 161.477833][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2516'. [ 161.489442][T10880] bridge_slave_1: left allmulticast mode [ 161.491186][T10874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 161.495211][T10880] bridge_slave_1: left promiscuous mode [ 161.510468][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.564185][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2517'. [ 161.571253][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2516'. [ 161.583523][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2521'. [ 161.593376][T10880] bridge_slave_0: left allmulticast mode [ 161.599116][T10880] bridge_slave_0: left promiscuous mode [ 161.605189][T10880] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.727627][T10899] loop1: detected capacity change from 0 to 512 [ 161.752833][T10897] netlink: 'syz.7.2523': attribute type 13 has an invalid length. [ 161.760838][T10897] netlink: 'syz.7.2523': attribute type 27 has an invalid length. [ 161.777607][T10899] EXT4-fs (loop1): too many log groups per flexible block group [ 161.799846][T10899] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 161.808804][T10899] EXT4-fs (loop1): mount failed [ 161.843726][T10906] vhci_hcd: invalid port number 96 [ 161.848855][T10906] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 161.857247][T10906] netlink: 'syz.6.2526': attribute type 1 has an invalid length. [ 161.872554][T10906] bond3: entered promiscuous mode [ 161.877616][T10906] bond3: entered allmulticast mode [ 161.880675][T10901] loop8: detected capacity change from 0 to 128 [ 162.020948][T10924] loop6: detected capacity change from 0 to 256 [ 162.022147][T10901] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.028254][T10924] vfat: Unknown parameter 'u' [ 162.060937][T10909] SELinux: failed to load policy [ 162.161926][T10927] vhci_hcd: invalid port number 96 [ 162.167057][T10927] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 162.180194][T10901] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.191646][T10927] netlink: 'syz.7.2532': attribute type 1 has an invalid length. [ 162.237484][T10927] bond3: entered promiscuous mode [ 162.242583][T10927] bond3: entered allmulticast mode [ 162.390816][ T9253] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.455353][T10934] netlink: 'syz.8.2533': attribute type 6 has an invalid length. [ 162.518006][T10934] loop8: detected capacity change from 0 to 2048 [ 162.590704][T10934] loop8: p1 p2 p3 [ 162.707861][T10943] lo speed is unknown, defaulting to 1000 [ 162.743844][T10944] loop8: detected capacity change from 0 to 512 [ 162.797922][T10944] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2536: error while reading EA inode 32 err=-116 [ 162.821979][T10944] EXT4-fs (loop8): Remounting filesystem read-only [ 162.837556][T10944] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 162.849107][T10944] EXT4-fs (loop8): 1 orphan inode deleted [ 162.870030][T10944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.906127][T10944] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.032135][T10949] netlink: 'syz.6.2537': attribute type 13 has an invalid length. [ 163.040138][T10949] netlink: 'syz.6.2537': attribute type 27 has an invalid length. [ 163.173517][T10951] ªªªªªª: renamed from vlan0 [ 163.317812][T10961] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2538'. [ 163.321957][T10956] vhci_hcd: invalid port number 96 [ 163.332053][T10956] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.370435][T10965] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 163.380962][T10963] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2543'. [ 163.391297][T10956] netlink: 'syz.8.2540': attribute type 1 has an invalid length. [ 163.427688][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 163.441417][T10956] bond3: entered promiscuous mode [ 163.446671][T10956] bond3: entered allmulticast mode [ 163.493014][T10963] lo speed is unknown, defaulting to 1000 [ 163.527848][T10980] loop1: detected capacity change from 0 to 128 [ 163.691196][T10989] vhci_hcd: invalid port number 96 [ 163.696420][T10989] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.705040][T10987] vhci_hcd: invalid port number 96 [ 163.710368][T10987] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.718820][T10987] netlink: 'syz.6.2549': attribute type 1 has an invalid length. [ 163.727683][T10989] netlink: 'syz.8.2550': attribute type 1 has an invalid length. [ 163.747559][T10987] bond4: entered promiscuous mode [ 163.752629][T10987] bond4: entered allmulticast mode [ 163.804486][T10989] bond4: entered promiscuous mode [ 163.809585][T10989] bond4: entered allmulticast mode [ 164.551092][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 164.551105][ T29] audit: type=1326 audit(1760047314.204:14298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.580885][ T29] audit: type=1326 audit(1760047314.204:14299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.604406][ T29] audit: type=1326 audit(1760047314.204:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.628014][ T29] audit: type=1326 audit(1760047314.204:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.651617][ T29] audit: type=1326 audit(1760047314.204:14302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.675176][ T29] audit: type=1326 audit(1760047314.204:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.698900][ T29] audit: type=1326 audit(1760047314.204:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.727417][ T29] audit: type=1326 audit(1760047314.374:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdc4421eec9 code=0x7ffc0000 [ 164.796807][ T29] audit: type=1326 audit(1760047314.434:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdc44215d67 code=0x7ffc0000 [ 164.820657][ T29] audit: type=1326 audit(1760047314.434:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10998 comm="syz.6.2552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc441baf79 code=0x7ffc0000 [ 164.892238][T11008] vhci_hcd: invalid port number 96 [ 164.897638][T11008] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 164.906077][T11008] netlink: 'syz.1.2555': attribute type 1 has an invalid length. [ 164.908736][T11012] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 164.921544][T11008] bond3: entered promiscuous mode [ 164.928295][T11008] bond3: entered allmulticast mode [ 164.960924][T11012] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2557'. [ 165.202611][T11027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.214044][T11027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.223219][T11027] bond0 (unregistering): Released all slaves [ 165.387043][T11031] lo speed is unknown, defaulting to 1000 [ 165.619890][T11041] netlink: 'syz.8.2564': attribute type 1 has an invalid length. [ 165.636533][T11041] bond0: entered promiscuous mode [ 165.641729][T11041] bond0: entered allmulticast mode [ 165.731674][T11054] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 165.748244][T11054] __nla_validate_parse: 1 callbacks suppressed [ 165.748299][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2569'. [ 166.002900][T11073] bond4: entered promiscuous mode [ 166.007968][T11073] bond4: entered allmulticast mode [ 166.032675][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2577'. [ 166.045001][T11079] FAULT_INJECTION: forcing a failure. [ 166.045001][T11079] name failslab, interval 1, probability 0, space 0, times 0 [ 166.057766][T11079] CPU: 0 UID: 0 PID: 11079 Comm: syz.1.2578 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.057798][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.057810][T11079] Call Trace: [ 166.057815][T11079] [ 166.057822][T11079] __dump_stack+0x1d/0x30 [ 166.057843][T11079] dump_stack_lvl+0xe8/0x140 [ 166.057929][T11079] dump_stack+0x15/0x1b [ 166.057949][T11079] should_fail_ex+0x265/0x280 [ 166.058061][T11079] should_failslab+0x8c/0xb0 [ 166.058108][T11079] __kvmalloc_node_noprof+0x12e/0x670 [ 166.058137][T11079] ? alloc_fdtable+0xc2/0x1d0 [ 166.058161][T11079] alloc_fdtable+0xc2/0x1d0 [ 166.058259][T11079] dup_fd+0x4c7/0x540 [ 166.058284][T11079] copy_files+0x98/0xf0 [ 166.058316][T11079] copy_process+0xc5b/0x2000 [ 166.058357][T11079] kernel_clone+0x16c/0x5c0 [ 166.058419][T11079] ? vfs_write+0x7e8/0x960 [ 166.058442][T11079] __x64_sys_clone+0xe6/0x120 [ 166.058490][T11079] x64_sys_call+0x119c/0x3000 [ 166.058575][T11079] do_syscall_64+0xd2/0x200 [ 166.058597][T11079] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.058633][T11079] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.058659][T11079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.058684][T11079] RIP: 0033:0x7fa9ad7deec9 [ 166.058701][T11079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.058719][T11079] RSP: 002b:00007fa9ac23efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 166.058760][T11079] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 166.058775][T11079] RDX: 00002000000007c0 RSI: 0000000000000000 RDI: 0000000020000000 [ 166.058787][T11079] RBP: 00007fa9ac23f090 R08: 0000200000000940 R09: 0000200000000940 [ 166.058831][T11079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 166.058847][T11079] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 166.058868][T11079] [ 166.414033][T11102] bond5: entered promiscuous mode [ 166.419106][T11102] bond5: entered allmulticast mode [ 166.543311][T11120] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2596'. [ 166.599617][T11124] lo speed is unknown, defaulting to 1000 [ 166.680824][T11131] bond4: entered promiscuous mode [ 166.685868][T11131] bond4: entered allmulticast mode [ 166.828939][T11154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'. [ 166.882198][T11164] validate_nla: 3 callbacks suppressed [ 166.882215][T11164] netlink: 'syz.8.2612': attribute type 13 has an invalid length. [ 166.895541][T11164] netlink: 'syz.8.2612': attribute type 27 has an invalid length. [ 166.945163][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 166.966200][T11168] bridge_slave_1: left allmulticast mode [ 166.972404][T11168] bridge_slave_1: left promiscuous mode [ 166.978566][T11168] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.988508][T11168] bridge_slave_0: left allmulticast mode [ 166.994223][T11168] bridge_slave_0: left promiscuous mode [ 166.994406][T11168] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.031670][T11180] FAULT_INJECTION: forcing a failure. [ 167.031670][T11180] name failslab, interval 1, probability 0, space 0, times 0 [ 167.044382][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.8.2619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.044412][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.044428][T11180] Call Trace: [ 167.044435][T11180] [ 167.044444][T11180] __dump_stack+0x1d/0x30 [ 167.044467][T11180] dump_stack_lvl+0xe8/0x140 [ 167.044486][T11180] dump_stack+0x15/0x1b [ 167.044501][T11180] should_fail_ex+0x265/0x280 [ 167.044690][T11180] should_failslab+0x8c/0xb0 [ 167.044721][T11180] kmem_cache_alloc_noprof+0x50/0x480 [ 167.044758][T11180] ? audit_log_start+0x342/0x720 [ 167.044821][T11180] audit_log_start+0x342/0x720 [ 167.044847][T11180] audit_seccomp+0x48/0x100 [ 167.044952][T11180] ? __seccomp_filter+0x82d/0x1250 [ 167.044984][T11180] __seccomp_filter+0x83e/0x1250 [ 167.045016][T11180] ? __list_add_valid_or_report+0x38/0xe0 [ 167.045128][T11180] ? __set_next_task_fair+0x5b/0x150 [ 167.045154][T11180] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 167.045193][T11180] ? _raw_spin_unlock+0x26/0x50 [ 167.045233][T11180] __secure_computing+0x82/0x150 [ 167.045340][T11180] syscall_trace_enter+0xcf/0x1e0 [ 167.045431][T11180] do_syscall_64+0xac/0x200 [ 167.045454][T11180] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.045480][T11180] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.045505][T11180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.045531][T11180] RIP: 0033:0x7f3a1c64d8dc [ 167.045560][T11180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 167.045581][T11180] RSP: 002b:00007f3a1b0af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.045601][T11180] RAX: ffffffffffffffda RBX: 00007f3a1c8a5fa0 RCX: 00007f3a1c64d8dc [ 167.045614][T11180] RDX: 000000000000000f RSI: 00007f3a1b0af0a0 RDI: 0000000000000004 [ 167.045626][T11180] RBP: 00007f3a1b0af090 R08: 0000000000000000 R09: 0000000000000000 [ 167.045694][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.045706][T11180] R13: 00007f3a1c8a6038 R14: 00007f3a1c8a5fa0 R15: 00007ffde104df98 [ 167.045726][T11180] [ 167.260630][T11182] FAULT_INJECTION: forcing a failure. [ 167.260630][T11182] name failslab, interval 1, probability 0, space 0, times 0 [ 167.273570][T11182] CPU: 0 UID: 0 PID: 11182 Comm: syz.7.2620 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.273611][T11182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.273625][T11182] Call Trace: [ 167.273630][T11182] [ 167.273636][T11182] __dump_stack+0x1d/0x30 [ 167.273662][T11182] dump_stack_lvl+0xe8/0x140 [ 167.273738][T11182] dump_stack+0x15/0x1b [ 167.273757][T11182] should_fail_ex+0x265/0x280 [ 167.273792][T11182] should_failslab+0x8c/0xb0 [ 167.273818][T11182] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 167.273851][T11182] ? sidtab_sid2str_get+0xa0/0x130 [ 167.274007][T11182] ? skb_put+0xa9/0xf0 [ 167.274036][T11182] kmemdup_noprof+0x2b/0x70 [ 167.274061][T11182] sidtab_sid2str_get+0xa0/0x130 [ 167.274088][T11182] security_sid_to_context_core+0x1eb/0x2e0 [ 167.274163][T11182] security_sid_to_context+0x27/0x40 [ 167.274194][T11182] avc_audit_post_callback+0x9d/0x520 [ 167.274233][T11182] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 167.274282][T11182] common_lsm_audit+0x1bb/0x230 [ 167.274311][T11182] ? __pfx_bitmap_print_list_to_buf+0x1/0x10 [ 167.274343][T11182] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 167.274451][T11182] slow_avc_audit+0x104/0x140 [ 167.274491][T11182] avc_has_perm+0x13a/0x180 [ 167.274535][T11182] selinux_socket_create+0xff/0x180 [ 167.274559][T11182] security_socket_create+0x50/0x90 [ 167.274582][T11182] __sock_create+0xe0/0x5b0 [ 167.274603][T11182] __sys_socketpair+0x170/0x430 [ 167.274623][T11182] ? ksys_write+0x192/0x1a0 [ 167.274718][T11182] __x64_sys_socketpair+0x52/0x60 [ 167.274792][T11182] x64_sys_call+0x2bf6/0x3000 [ 167.274815][T11182] do_syscall_64+0xd2/0x200 [ 167.274842][T11182] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.274875][T11182] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.274975][T11182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.275044][T11182] RIP: 0033:0x7f4392e5eec9 [ 167.275059][T11182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.275080][T11182] RSP: 002b:00007f43918bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 167.275102][T11182] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5eec9 [ 167.275118][T11182] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 167.275197][T11182] RBP: 00007f43918bf090 R08: 0000000000000000 R09: 0000000000000000 [ 167.275212][T11182] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 167.275227][T11182] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 167.275250][T11182] [ 167.602484][T11194] wg2: entered promiscuous mode [ 167.607400][T11194] wg2: entered allmulticast mode [ 167.672347][T11205] lo speed is unknown, defaulting to 1000 [ 167.692424][T11214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 167.725985][T11214] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2634'. [ 167.803768][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 167.817164][T11233] netlink: 'syz.1.2641': attribute type 12 has an invalid length. [ 167.889043][T11249] FAULT_INJECTION: forcing a failure. [ 167.889043][T11249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.902345][T11249] CPU: 0 UID: 0 PID: 11249 Comm: syz.7.2649 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.902375][T11249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.902390][T11249] Call Trace: [ 167.902395][T11249] [ 167.902403][T11249] __dump_stack+0x1d/0x30 [ 167.902427][T11249] dump_stack_lvl+0xe8/0x140 [ 167.902450][T11249] dump_stack+0x15/0x1b [ 167.902507][T11249] should_fail_ex+0x265/0x280 [ 167.902593][T11249] should_fail+0xb/0x20 [ 167.902627][T11249] should_fail_usercopy+0x1a/0x20 [ 167.902727][T11249] _copy_from_iter+0xd2/0xe80 [ 167.902754][T11249] ? alloc_pages_mpol+0x217/0x260 [ 167.902820][T11249] copy_page_from_iter+0x178/0x2a0 [ 167.902845][T11249] tun_get_user+0x679/0x26e0 [ 167.902878][T11249] ? ref_tracker_alloc+0x1f2/0x2f0 [ 167.902924][T11249] tun_chr_write_iter+0x15e/0x210 [ 167.903011][T11249] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 167.903042][T11249] vfs_write+0x52a/0x960 [ 167.903076][T11249] ksys_write+0xda/0x1a0 [ 167.903104][T11249] __x64_sys_write+0x40/0x50 [ 167.903186][T11249] x64_sys_call+0x2802/0x3000 [ 167.903211][T11249] do_syscall_64+0xd2/0x200 [ 167.903238][T11249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.903300][T11249] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.903325][T11249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.903430][T11249] RIP: 0033:0x7f4392e5d97f [ 167.903526][T11249] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 167.903545][T11249] RSP: 002b:00007f43918bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 167.903567][T11249] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5d97f [ 167.903582][T11249] RDX: 000000000000004a RSI: 0000200000000240 RDI: 00000000000000c8 [ 167.903657][T11249] RBP: 00007f43918bf090 R08: 0000000000000000 R09: 0000000000000000 [ 167.903671][T11249] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001 [ 167.903686][T11249] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 167.903709][T11249] [ 167.954758][T11256] lo speed is unknown, defaulting to 1000 [ 168.055331][T11267] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2657'. [ 168.134361][T11267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.170480][T11267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.198400][T11267] bond0 (unregistering): Released all slaves [ 168.296059][T11278] lo speed is unknown, defaulting to 1000 [ 168.505092][T11301] lo speed is unknown, defaulting to 1000 [ 168.519228][T11303] FAULT_INJECTION: forcing a failure. [ 168.519228][T11303] name failslab, interval 1, probability 0, space 0, times 0 [ 168.531958][T11303] CPU: 0 UID: 0 PID: 11303 Comm: syz.8.2670 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.531985][T11303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.532054][T11303] Call Trace: [ 168.532060][T11303] [ 168.532067][T11303] __dump_stack+0x1d/0x30 [ 168.532089][T11303] dump_stack_lvl+0xe8/0x140 [ 168.532108][T11303] dump_stack+0x15/0x1b [ 168.532126][T11303] should_fail_ex+0x265/0x280 [ 168.532163][T11303] ? audit_log_d_path+0x8d/0x150 [ 168.532264][T11303] should_failslab+0x8c/0xb0 [ 168.532422][T11303] __kmalloc_cache_noprof+0x4c/0x4a0 [ 168.532521][T11303] audit_log_d_path+0x8d/0x150 [ 168.532580][T11303] audit_log_d_path_exe+0x42/0x70 [ 168.532602][T11303] audit_log_task+0x1e9/0x250 [ 168.532633][T11303] ? kstrtouint+0x76/0xc0 [ 168.532665][T11303] audit_seccomp+0x61/0x100 [ 168.532725][T11303] ? __seccomp_filter+0x82d/0x1250 [ 168.532772][T11303] __seccomp_filter+0x83e/0x1250 [ 168.532798][T11303] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.532826][T11303] ? vfs_write+0x7e8/0x960 [ 168.532853][T11303] __secure_computing+0x82/0x150 [ 168.532889][T11303] syscall_trace_enter+0xcf/0x1e0 [ 168.532949][T11303] do_syscall_64+0xac/0x200 [ 168.532975][T11303] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.533007][T11303] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.533101][T11303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.533123][T11303] RIP: 0033:0x7f3a1c64eec9 [ 168.533166][T11303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.533186][T11303] RSP: 002b:00007f3a1b0af038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 168.533209][T11303] RAX: ffffffffffffffda RBX: 00007f3a1c8a5fa0 RCX: 00007f3a1c64eec9 [ 168.533224][T11303] RDX: 0000000000004000 RSI: 0000200000ffc000 RDI: 0000000000000000 [ 168.533239][T11303] RBP: 00007f3a1b0af090 R08: 0000000000000000 R09: 0000000000000000 [ 168.533254][T11303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.533269][T11303] R13: 00007f3a1c8a6038 R14: 00007f3a1c8a5fa0 R15: 00007ffde104df98 [ 168.533290][T11303] [ 168.780856][T11313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2674'. [ 168.795339][T11313] FAULT_INJECTION: forcing a failure. [ 168.795339][T11313] name failslab, interval 1, probability 0, space 0, times 0 [ 168.808235][T11313] CPU: 0 UID: 0 PID: 11313 Comm: syz.2.2674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 168.808253][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 168.808261][T11313] Call Trace: [ 168.808265][T11313] [ 168.808280][T11313] __dump_stack+0x1d/0x30 [ 168.808294][T11313] dump_stack_lvl+0xe8/0x140 [ 168.808306][T11313] dump_stack+0x15/0x1b [ 168.808315][T11313] should_fail_ex+0x265/0x280 [ 168.808353][T11313] should_failslab+0x8c/0xb0 [ 168.808392][T11313] kmem_cache_alloc_noprof+0x50/0x480 [ 168.808454][T11313] ? audit_log_start+0x342/0x720 [ 168.808466][T11313] audit_log_start+0x342/0x720 [ 168.808477][T11313] ? kstrtouint+0x76/0xc0 [ 168.808531][T11313] audit_seccomp+0x48/0x100 [ 168.808605][T11313] ? __seccomp_filter+0x82d/0x1250 [ 168.808622][T11313] __seccomp_filter+0x83e/0x1250 [ 168.808638][T11313] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.808655][T11313] ? vfs_write+0x7e8/0x960 [ 168.808699][T11313] ? __rcu_read_unlock+0x4f/0x70 [ 168.808714][T11313] ? __fget_files+0x184/0x1c0 [ 168.808731][T11313] __secure_computing+0x82/0x150 [ 168.808751][T11313] syscall_trace_enter+0xcf/0x1e0 [ 168.808778][T11313] do_syscall_64+0xac/0x200 [ 168.808809][T11313] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 168.808831][T11313] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 168.808844][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.808902][T11313] RIP: 0033:0x7f74f025eec9 [ 168.808912][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.808923][T11313] RSP: 002b:00007f74eecbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 168.808935][T11313] RAX: ffffffffffffffda RBX: 00007f74f04b5fa0 RCX: 00007f74f025eec9 [ 168.808944][T11313] RDX: ffffffffffffffff RSI: 0000200000000140 RDI: ffffffffffffffff [ 168.809003][T11313] RBP: 00007f74eecbf090 R08: 0000000000000004 R09: 0000000000000000 [ 168.809010][T11313] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 168.809018][T11313] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 168.809087][T11313] [ 169.081916][T11323] FAULT_INJECTION: forcing a failure. [ 169.081916][T11323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.095182][T11323] CPU: 0 UID: 0 PID: 11323 Comm: syz.1.2679 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.095211][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.095255][T11323] Call Trace: [ 169.095261][T11323] [ 169.095269][T11323] __dump_stack+0x1d/0x30 [ 169.095294][T11323] dump_stack_lvl+0xe8/0x140 [ 169.095317][T11323] dump_stack+0x15/0x1b [ 169.095336][T11323] should_fail_ex+0x265/0x280 [ 169.095406][T11323] should_fail+0xb/0x20 [ 169.095433][T11323] should_fail_usercopy+0x1a/0x20 [ 169.095445][T11323] _copy_from_iter+0xd2/0xe80 [ 169.095498][T11323] ? __build_skb_around+0x1ab/0x200 [ 169.095514][T11323] ? __alloc_skb+0x223/0x320 [ 169.095529][T11323] netlink_sendmsg+0x471/0x6b0 [ 169.095547][T11323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.095584][T11323] __sock_sendmsg+0x145/0x180 [ 169.095598][T11323] ____sys_sendmsg+0x31e/0x4e0 [ 169.095617][T11323] ___sys_sendmsg+0x17b/0x1d0 [ 169.095641][T11323] __x64_sys_sendmsg+0xd4/0x160 [ 169.095678][T11323] x64_sys_call+0x191e/0x3000 [ 169.095691][T11323] do_syscall_64+0xd2/0x200 [ 169.095704][T11323] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.095720][T11323] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.095749][T11323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.095762][T11323] RIP: 0033:0x7fa9ad7deec9 [ 169.095772][T11323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.095861][T11323] RSP: 002b:00007fa9ac23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.095873][T11323] RAX: ffffffffffffffda RBX: 00007fa9ada35fa0 RCX: 00007fa9ad7deec9 [ 169.095881][T11323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.095888][T11323] RBP: 00007fa9ac23f090 R08: 0000000000000000 R09: 0000000000000000 [ 169.095924][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.095931][T11323] R13: 00007fa9ada36038 R14: 00007fa9ada35fa0 R15: 00007fff5fa41598 [ 169.095943][T11323] [ 169.371199][T11334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 169.415166][T11340] lo speed is unknown, defaulting to 1000 [ 169.530810][T11358] wireguard0: entered promiscuous mode [ 169.536276][T11358] wireguard0: entered allmulticast mode [ 169.563976][ T29] kauditd_printk_skb: 1273 callbacks suppressed [ 169.563991][ T29] audit: type=1400 audit(1760047319.214:15577): avc: denied { read write } for pid=11353 comm="syz.7.2691" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.596401][ T29] audit: type=1400 audit(1760047319.244:15578): avc: denied { read write } for pid=11357 comm="syz.1.2693" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.630123][ T29] audit: type=1326 audit(1760047319.284:15579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11350 comm="syz.7.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4392e5eec9 code=0x7ffc0000 [ 169.663754][ T29] audit: type=1400 audit(1760047319.314:15580): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 169.697689][ T29] audit: type=1400 audit(1760047319.344:15581): avc: denied { map_create } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.717618][ T29] audit: type=1400 audit(1760047319.344:15582): avc: denied { prog_load } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.737150][ T29] audit: type=1400 audit(1760047319.344:15583): avc: denied { prog_load } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.756388][ T29] audit: type=1400 audit(1760047319.344:15584): avc: denied { create } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 169.776095][ T29] audit: type=1400 audit(1760047319.344:15585): avc: denied { create } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 169.795866][ T29] audit: type=1400 audit(1760047319.344:15586): avc: denied { prog_load } for pid=11362 comm="syz.1.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 169.828360][T11375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.838319][T11375] bond0 (unregistering): Released all slaves [ 169.958262][T11393] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 169.967179][ T5095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 169.977680][ T5095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 170.013008][ T5095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 170.028467][ T5095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 170.066130][T11415] FAULT_INJECTION: forcing a failure. [ 170.066130][T11415] name failslab, interval 1, probability 0, space 0, times 0 [ 170.078833][T11415] CPU: 1 UID: 0 PID: 11415 Comm: syz.2.2715 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.078859][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.078872][T11415] Call Trace: [ 170.078877][T11415] [ 170.078884][T11415] __dump_stack+0x1d/0x30 [ 170.078905][T11415] dump_stack_lvl+0xe8/0x140 [ 170.078978][T11415] dump_stack+0x15/0x1b [ 170.078996][T11415] should_fail_ex+0x265/0x280 [ 170.079107][T11415] should_failslab+0x8c/0xb0 [ 170.079136][T11415] kmem_cache_alloc_noprof+0x50/0x480 [ 170.079165][T11415] ? prepare_creds+0x37/0x4c0 [ 170.079226][T11415] prepare_creds+0x37/0x4c0 [ 170.079307][T11415] lookup_user_key+0x12a/0xd10 [ 170.079332][T11415] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 170.079359][T11415] __se_sys_add_key+0x268/0x350 [ 170.079394][T11415] __x64_sys_add_key+0x67/0x80 [ 170.079455][T11415] x64_sys_call+0x28c8/0x3000 [ 170.079479][T11415] do_syscall_64+0xd2/0x200 [ 170.079509][T11415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.079538][T11415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.079562][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.079585][T11415] RIP: 0033:0x7f74f025eec9 [ 170.079673][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.079693][T11415] RSP: 002b:00007f74eecbf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 170.079713][T11415] RAX: ffffffffffffffda RBX: 00007f74f04b5fa0 RCX: 00007f74f025eec9 [ 170.079740][T11415] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 170.079754][T11415] RBP: 00007f74eecbf090 R08: ffffffffffffffff R09: 0000000000000000 [ 170.079767][T11415] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 170.079781][T11415] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 170.079802][T11415] [ 170.156114][T11423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.281624][T11423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.291564][T11423] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 170.301107][T11423] bond0 (unregistering): Released all slaves [ 170.554163][T11464] FAULT_INJECTION: forcing a failure. [ 170.554163][T11464] name failslab, interval 1, probability 0, space 0, times 0 [ 170.566961][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.2.2737 Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.566990][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.567002][T11464] Call Trace: [ 170.567008][T11464] [ 170.567014][T11464] __dump_stack+0x1d/0x30 [ 170.567036][T11464] dump_stack_lvl+0xe8/0x140 [ 170.567055][T11464] dump_stack+0x15/0x1b [ 170.567149][T11464] should_fail_ex+0x265/0x280 [ 170.567184][T11464] should_failslab+0x8c/0xb0 [ 170.567214][T11464] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 170.567254][T11464] ? __alloc_skb+0x101/0x320 [ 170.567290][T11464] __alloc_skb+0x101/0x320 [ 170.567318][T11464] netlink_alloc_large_skb+0xbf/0xf0 [ 170.567348][T11464] netlink_sendmsg+0x3cf/0x6b0 [ 170.567439][T11464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.567481][T11464] __sock_sendmsg+0x145/0x180 [ 170.567526][T11464] ____sys_sendmsg+0x31e/0x4e0 [ 170.567565][T11464] ___sys_sendmsg+0x17b/0x1d0 [ 170.567615][T11464] __x64_sys_sendmsg+0xd4/0x160 [ 170.567689][T11464] x64_sys_call+0x191e/0x3000 [ 170.567716][T11464] do_syscall_64+0xd2/0x200 [ 170.567760][T11464] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.567793][T11464] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.567819][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.567845][T11464] RIP: 0033:0x7f74f025eec9 [ 170.567877][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.567900][T11464] RSP: 002b:00007f74eecbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.567923][T11464] RAX: ffffffffffffffda RBX: 00007f74f04b5fa0 RCX: 00007f74f025eec9 [ 170.567939][T11464] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 170.567981][T11464] RBP: 00007f74eecbf090 R08: 0000000000000000 R09: 0000000000000000 [ 170.567995][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.568076][T11464] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 170.568098][T11464] [ 170.811828][T11478] FAULT_INJECTION: forcing a failure. [ 170.811828][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 170.824492][T11478] CPU: 0 UID: 0 PID: 11478 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 170.824573][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 170.824586][T11478] Call Trace: [ 170.824591][T11478] [ 170.824597][T11478] __dump_stack+0x1d/0x30 [ 170.824617][T11478] dump_stack_lvl+0xe8/0x140 [ 170.824710][T11478] dump_stack+0x15/0x1b [ 170.824741][T11478] should_fail_ex+0x265/0x280 [ 170.824779][T11478] should_failslab+0x8c/0xb0 [ 170.824810][T11478] kmem_cache_alloc_noprof+0x50/0x480 [ 170.824858][T11478] ? skb_clone+0x151/0x1f0 [ 170.824887][T11478] skb_clone+0x151/0x1f0 [ 170.824943][T11478] __netlink_deliver_tap+0x2c9/0x500 [ 170.824994][T11478] netlink_unicast+0x66b/0x690 [ 170.825025][T11478] netlink_sendmsg+0x58b/0x6b0 [ 170.825060][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.825116][T11478] __sock_sendmsg+0x145/0x180 [ 170.825140][T11478] sock_write_iter+0x1a7/0x1f0 [ 170.825245][T11478] do_iter_readv_writev+0x4a1/0x540 [ 170.825275][T11478] vfs_writev+0x2df/0x8b0 [ 170.825337][T11478] do_writev+0xe7/0x210 [ 170.825370][T11478] __x64_sys_writev+0x45/0x50 [ 170.825394][T11478] x64_sys_call+0x1e9a/0x3000 [ 170.825416][T11478] do_syscall_64+0xd2/0x200 [ 170.825543][T11478] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 170.825573][T11478] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 170.825599][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.825621][T11478] RIP: 0033:0x7f74f025eec9 [ 170.825635][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.825692][T11478] RSP: 002b:00007f74eecbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 170.825713][T11478] RAX: ffffffffffffffda RBX: 00007f74f04b5fa0 RCX: 00007f74f025eec9 [ 170.825739][T11478] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000004 [ 170.825752][T11478] RBP: 00007f74eecbf090 R08: 0000000000000000 R09: 0000000000000000 [ 170.825782][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.825793][T11478] R13: 00007f74f04b6038 R14: 00007f74f04b5fa0 R15: 00007ffcdef48888 [ 170.825823][T11478] [ 170.825838][T11478] netlink: '+}[@': attribute type 4 has an invalid length. [ 170.835962][T11475] netlink: 'syz.6.2741': attribute type 30 has an invalid length. [ 171.181980][T11488] FAULT_INJECTION: forcing a failure. [ 171.181980][T11488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.195144][T11488] CPU: 0 UID: 0 PID: 11488 Comm: syz.6.2745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.195162][T11488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.195208][T11488] Call Trace: [ 171.195232][T11488] [ 171.195236][T11488] __dump_stack+0x1d/0x30 [ 171.195250][T11488] dump_stack_lvl+0xe8/0x140 [ 171.195261][T11488] dump_stack+0x15/0x1b [ 171.195271][T11488] should_fail_ex+0x265/0x280 [ 171.195292][T11488] should_fail+0xb/0x20 [ 171.195311][T11488] should_fail_usercopy+0x1a/0x20 [ 171.195323][T11488] _copy_from_iter+0xd2/0xe80 [ 171.195415][T11488] ? __build_skb_around+0x1ab/0x200 [ 171.195430][T11488] ? __alloc_skb+0x223/0x320 [ 171.195474][T11488] netlink_sendmsg+0x471/0x6b0 [ 171.195492][T11488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.195508][T11488] __sock_sendmsg+0x145/0x180 [ 171.195520][T11488] ____sys_sendmsg+0x31e/0x4e0 [ 171.195564][T11488] ___sys_sendmsg+0x17b/0x1d0 [ 171.195629][T11488] __x64_sys_sendmsg+0xd4/0x160 [ 171.195648][T11488] x64_sys_call+0x191e/0x3000 [ 171.195660][T11488] do_syscall_64+0xd2/0x200 [ 171.195673][T11488] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.195696][T11488] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.195708][T11488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.195721][T11488] RIP: 0033:0x7fdc4421eec9 [ 171.195731][T11488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.195746][T11488] RSP: 002b:00007fdc42c7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.195758][T11488] RAX: ffffffffffffffda RBX: 00007fdc44475fa0 RCX: 00007fdc4421eec9 [ 171.195765][T11488] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 171.195772][T11488] RBP: 00007fdc42c7f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.195780][T11488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.195805][T11488] R13: 00007fdc44476038 R14: 00007fdc44475fa0 R15: 00007ffedf0f85d8 [ 171.195817][T11488] [ 171.557436][T11513] FAULT_INJECTION: forcing a failure. [ 171.557436][T11513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.570653][T11513] CPU: 1 UID: 0 PID: 11513 Comm: syz.7.2757 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.570721][T11513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.570777][T11513] Call Trace: [ 171.570827][T11513] [ 171.570831][T11513] __dump_stack+0x1d/0x30 [ 171.570845][T11513] dump_stack_lvl+0xe8/0x140 [ 171.570856][T11513] dump_stack+0x15/0x1b [ 171.570866][T11513] should_fail_ex+0x265/0x280 [ 171.570886][T11513] should_fail+0xb/0x20 [ 171.570916][T11513] should_fail_usercopy+0x1a/0x20 [ 171.570970][T11513] _copy_from_iter+0xd2/0xe80 [ 171.570983][T11513] ? __build_skb_around+0x1ab/0x200 [ 171.570998][T11513] ? __alloc_skb+0x223/0x320 [ 171.571043][T11513] netlink_sendmsg+0x471/0x6b0 [ 171.571062][T11513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.571111][T11513] __sock_sendmsg+0x145/0x180 [ 171.571129][T11513] ____sys_sendmsg+0x31e/0x4e0 [ 171.571168][T11513] ___sys_sendmsg+0x17b/0x1d0 [ 171.571192][T11513] __x64_sys_sendmsg+0xd4/0x160 [ 171.571211][T11513] x64_sys_call+0x191e/0x3000 [ 171.571224][T11513] do_syscall_64+0xd2/0x200 [ 171.571255][T11513] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.571272][T11513] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.571291][T11513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.571320][T11513] RIP: 0033:0x7f4392e5eec9 [ 171.571360][T11513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.571371][T11513] RSP: 002b:00007f43918bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.571383][T11513] RAX: ffffffffffffffda RBX: 00007f43930b5fa0 RCX: 00007f4392e5eec9 [ 171.571390][T11513] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 171.571398][T11513] RBP: 00007f43918bf090 R08: 0000000000000000 R09: 0000000000000000 [ 171.571406][T11513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.571457][T11513] R13: 00007f43930b6038 R14: 00007f43930b5fa0 R15: 00007ffcdb99b978 [ 171.571519][T11513] [ 171.801692][T11517] can0: slcan on ptm0. [ 171.860237][T11517] can0 (unregistered): slcan off ptm0. [ 171.930193][T11540] __nla_validate_parse: 6 callbacks suppressed [ 171.930209][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2770'. [ 172.026618][T11545] bond0: left allmulticast mode [ 172.031741][T11545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.083379][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2780'. [ 172.086663][T11559] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2779'. [ 172.092893][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2780'. [ 172.166467][T11570] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2784'. [ 172.218714][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2787'. [ 172.294926][T11592] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 172.320029][T11592] SET target dimension over the limit! [ 172.338353][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2796'. [ 172.338385][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2796'. [ 172.338470][T11597] ================================================================== [ 172.338498][T11597] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 172.338529][T11597] [ 172.338535][T11597] write to 0xffffffff88e2ac0c of 53 bytes by task 11601 on cpu 0: [ 172.338552][T11597] vsnprintf+0x2ce/0x890 [ 172.338581][T11597] vscnprintf+0x41/0x90 [ 172.338608][T11597] printk_sprint+0x30/0x2d0 [ 172.338628][T11597] vprintk_store+0x599/0x860 [ 172.338647][T11597] vprintk_emit+0x10d/0x580 [ 172.338674][T11597] vprintk_default+0x26/0x30 [ 172.338694][T11597] vprintk+0x1d/0x30 [ 172.338723][T11597] _printk+0x79/0xa0 [ 172.338759][T11597] __nla_validate_parse+0x1738/0x1d00 [ 172.338779][T11597] __nla_parse+0x40/0x60 [ 172.338796][T11597] rtnl_newlink+0x793/0x12d0 [ 172.338826][T11597] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 172.338856][T11597] netlink_rcv_skb+0x120/0x220 [ 172.338880][T11597] rtnetlink_rcv+0x1c/0x30 [ 172.338910][T11597] netlink_unicast+0x5bd/0x690 [ 172.338935][T11597] netlink_sendmsg+0x58b/0x6b0 [ 172.338966][T11597] __sock_sendmsg+0x145/0x180 [ 172.338984][T11597] ____sys_sendmsg+0x31e/0x4e0 [ 172.339014][T11597] ___sys_sendmsg+0x17b/0x1d0 [ 172.339046][T11597] __x64_sys_sendmsg+0xd4/0x160 [ 172.339077][T11597] x64_sys_call+0x191e/0x3000 [ 172.339102][T11597] do_syscall_64+0xd2/0x200 [ 172.339125][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.339150][T11597] [ 172.339158][T11597] read to 0xffffffff88e2ac40 of 8 bytes by task 11597 on cpu 1: [ 172.339178][T11597] data_push_tail+0xfd/0x420 [ 172.339200][T11597] data_alloc+0xfb/0x2e0 [ 172.339232][T11597] prb_reserve+0x807/0xaf0 [ 172.339247][T11597] vprintk_store+0x56d/0x860 [ 172.339275][T11597] vprintk_emit+0x10d/0x580 [ 172.339299][T11597] vprintk_default+0x26/0x30 [ 172.339323][T11597] vprintk+0x1d/0x30 [ 172.339354][T11597] _printk+0x79/0xa0 [ 172.339385][T11597] __nla_validate_parse+0x1738/0x1d00 [ 172.339405][T11597] __nla_parse+0x40/0x60 [ 172.339424][T11597] rtnl_newlink+0x793/0x12d0 [ 172.339457][T11597] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 172.339492][T11597] netlink_rcv_skb+0x120/0x220 [ 172.339517][T11597] rtnetlink_rcv+0x1c/0x30 [ 172.339549][T11597] netlink_unicast+0x5bd/0x690 [ 172.339572][T11597] netlink_sendmsg+0x58b/0x6b0 [ 172.339602][T11597] __sock_sendmsg+0x145/0x180 [ 172.339623][T11597] ____sys_sendmsg+0x31e/0x4e0 [ 172.339655][T11597] ___sys_sendmsg+0x17b/0x1d0 [ 172.339686][T11597] __x64_sys_sendmsg+0xd4/0x160 [ 172.339714][T11597] x64_sys_call+0x191e/0x3000 [ 172.339735][T11597] do_syscall_64+0xd2/0x200 [ 172.339759][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.339784][T11597] [ 172.339790][T11597] value changed: 0x00000000ffffef65 -> 0x3937322e372e7a79 [ 172.339806][T11597] [ 172.339811][T11597] Reported by Kernel Concurrency Sanitizer on: [ 172.339824][T11597] CPU: 1 UID: 0 PID: 11597 Comm: syz.7.2796 Not tainted syzkaller #0 PREEMPT(voluntary) [ 172.339850][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.339864][T11597] ================================================================== [ 172.421172][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 172.436640][T11597] netlink: 236 bytes leftover after parsing attributes in process `syz.7.2796'.