last executing test programs: 2m27.671605512s ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r7, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 2m26.533372951s ago: executing program 4 (id=13): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x11003a, 0x577, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x18) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@init_itable}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r9 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r10, &(0x7f0000000140)='2', 0xfdef, 0xfecc) writev(r9, &(0x7f0000000480)=[{&(0x7f0000001980)="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", 0x1000}, {&(0x7f0000000280)="405d9d3b89a6ac444cebab878cc612", 0xf}, {&(0x7f0000000380)="74b796e841325ca258a487db5174feb1f6e60a2f37b7328f958988c345049752765b", 0x22}], 0x3) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000040)={0xc, r9, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010eb4a9400"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b0000000000"], 0x28}}, 0x0) sendmmsg(r7, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="f2", 0x1}], 0x1}}], 0x2, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\x02\x00\x00\xe2Q\x00\x00H\x905P.D\x01\x00a=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x63) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) socket$inet(0x2, 0x80000, 0x7) 2m24.912773566s ago: executing program 4 (id=18): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="60a03a5448d92dfd1c774f1a3f84f5f222327155782488c35e4a468668e0bc7a475aeec1ab601cc929fe570a9f80367396bfb2039007f18b2e6a38c433c58e5e555b2878383a736d36bd5642dde1596848f6301a0ab5e16bf4b68df7e007c257aa982db34c725b3fc86cda8d459348ebed69e0df69e03da16e781a5140e1af"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x62) write$P9_RREADLINK(r6, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x100000000) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x3000046, &(0x7f0000001a80)={[{@delalloc}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x8001}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd2}}, {@abort}, {@nodelalloc}, {@nobh}, {@user_xattr}, {@dioread_lock}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") listxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KDGKBMETA(r7, 0x4b62, &(0x7f0000000000)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='vnet_skip_tx_trigger\x00', r8, 0x0, 0x8000000003}, 0x18) socket$igmp6(0xa, 0x3, 0x2) 2m23.472142724s ago: executing program 4 (id=31): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 2m23.458232866s ago: executing program 32 (id=31): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000e00"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) 36.864229401s ago: executing program 3 (id=2355): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7ff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 36.797246037s ago: executing program 3 (id=2358): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x240000c0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 36.720844655s ago: executing program 3 (id=2360): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 36.699836267s ago: executing program 3 (id=2361): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000340)={[{@dioread_lock}, {@oldalloc}, {@usrquota}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@grpquota}]}, 0x11, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x80, 0x0, @mcast2}, 0x1, {[0x0, 0x7ff]}}, 0x5c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x23) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x3, 0x8, 0x8, 0x3}, {0x10, 0x3, 0x9, 0x7}, {0xd5a, 0x47, 0x5d, 0x401}, {0x0, 0xff, 0x92, 0x2}, {0x82, 0x8c, 0x80, 0x2}, {0x8, 0x7, 0x9, 0x4}]}) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) unshare(0x22060600) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x4}, &(0x7f0000000240)=0x28) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 36.254349519s ago: executing program 3 (id=2366): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0xe02e) sendmsg$kcm(r3, &(0x7f0000000bc0)={&(0x7f00000006c0)=@nl=@unspec, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)="b3", 0x1}], 0x1}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf251500000028002b801c00038006000100ffff000008000200020000000800020003000000080001000000000008000300", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4c011}, 0x800) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) readahead(0xffffffffffffffff, 0xfffbfffffffffff7, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) 34.903870689s ago: executing program 3 (id=2382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10000000000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff9, 0xc0041) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0x98, &(0x7f0000000280)={0xfd, 0x9, 0x9}}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000180)={0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x47, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) 34.903511869s ago: executing program 33 (id=2382): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x10000000000001) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) r7 = syz_open_dev$loop(&(0x7f0000000000), 0xfffffffffffffff9, 0xc0041) ioctl$BLKPG(r7, 0x1269, &(0x7f0000000080)={0x2, 0x0, 0x98, &(0x7f0000000280)={0xfd, 0x9, 0x9}}) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000180)={0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x47, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10) socket$key(0xf, 0x3, 0x2) 2.764761516s ago: executing program 6 (id=3111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x122}}, 0x0) 2.71405498s ago: executing program 6 (id=3113): lsetxattr$security_ima(0x0, &(0x7f0000000140), &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], 0xe1, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 2.671521484s ago: executing program 6 (id=3114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffff0000080045f1ff2b00ce5f8d91fddf5000000000119078ac1e0000ffffffff00c1001890780400000000000000020000a6f2fdf9aa7e187a57b4229ed430af08b0d44d5a63f2ec718f2548fe3013c11ce4f05a45d1b05205ccf4cb1340dc41f0658fd121abff1c983bfd858f7481ba0bdcd71688106bc6ebfbe7eb7733c0c3098be8a69b486b9174608fa232ec4d57"], 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', '', [], 0xa, "82bb4ade64246674044ed181"}, 0x10) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r5, 0x0, 0x2144}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffff6f11}, {0x0, 0x0, 0x0, 0x0, 0xde8}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffa}, {}, {}, {0x0, 0x0, 0x0, 0x20000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xec5}], [{}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1, 0x6237f348ff2383ba}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x201c2, 0x0) fcntl$setlease(r7, 0x400, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r7}, 0x8) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) inotify_init1(0x0) socket(0xa, 0x3, 0x3a) r10 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000280)={r11, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.872326011s ago: executing program 1 (id=3135): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x7ff}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="0100000000000000000006000000140008"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 1.351951201s ago: executing program 1 (id=3126): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0xa00, 0x1001) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 1.227592743s ago: executing program 1 (id=3128): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func_proto]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fdatasync(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x80) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8) clock_nanosleep(0x2, 0x1000000, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 1.006829204s ago: executing program 1 (id=3133): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffeda, &(0x7f0000000040)={&(0x7f0000000940)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x3}, {0xad, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4044890) (async) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000240)={@mcast1, 0x30, r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r10, &(0x7f0000001ac0)={0x0, 0xfefb, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYRES16=r1, @ANYRESHEX=r10, @ANYBLOB="4c6817b9229085b8d53497b111697c5c9c3a4f0e9e8973514fa4af2f43f0ded0d3623a910015bf5999798583aa133e25253806000000000000004f52d4180030a4ca04d2ff973f4a0c2a79ab7c51775e633b4ec44a7647b4b6"], 0x20}, 0x1, 0x0, 0x0, 0x24040c80}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r12 = socket(0x10, 0x803, 0x0) (rerun: 64) getsockname$packet(r12, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010425bd7000fedbdf2500000000", @ANYRES32=r13, @ANYBLOB="7808020001a20100200012800900010069706970000000001000028006000f0008"], 0x40}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010102}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044841}, 0x4000080) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback, 0x0}, &(0x7f0000000080)=0xc) (async) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r16, {0xfff1, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x700, 0x81, 0x4c0, {{0x19, 0x4, 0x1, 0x15, 0x64, 0x66, 0x0, 0x1, 0x0, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x13, 0x20, [@dev={0xac, 0x14, 0x14, 0x33}, @multicast1, @rand_addr=0x64010101, @remote]}, @rr={0x7, 0x1b, 0x1b, [@broadcast, @private=0xa010100, @broadcast, @multicast1, @empty, @broadcast]}, @rr={0x7, 0x1b, 0x9, [@multicast2, @rand_addr=0x64010102, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)={0x3fc, r4, 0x20, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1b}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1a47}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20008010}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x84, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc, 0x1f, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0xa0}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r18 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x3001, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r18, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 963.543828ms ago: executing program 6 (id=3134): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 960.974558ms ago: executing program 1 (id=3145): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 960.065949ms ago: executing program 6 (id=3136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x240000c0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 906.256764ms ago: executing program 1 (id=3139): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000480)) close_range(r0, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000a2a969476d3bfa59b91201dffff8eb56c2579e6a4a266cb236ed038dfa5ac54d027470f90027585ed0d3d226bdce02ec04d78a5ab81f0092ee8fbc01b499aa4a2da06acb12f2b2627dfa4d4f7a9afb289312856cb5f9f272f08a42580ce47cc7a459ef5309274832ffa331c023825e1ac2012f91d7d1c512b7aae12d7e8c175aaa6b83edab89f6987a4de2c576ad527d3a995cc7a8afec4d140cb5633b5d520dbf43400ac94a6b07cf0824e6c32bebdda1f0f638d80dfbc00389feed70385aa0f5c3ae483ceaec86c234db21e1125c0be48f2e8b57af844083a0fbe790a8f6c516dfa719c80a9e06e95d46eb8baee419c64b553de8"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) recvfrom$inet_nvme(r3, &(0x7f0000000240)=""/50, 0x32, 0x2001, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x40}}}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket(0x10, 0x3, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x24008005}, 0x4) sendmsg$xdp(r3, &(0x7f0000000bc0)={&(0x7f00000004c0)={0x2c, 0x2, r10, 0x19}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000540)}, {&(0x7f0000000840)="a785b292a79eb08a6bf9cd564da3c13ab95bf97fea9c0de65bdcbdd43e098902d37bd2484cf9e820bb3ac3a5d47507443bb5b0212347a33813ffab2631e2a210202ac368dfb480628c1a7283aaac61d3ddc9e49b701866a8244b29a7129d129e7595e633ea6e8ae124abd8b0bdf3499a98c2f0f7d4ac6fbe1f9807c316580a9d88bc840afeac9e065ffb5fc51c8966347fae3f65a5d87c326a", 0x99}, {&(0x7f0000000900)="7099023eb92c5334c26da9bb7bf2929732b23bf106de922a5ef1d145e840a7a5774a2f8440f62ef86a36f3662e7b6b2d3942454a69438b1f6f535c43fd9ec2ec093f65b8d2eb2f610ddfcd1a949724cbd4cfa79c47fb7d3b123b646cf25362db4ffd4367985825a9d170e95699e4a987c310a0563ccbd199d2545fc5bee33cc9efba5e35e1c6bc49e6d7eabd70910e22845a4d9e53906df4049c340f105332637faaa8029379e9", 0xa7}, {&(0x7f0000000580)="e4", 0x1}, {&(0x7f00000009c0)="d840958fc0d945e7131802b4a74cb2670bd8ae05dc2286574b04aad81427c3d72b03079ce02f6afa5d150d82eff88ade7a0a972579da336398ceaaafd4c03c36f69c3f7c89a473cc89d7d8f5fb6551245c373c0ed82dd1e834ef2e4bcea67b3e3e0018bd101f98a4bcc636621e194d30874c457972e03bb73592d1e4aa6947543075ee59f5e010d04245fe3577032e4cd712dcf2984428cae02daf78145efa2cd52d6883", 0xa4}, {&(0x7f0000000a80)="27c903f9f8081ecb6d817b4e9e54df8d663a5e12c13e29de94c3d275d7a5bf7e7b51dc4bc29190febe787e65e0d5038f63173b7683f90d6ec5356893f3dc1b92b7b1c1f6477b7277403747fcc3fe53194aa6d3557bef971c2d13f759e19506ea5880093b0de3002a201b5d9c2428675ef779bbb6b23f12467fbe587b703f957d80d636a1b7bf700481ac6a0c909eb3aa3d42a90ff5a2ab324e834f7f9f6ab490e484bb154de8e8bfe85c277fe28ca9cf3734688c59588880c4a806e39ee1b5f7b584a40895f3f2f2a4e6509d2b5c85b57ed8a635c04443c525e0453f8e140aa32baf093e40", 0xe5}, {&(0x7f0000000b80)='O', 0x1}, {&(0x7f0000000c40)="f9f67d9d95da40f29d3bd6fe8d11f39c422717f2683085052baa7f9002d346c76ac21362395c8b71a2b484115e05b42d8a8f5abd1f919850e407266985393a1da45be5b6ad73bb133f29c00c6aebb1c1aa2a3e471a83878ed3c6f7ac31b13ea8f8acaf07c219bea1c361100a9c0c0b16a460454f9785b80eb9e7e1ea7f0863f49d492d5e1002517a25647ce5d4a7df6d3d7b65322f904b0f1677fef68349ae13daa5215b39cabc0d8c752f0113a331c55a2ef143183147454404b3ff65b202fa28a1fe2e7a0476bcfabc708d9828", 0xce}], 0x8, 0x0, 0x0, 0x20000050}, 0x4001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000640)={0x9, 0x108, 0xfa00, {r11, 0x28, "dc94be", "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"}}, 0x110) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001200add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 840.64709ms ago: executing program 6 (id=3142): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x400, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xffffffef, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @rand_addr, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x802, 0x88) sendto$inet6(r4, 0x0, 0x0, 0xcc844, &(0x7f0000000180)={0xa, 0x4e23, 0xa19, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r7, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 775.532066ms ago: executing program 2 (id=3146): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016f006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 656.066628ms ago: executing program 2 (id=3147): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(r0, 0x2116) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x5c, 0x0, 0x7, 0x200, 0x0, 0x0, {0x5}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9f0b}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x40048c1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x300b85d, &(0x7f0000000740)={[], [{@smackfsfloor={'smackfsfloor', 0x3d, '*$'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@euid_lt={'euid<', r1}}]}, 0x64, 0x517, &(0x7f0000000140)="$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") 655.365868ms ago: executing program 2 (id=3149): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="b001033a", @ANYRES16=r1, @ANYBLOB="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"], 0x1b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) ftruncate(r2, 0xf4ff) pwrite64(r2, &(0x7f0000000cc0)="6f6b3dbfd4", 0x5, 0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)) r3 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x9316e6fb81c276de, 0xf4, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) stat(&(0x7f0000004400)='./file0\x00', &(0x7f0000004440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000044c0)=0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r8 = getgid() lchown(0x0, 0x0, r8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)="ca6caa3d", 0x4}, {&(0x7f00000004c0)="b061d1694f25d1d8dcb645a768045a8b4cee6dc8d38114a16fe80101aca1c9a88345d2d93fdfec5ad00befdad185c841e70eb89c283254fdd6295ab9b442a98ff9b64a852be3bdf3076b20de011d6cdaf31c3416a7438ad93cb6a06f33740bbaa6f090cc7ee403992767a5c42fa5d77af986e2f6ca40f4aaab10f3fb85f41de381c589cbd577c10dc1a2766e159de9a9e11c4b3691826d3d74ff3cc9291b1ac2a371d7202df0aede125538852e", 0xad}, {&(0x7f0000000580)="e5745e6ebcfd3fcaf3d2e17fc26dc4a44f30a5e657d54611bedda707cbfa79b9fdb29e9694baa3b6587d274c0b4fb8746cd20fccd92a1da949634d57d7d49814ae9ae61d9fc693af9c404be29223a423b65ee767c9840ab5bbef098f6f2c8421e2e6fd2498465308170d79dd5d8525af2d90d2198b29a7d69e0a851e955f8d2be0", 0x81}, {&(0x7f0000000640)="6ada2bd2cc464c17c2c905c1a299a99efcffa6585c4b96429c8ad59542bb18e025d387aa408bb956414fdbfcead03946d8f02034ca42bc0c7ab0bf05fd3e5118d9878b81376e1c694a705882c55931ac99f1de140e2faa1e0c97e771efdc8dd0b16abd73f54a1ed197bb16a48859047204809ca9d178ef15b165dd189b4c49446142be2c741b1b45a57db5f52369ae10914a6f81498db5cdaff2b0f5dcae4c79eb0e3af964a2cbfcb98a0e2fae17db93", 0xb0}, {&(0x7f0000000700)="e3a7ac8d764245df4703d9959e03918bcd9fc59ca2b94defaf05fd33b6991fc20b56e7e7a2ddd859d1fd778e23355e35233237be4db5928547a38fd2f182d87187e914c2f5b8868551eaac89fb7a2418bafd914ea96165fc5f436cfb3e770d5374d4f325b76fd4169fed8454db23ab22c8f5d4b73d3885f714256806f7ab63618632225a9cdb27eb57990cc7ec91901dcc4469ad4458434bcf1791f7c6e15b8c2649edee13b240917ef65adfedefb53e68e95e61b527e0283961", 0xba}, {&(0x7f0000001a80)="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", 0x1000}], 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="1800020000000078427d390001000000010000001b09e130d3c563ecde9630978988cb92e7d3d1a54d57af57679988fa2bab453d981ff2cb726abb398ca3b9a8d8541d5456b7729aef04275169f82d651b400616fdf2cd60f2b3565cc752910014fad22d59b792873a00000000024cb1b3c4f242d82b4c432e6279b31f3d250a1a006bc421a33765a2d6b86839c38679ab4c14292b318e099614be410881c2c9ba72976142c85711b569baff26f792ecf270ee628f84c9aaef25ff1a59e823c295f70752849f49cc2d15a14d92a606733efcc576027e2d8abe7b18ab1b72", @ANYRES32=r5, @ANYRES32], 0x18, 0x8000}}, {{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a80)=[{0x0}, {&(0x7f0000000980)="b7176c298ec358ff4a1aa662cf4efbf6ca7c225bd03186d65a0d86ee02dbcd5061c7ff8d20f6adeabe97339cdb4fe98a7033f66edd581f9937d7f8ae1186f9c96f243f075903d197d335f8e4c97e6306b231d3f9c92f5ddc0002da3e151c3a0c1ece2f90736c4d51d05dc991306c3b7ca9f15b218343bd498cc2c8d9ab8bb181caafe9932cdf1fdb17232b9e0ffe16fbeb00533aeb77ba76706f3b467e0f73d9c7f6cc6e75c7c553ec1e0a2be836197c91e771e21d8c5440e199cbd001b01ecd4197eabc9d145070cb74bb3f0734", 0xce}], 0x2, &(0x7f0000000d00)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000f4ff0c01007e0000385a713dd90000000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889fa3854c517ad74e95c219f8", 0xbb}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {&(0x7f0000003d80)="21d629aff76362815634215367c3e3ae5f71d33fd5fa7a42f624bc06ba6173fd8d9d32ce93ec53731fec0ada6b741481bf", 0x31}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000003e40)="35faf0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c7c4c2e57a72acaff94a5c17c3cb2abd88335663", 0x4b}], 0x7, 0x0, 0x0, 0x800}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000003fc0)="0d823f77e3b138553bfbdec1c5fff465f639607a8c77cc9457a605e41c7a0878d4dcb72c845c326136754544ced8ead1344ece0fc55f0d83fea2b18a51aed015ece6e918", 0x44}, {&(0x7f0000004040)="ae528d0c38de4bfae46c16c1be56dbfc2905a0879fe655b8accc30c56a21432cad6f0ba64996d025dc00ce264cb2d630393b95d43ac7c6747d89d45506795ff19b055e5c585964ca2e5c9eca44bf362065830afe3634218baa45eb06ab13f0b94bedabeebf9e000457f1507af74f0070fb5cfeac92833079460fbef76a1d7788fc8233107a680dc8c757dc4c36a17bf2aa96ec18db1af3c2a9", 0x99}, {&(0x7f0000004100)="0d990965ee85d72e16e1b8c8cb2e69200e8027539a9202bfb7663d51360390732fd3481341b0fa73a0ae645c423b5c534dc08f0f48a4dc28ab5605d15b", 0x3d}], 0x3, &(0x7f0000004500)=[@rights={{0x1c, 0x1, 0x1, [r3, r5, r5]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0x0, r8}}}, @rights={{0x2c, 0x1, 0x1, [r9, 0xffffffffffffffff, r3, r4, r4, r4, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r10, 0xffffffffffffffff, r5, r5, r4]}}, @rights={{0x20, 0x1, 0x1, [r4, r3, r3, r5]}}], 0x110, 0x811}}], 0x4, 0x40001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 374.404035ms ago: executing program 0 (id=3151): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="00080400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x7f, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x30, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/55, 0x3e, 0x37, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000291400001000000018410000000000000000000000000000950000000000000085100000ffffffff852000000300000085100000f8ff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[{0x4, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x4, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xf, 0x6}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x8}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_ACT={0x488, 0x4, [@m_police={0x484, 0x3, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x4b8}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2be, &(0x7f00000008c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r8, r8, 0x0, 0x800000007) 210.27615ms ago: executing program 0 (id=3153): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0xa00, 0x1001) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 191.584792ms ago: executing program 5 (id=3154): syz_io_uring_setup(0x5f4a, 0x0, &(0x7f0000000040)=0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r2, @ANYBLOB="010010000000000000000c"], 0x58}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="230003000000"], 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 188.975282ms ago: executing program 0 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001400038010"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a3000000000"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) 184.693713ms ago: executing program 5 (id=3155): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00080400"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x7f, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x30, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/55, 0x3e, 0x37, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000291400001000000018410000000000000000000000000000950000000000000085100000ffffffff852000000300000085100000f8ff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[{0x4, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x4, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xf, 0x6}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x8}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_ACT={0x488, 0x4, [@m_police={0x484, 0x3, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x4b8}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2be, &(0x7f00000008c0)="$eJzs3E1rE1sYwPEnmTST9tKX1YV7Nz7oRjdDjUsVGqUFMaCkHVEXwpRONSQmZSZoIoJZu+rnKC7dCeIX6N4P4K4I0lVXjjSZTCcxfQs1qen/B2XOOc85M2fmtPCcwszO482XpXXfWndqksyoJEWasicyJ0XpSITHdKucjtrldlaacm3+1e775SdP7+fy+cWC6lJu5UZWVWcufX799sPlL7V/Hn2cMU3Znnu28yP7bfvf7f92fq68KPpa9LVSramjq9VqzVktu7pW9EuW6sOy6/iuFiu+63XF18vVjY2GOpW16akNz/V9dSoNTUpDa1XNhLOqqGVZOj21X87IBZI+9Qh7q1Bwcn1DF+rJjTfPyzmGiEz+tqb21mhmBAAARunw/D8Z9enk/8ne/F/kmPz/Xdhr5tPA+X9C+uf/hkT5f8lt5f81r6HOc6cYz/9xJHuhUHAmDuoLJxqV/HMTwqASzVjlTlfI83KT/QeR/wMAAAAAAAAAAAAAAAAAAAAA8DfYC4LZIAhm949JEQnCuikiRqzeZyhviI+B+PoHsR8zXOAj1h9jIPbiXkbke7Nu1+1E69iOL93LL85rS+zFv9163Tai+PV2XLvjEzIVxrN942m5eqUd34/dfZCPxzfr9qSs9czV6Ko1z/IxAAAAAAAw1iyNzEWNGYn295alpvTGW/v3ViElIp3/D/Ts71Pyf2qINwIAAAAAAA7lN96UnHLZ9YZTMIZ4rYELIoMNvxmYZzINQ0RiLWa4VPE+hWWR05w5JUf1Scuxt6wnupYpbme2w124r7mBh2fOyW/dCQu3zuyEQUKk3dL5AnTPXwEAAACA8XKwHxj1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLiG8emyUd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF78CgAA//8fCrEr") r8 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r8, r8, 0x0, 0x800000007) 159.115725ms ago: executing program 0 (id=3156): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00'}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 143.954517ms ago: executing program 5 (id=3157): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func_proto]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fdatasync(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x80) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8) clock_nanosleep(0x2, 0x1000000, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 107.11906ms ago: executing program 0 (id=3158): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) socket$phonet(0x23, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 103.85201ms ago: executing program 2 (id=3159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) 83.135962ms ago: executing program 5 (id=3160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d5854797120dbba200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 52.154695ms ago: executing program 0 (id=3161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func_proto]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fdatasync(r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x80) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8) clock_nanosleep(0x2, 0x1000000, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 51.254645ms ago: executing program 5 (id=3162): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="00080400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x7f, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x30, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/55, 0x3e, 0x37, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000291400001000000018410000000000000000000000000000950000000000000085100000ffffffff852000000300000085100000f8ff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[{0x4, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x4, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xf, 0x6}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x8}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_ACT={0x488, 0x4, [@m_police={0x484, 0x3, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x4b8}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2be, &(0x7f00000008c0)="$eJzs3E1rE1sYwPEnmTST9tKX1YV7Nz7oRjdDjUsVGqUFMaCkHVEXwpRONSQmZSZoIoJZu+rnKC7dCeIX6N4P4K4I0lVXjjSZTCcxfQs1qen/B2XOOc85M2fmtPCcwszO482XpXXfWndqksyoJEWasicyJ0XpSITHdKucjtrldlaacm3+1e775SdP7+fy+cWC6lJu5UZWVWcufX799sPlL7V/Hn2cMU3Znnu28yP7bfvf7f92fq68KPpa9LVSramjq9VqzVktu7pW9EuW6sOy6/iuFiu+63XF18vVjY2GOpW16akNz/V9dSoNTUpDa1XNhLOqqGVZOj21X87IBZI+9Qh7q1Bwcn1DF+rJjTfPyzmGiEz+tqb21mhmBAAARunw/D8Z9enk/8ne/F/kmPz/Xdhr5tPA+X9C+uf/hkT5f8lt5f81r6HOc6cYz/9xJHuhUHAmDuoLJxqV/HMTwqASzVjlTlfI83KT/QeR/wMAAAAAAAAAAAAAAAAAAAAA8DfYC4LZIAhm949JEQnCuikiRqzeZyhviI+B+PoHsR8zXOAj1h9jIPbiXkbke7Nu1+1E69iOL93LL85rS+zFv9163Tai+PV2XLvjEzIVxrN942m5eqUd34/dfZCPxzfr9qSs9czV6Ko1z/IxAAAAAAAw1iyNzEWNGYn295alpvTGW/v3ViElIp3/D/Ts71Pyf2qINwIAAAAAAA7lN96UnHLZ9YZTMIZ4rYELIoMNvxmYZzINQ0RiLWa4VPE+hWWR05w5JUf1Scuxt6wnupYpbme2w124r7mBh2fOyW/dCQu3zuyEQUKk3dL5AnTPXwEAAACA8XKwHxj1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLiG8emyUd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF78CgAA//8fCrEr") r8 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r8, r8, 0x0, 0x800000007) 46.094276ms ago: executing program 2 (id=3163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x240000c0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.680089ms ago: executing program 2 (id=3165): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0xa00, 0x1001) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 0s ago: executing program 5 (id=3166): syz_io_uring_setup(0x5f4a, 0x0, &(0x7f0000000040)=0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r2, @ANYBLOB="010010000000000000000c"], 0x58}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="230003000000"], 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) kernel console output (not intermixed with test programs): e Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.990586][ T9981] Call Trace: [ 146.990594][ T9981] [ 146.990602][ T9981] __dump_stack+0x1d/0x30 [ 146.990629][ T9981] dump_stack_lvl+0x95/0xd0 [ 146.990648][ T9981] dump_stack+0x15/0x1b [ 146.990799][ T9981] should_fail_ex+0x265/0x280 [ 146.990822][ T9981] should_fail_alloc_page+0xf2/0x100 [ 146.990847][ T9981] __alloc_frozen_pages_noprof+0x109/0x360 [ 146.990917][ T9981] alloc_pages_mpol+0xb3/0x260 [ 146.990944][ T9981] alloc_migration_target_by_mpol+0x11b/0x280 [ 146.990978][ T9981] migrate_pages_batch+0x349/0x1b60 [ 146.991035][ T9981] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 146.991071][ T9981] ? __folio_put+0x5e/0x150 [ 146.991139][ T9981] ? _raw_spin_lock_irq+0x53/0xa0 [ 146.991164][ T9981] migrate_pages+0xf55/0x1760 [ 146.991196][ T9981] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 146.991263][ T9981] __se_sys_mbind+0x975/0xac0 [ 146.991296][ T9981] __x64_sys_mbind+0x78/0x90 [ 146.991320][ T9981] x64_sys_call+0x2a2b/0x3000 [ 146.991387][ T9981] do_syscall_64+0xca/0x2b0 [ 146.991424][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.991444][ T9981] RIP: 0033:0x7fae7a84f749 [ 146.991462][ T9981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.991548][ T9981] RSP: 002b:00007fae792af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 146.991569][ T9981] RAX: ffffffffffffffda RBX: 00007fae7aaa5fa0 RCX: 00007fae7a84f749 [ 146.991622][ T9981] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000 [ 146.991634][ T9981] RBP: 00007fae792af090 R08: 0000000000000000 R09: 0000000000000002 [ 146.991648][ T9981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 146.991661][ T9981] R13: 00007fae7aaa6038 R14: 00007fae7aaa5fa0 R15: 00007ffe232f6578 [ 146.991682][ T9981] [ 146.997844][ T9887] bridge_slave_0: entered promiscuous mode [ 147.020257][ T9968] loop5: p2 p3 p7 [ 147.026291][ T9887] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.059119][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2421'. [ 147.059403][ T9887] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.150717][ T9985] IPVS: set_ctl: invalid protocol: 44 172.20.20.11:0 [ 147.244107][ T9887] bridge_slave_1: entered allmulticast mode [ 147.250845][ T9887] bridge_slave_1: entered promiscuous mode [ 147.316090][ T9887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.326691][ T9887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.370765][ T9887] team0: Port device team_slave_0 added [ 147.383052][ T9887] team0: Port device team_slave_1 added [ 147.442706][ T9998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.453155][ T9998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.627896][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.634921][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.660815][ T9887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.712429][T10000] pim6reg1: entered promiscuous mode [ 147.717872][T10000] pim6reg1: entered allmulticast mode [ 147.729781][ T9887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.736858][ T9887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.762784][ T9887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.830370][T10017] netlink: 'syz.1.2433': attribute type 13 has an invalid length. [ 147.838375][T10017] netlink: 'syz.1.2433': attribute type 27 has an invalid length. [ 147.905303][ T9998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.915723][ T9998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.963257][T10019] qrtr: Invalid version 0 [ 148.006752][ T9968] Set syz1 is full, maxelem 65536 reached [ 148.028901][ T9887] hsr_slave_0: entered promiscuous mode [ 148.035028][ T9887] hsr_slave_1: entered promiscuous mode [ 148.041243][ T9887] debugfs: 'hsr0' already exists in 'hsr' [ 148.047068][ T9887] Cannot create hsr debugfs directory [ 148.064185][ T9998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.074591][ T9998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.132986][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2438'. [ 148.155544][ T9998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.165927][ T9998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.208953][T10036] loop5: detected capacity change from 0 to 128 [ 148.239985][ T31] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.248257][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.263638][ T31] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.272004][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.280314][ T31] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.288633][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.304071][ T9887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 148.313106][ T9887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 148.325500][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.333746][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.344587][ T9887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 148.348596][T10036] bio_check_eod: 16764 callbacks suppressed [ 148.348630][T10036] syz.5.2439: attempt to access beyond end of device [ 148.348630][T10036] loop5: rw=8390657, sector=488, nr_sectors = 1 limit=128 [ 148.371187][T10036] Buffer I/O error on dev loop5, logical block 488, lost async page write [ 148.380804][T10036] syz.5.2439: attempt to access beyond end of device [ 148.380804][T10036] loop5: rw=2049, sector=497, nr_sectors = 8 limit=128 [ 148.384994][ T9887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.406711][T10036] syz.5.2439: attempt to access beyond end of device [ 148.406711][T10036] loop5: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 148.421431][T10036] syz.5.2439: attempt to access beyond end of device [ 148.421431][T10036] loop5: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 148.436414][T10036] syz.5.2439: attempt to access beyond end of device [ 148.436414][T10036] loop5: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 148.453541][T10036] syz.5.2439: attempt to access beyond end of device [ 148.453541][T10036] loop5: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 148.478126][T10037] syz.5.2439: attempt to access beyond end of device [ 148.478126][T10037] loop5: rw=524288, sector=145, nr_sectors = 8 limit=128 [ 148.503587][ T9887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.510342][T10036] syz.5.2439: attempt to access beyond end of device [ 148.510342][T10036] loop5: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 148.518654][T10037] syz.5.2439: attempt to access beyond end of device [ 148.518654][T10037] loop5: rw=524288, sector=161, nr_sectors = 8 limit=128 [ 148.536404][ T9887] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.545093][T10036] syz.5.2439: attempt to access beyond end of device [ 148.545093][T10036] loop5: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 148.561497][T10053] qrtr: Invalid version 0 [ 148.599653][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.600149][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.606763][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.643023][T10054] qrtr: Invalid version 0 [ 148.664833][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.671941][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.680904][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.702021][ T3483] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 148.709818][ T3483] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 148.720547][ T3483] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 148.737507][ T3483] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 148.771996][ T9887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.801768][T10069] pim6reg1: entered promiscuous mode [ 148.807252][T10069] pim6reg1: entered allmulticast mode [ 148.882035][T10076] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2448'. [ 148.977740][ T9887] veth0_vlan: entered promiscuous mode [ 148.989163][ T9887] veth1_vlan: entered promiscuous mode [ 149.007878][ T9887] veth0_macvtap: entered promiscuous mode [ 149.015827][ T9887] veth1_macvtap: entered promiscuous mode [ 149.034601][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.046749][ T9887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.059807][ T1601] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.093412][ T1601] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.106981][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 149.106994][ T29] audit: type=1400 audit(1766524743.234:66917): avc: denied { mounton } for pid=9887 comm="syz-executor" path="/root/syzkaller.wAWSS6/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 149.119899][ T1601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.168232][T10097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2455'. [ 149.182722][ T29] audit: type=1400 audit(1766524743.264:66918): avc: denied { mount } for pid=9887 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.182923][ T1601] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.205060][ T29] audit: type=1400 audit(1766524743.264:66919): avc: denied { mount } for pid=9887 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.235906][ T29] audit: type=1400 audit(1766524743.264:66920): avc: denied { mounton } for pid=9887 comm="syz-executor" path="/root/syzkaller.wAWSS6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 149.262802][ T29] audit: type=1400 audit(1766524743.264:66921): avc: denied { mounton } for pid=9887 comm="syz-executor" path="/root/syzkaller.wAWSS6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=29750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 149.290626][ T29] audit: type=1400 audit(1766524743.274:66922): avc: denied { mounton } for pid=9887 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 149.313752][ T29] audit: type=1400 audit(1766524743.274:66923): avc: denied { mount } for pid=9887 comm="syz-executor" name="/" dev="gadgetfs" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 149.392792][ T29] audit: type=1400 audit(1766524743.514:66924): avc: denied { write } for pid=10108 comm="syz.1.2459" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 149.416294][ T29] audit: type=1400 audit(1766524743.514:66925): avc: denied { open } for pid=10108 comm="syz.1.2459" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 149.418276][T10111] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2458'. [ 149.441118][ T29] audit: type=1400 audit(1766524743.514:66926): avc: denied { ioctl } for pid=10108 comm="syz.1.2459" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 149.534495][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2465'. [ 149.623798][T10137] loop6: detected capacity change from 0 to 128 [ 149.657532][T10143] xt_ecn: cannot match TCP bits for non-tcp packets [ 149.718393][T10147] loop6: detected capacity change from 0 to 128 [ 149.754029][T10150] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2475'. [ 149.927362][T10157] block device autoloading is deprecated and will be removed. [ 149.984797][T10147] qrtr: Invalid version 0 [ 150.040887][T10160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2479'. [ 150.640737][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2482'. [ 150.692143][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.699396][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.710915][T10179] bridge0: entered allmulticast mode [ 150.734863][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2488'. [ 150.872252][T10191] loop6: detected capacity change from 0 to 128 [ 151.047818][T10186] qrtr: Invalid version 0 [ 151.063247][T10191] qrtr: Invalid version 0 [ 151.163459][T10197] loop6: detected capacity change from 0 to 128 [ 151.172947][T10198] loop0: detected capacity change from 0 to 128 [ 151.279266][T10198] qrtr: Invalid version 0 [ 151.409723][T10216] FAULT_INJECTION: forcing a failure. [ 151.409723][T10216] name failslab, interval 1, probability 0, space 0, times 0 [ 151.422489][T10216] CPU: 1 UID: 0 PID: 10216 Comm: syz.1.2503 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.422585][T10216] Tainted: [W]=WARN [ 151.422590][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.422601][T10216] Call Trace: [ 151.422609][T10216] [ 151.422616][T10216] __dump_stack+0x1d/0x30 [ 151.422642][T10216] dump_stack_lvl+0x95/0xd0 [ 151.422662][T10216] dump_stack+0x15/0x1b [ 151.422678][T10216] should_fail_ex+0x265/0x280 [ 151.422698][T10216] should_failslab+0x8c/0xb0 [ 151.422803][T10216] __kmalloc_noprof+0xb9/0x5a0 [ 151.422827][T10216] ? process_vm_rw+0x27c/0x960 [ 151.422845][T10216] ? iovec_from_user+0x179/0x210 [ 151.422890][T10216] process_vm_rw+0x27c/0x960 [ 151.422925][T10216] ? _parse_integer+0x27/0x40 [ 151.422983][T10216] ? kstrtoull+0x111/0x140 [ 151.423013][T10216] __x64_sys_process_vm_readv+0x78/0x90 [ 151.423042][T10216] x64_sys_call+0x148a/0x3000 [ 151.423106][T10216] do_syscall_64+0xca/0x2b0 [ 151.423161][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.423186][T10216] RIP: 0033:0x7f7531d2f749 [ 151.423272][T10216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.423360][T10216] RSP: 002b:00007f7530797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 151.423377][T10216] RAX: ffffffffffffffda RBX: 00007f7531f85fa0 RCX: 00007f7531d2f749 [ 151.423388][T10216] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000553 [ 151.423400][T10216] RBP: 00007f7530797090 R08: 0000000000000286 R09: 0000000000000000 [ 151.423410][T10216] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 151.423421][T10216] R13: 00007f7531f86038 R14: 00007f7531f85fa0 R15: 00007fff3600b5d8 [ 151.423438][T10216] [ 151.650635][T10226] loop0: detected capacity change from 0 to 128 [ 151.748960][T10242] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.758946][T10242] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.799540][T10246] FAULT_INJECTION: forcing a failure. [ 151.799540][T10246] name failslab, interval 1, probability 0, space 0, times 0 [ 151.812345][T10246] CPU: 1 UID: 0 PID: 10246 Comm: syz.2.2515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.812375][T10246] Tainted: [W]=WARN [ 151.812380][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.812390][T10246] Call Trace: [ 151.812395][T10246] [ 151.812401][T10246] __dump_stack+0x1d/0x30 [ 151.812498][T10246] dump_stack_lvl+0x95/0xd0 [ 151.812520][T10246] dump_stack+0x15/0x1b [ 151.812540][T10246] should_fail_ex+0x265/0x280 [ 151.812561][T10246] should_failslab+0x8c/0xb0 [ 151.812580][T10246] __kmalloc_cache_noprof+0x65/0x4c0 [ 151.812669][T10246] ? xt_rateest_tg_checkentry+0x14e/0x5a0 [ 151.812753][T10246] ? __xt_rateest_lookup+0x140/0x1c0 [ 151.812803][T10246] xt_rateest_tg_checkentry+0x14e/0x5a0 [ 151.812824][T10246] xt_check_target+0x28d/0x4c0 [ 151.812863][T10246] ? mutex_unlock+0x4f/0x90 [ 151.812887][T10246] ? xt_find_target+0x1cd/0x200 [ 151.812923][T10246] translate_table+0xcf5/0x1070 [ 151.813066][T10246] do_ip6t_set_ctl+0x678/0x840 [ 151.813086][T10246] ? kstrtoull+0x111/0x140 [ 151.813103][T10246] ? __rcu_read_unlock+0x4f/0x70 [ 151.813131][T10246] nf_setsockopt+0x199/0x1b0 [ 151.813175][T10246] ipv6_setsockopt+0x11a/0x130 [ 151.813197][T10246] tcp_setsockopt+0x98/0xb0 [ 151.813233][T10246] sock_common_setsockopt+0x69/0x80 [ 151.813265][T10246] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 151.813284][T10246] __sys_setsockopt+0x184/0x200 [ 151.813317][T10246] __x64_sys_setsockopt+0x64/0x80 [ 151.813348][T10246] x64_sys_call+0x21d5/0x3000 [ 151.813418][T10246] do_syscall_64+0xca/0x2b0 [ 151.813506][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.813547][T10246] RIP: 0033:0x7f4e7f5cf749 [ 151.813561][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.813577][T10246] RSP: 002b:00007f4e7e02f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.813599][T10246] RAX: ffffffffffffffda RBX: 00007f4e7f825fa0 RCX: 00007f4e7f5cf749 [ 151.813618][T10246] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 151.813632][T10246] RBP: 00007f4e7e02f090 R08: 0000000000000528 R09: 0000000000000000 [ 151.813647][T10246] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 151.813665][T10246] R13: 00007f4e7f826038 R14: 00007f4e7f825fa0 R15: 00007fff73e591f8 [ 151.813685][T10246] [ 152.051153][T10242] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.061056][T10242] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.082416][T10250] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 152.141818][T10254] loop6: detected capacity change from 0 to 512 [ 152.151128][T10242] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.161042][T10242] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.171204][T10254] EXT4-fs (loop6): inodes count not valid: 32 vs 32768 [ 152.180801][T10258] loop2: detected capacity change from 0 to 512 [ 152.212780][T10262] loop0: detected capacity change from 0 to 128 [ 152.222819][T10258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.254998][T10258] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.257209][T10242] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.275377][T10242] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.305741][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.327040][T10270] __nla_validate_parse: 7 callbacks suppressed [ 152.327053][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2524'. [ 152.331816][T10271] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2525'. [ 152.374165][ T1720] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.382503][ T1720] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.437562][ T1720] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.445864][ T1720] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.461903][ T1720] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.470291][ T1720] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.646183][T10281] tipc: Enabling of bearer <|th:s> rejected, media not registered [ 152.698899][T10283] loop5: detected capacity change from 0 to 512 [ 152.711280][T10283] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 152.733013][T10287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2532'. [ 152.747581][T10283] EXT4-fs (loop5): 1 truncate cleaned up [ 152.755217][T10283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.785680][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.795823][T10290] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2533'. [ 152.907276][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2536'. [ 153.027036][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2538'. [ 153.080303][T10305] vfat: Unknown parameter 's' [ 153.290586][T10312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 153.329156][T10312] EXT4-fs (loop2): 1 truncate cleaned up [ 153.335899][T10312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.350497][T10312] tipc: Started in network mode [ 153.355433][T10312] tipc: Node identity , cluster identity 4711 [ 153.361532][T10312] tipc: Failed to obtain node identity [ 153.367128][T10312] tipc: Enabling of bearer rejected, failed to enable media [ 153.375561][T10317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.504343][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2548'. [ 153.536957][T10325] bio_check_eod: 25514 callbacks suppressed [ 153.536996][T10325] syz.0.2546: attempt to access beyond end of device [ 153.536996][T10325] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 153.557863][T10325] syz.0.2546: attempt to access beyond end of device [ 153.557863][T10325] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 153.591229][T10325] syz.0.2546: attempt to access beyond end of device [ 153.591229][T10325] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 153.639302][T10325] syz.0.2546: attempt to access beyond end of device [ 153.639302][T10325] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 153.672394][T10325] syz.0.2546: attempt to access beyond end of device [ 153.672394][T10325] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 153.686393][T10325] syz.0.2546: attempt to access beyond end of device [ 153.686393][T10325] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 153.699929][T10325] syz.0.2546: attempt to access beyond end of device [ 153.699929][T10325] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 153.725940][T10335] FAULT_INJECTION: forcing a failure. [ 153.725940][T10335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.739056][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.6.2551 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.739084][T10335] Tainted: [W]=WARN [ 153.739094][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.739108][T10335] Call Trace: [ 153.739115][T10335] [ 153.739148][T10335] __dump_stack+0x1d/0x30 [ 153.739175][T10335] dump_stack_lvl+0x95/0xd0 [ 153.739218][T10335] dump_stack+0x15/0x1b [ 153.739303][T10335] should_fail_ex+0x265/0x280 [ 153.739331][T10335] should_fail+0xb/0x20 [ 153.739353][T10335] should_fail_usercopy+0x1a/0x20 [ 153.739376][T10335] _copy_to_user+0x20/0xa0 [ 153.739400][T10335] bpf_obj_get_info_by_fd+0x1d8d/0x1ff0 [ 153.739468][T10335] __sys_bpf+0x50f/0x7c0 [ 153.739510][T10335] __x64_sys_bpf+0x41/0x50 [ 153.739573][T10335] x64_sys_call+0x28e1/0x3000 [ 153.739599][T10335] do_syscall_64+0xca/0x2b0 [ 153.739709][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.739807][T10335] RIP: 0033:0x7f41e406f749 [ 153.739825][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.739843][T10335] RSP: 002b:00007f41e2acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.739859][T10335] RAX: ffffffffffffffda RBX: 00007f41e42c5fa0 RCX: 00007f41e406f749 [ 153.739879][T10335] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 000000000000000f [ 153.739890][T10335] RBP: 00007f41e2acf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.739901][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.739915][T10335] R13: 00007f41e42c6038 R14: 00007f41e42c5fa0 R15: 00007ffdf0781488 [ 153.739937][T10335] [ 153.740118][T10325] syz.0.2546: attempt to access beyond end of device [ 153.740118][T10325] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 153.942106][T10325] syz.0.2546: attempt to access beyond end of device [ 153.942106][T10325] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 153.956404][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.972868][T10325] syz.0.2546: attempt to access beyond end of device [ 153.972868][T10325] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 154.172428][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2560'. [ 154.236828][T10247] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.246823][T10247] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.260615][T10361] syzkaller1: entered promiscuous mode [ 154.266141][T10361] syzkaller1: entered allmulticast mode [ 154.315593][T10247] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.325426][T10247] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.385253][T10247] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.395165][T10247] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.425539][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 154.425553][ T29] audit: type=1326 audit(1766524748.554:67269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.455528][ T29] audit: type=1326 audit(1766524748.554:67270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.479136][ T29] audit: type=1326 audit(1766524748.554:67271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.503007][ T29] audit: type=1326 audit(1766524748.554:67272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.526692][ T29] audit: type=1326 audit(1766524748.554:67273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.561133][T10374] FAULT_INJECTION: forcing a failure. [ 154.561133][T10374] name failslab, interval 1, probability 0, space 0, times 0 [ 154.573966][T10374] CPU: 1 UID: 0 PID: 10374 Comm: syz.0.2566 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.574031][T10374] Tainted: [W]=WARN [ 154.574040][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.574057][T10374] Call Trace: [ 154.574064][T10374] [ 154.574110][T10374] __dump_stack+0x1d/0x30 [ 154.574141][T10374] dump_stack_lvl+0x95/0xd0 [ 154.574170][T10374] dump_stack+0x15/0x1b [ 154.574248][T10374] should_fail_ex+0x265/0x280 [ 154.574273][T10374] should_failslab+0x8c/0xb0 [ 154.574296][T10374] __kmalloc_cache_noprof+0x65/0x4c0 [ 154.574324][T10374] ? __se_sys_mount+0xef/0x2e0 [ 154.574344][T10374] ? memdup_user+0x99/0xd0 [ 154.574450][T10374] __se_sys_mount+0xef/0x2e0 [ 154.574477][T10374] ? fput+0x8f/0xc0 [ 154.574507][T10374] ? ksys_write+0x192/0x1a0 [ 154.574527][T10374] __x64_sys_mount+0x67/0x80 [ 154.574548][T10374] x64_sys_call+0x2cca/0x3000 [ 154.574610][T10374] do_syscall_64+0xca/0x2b0 [ 154.574713][T10374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.574742][T10374] RIP: 0033:0x7fae7a84f749 [ 154.574759][T10374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.574789][T10374] RSP: 002b:00007fae792af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.574808][T10374] RAX: ffffffffffffffda RBX: 00007fae7aaa5fa0 RCX: 00007fae7a84f749 [ 154.574821][T10374] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 154.574833][T10374] RBP: 00007fae792af090 R08: 0000200000000140 R09: 0000000000000000 [ 154.574894][T10374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.574910][T10374] R13: 00007fae7aaa6038 R14: 00007fae7aaa5fa0 R15: 00007ffe232f6578 [ 154.574942][T10374] [ 154.600985][ T29] audit: type=1326 audit(1766524748.554:67274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.784257][ T29] audit: type=1326 audit(1766524748.554:67275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.807989][ T29] audit: type=1400 audit(1766524748.604:67276): avc: denied { getopt } for pid=10365 comm="syz.0.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 154.827773][ T29] audit: type=1326 audit(1766524748.624:67277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.851588][ T29] audit: type=1326 audit(1766524748.624:67278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.6.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41e406f749 code=0x7ffc0000 [ 154.984394][T10387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2572'. [ 155.035595][T10391] set_capacity_and_notify: 6 callbacks suppressed [ 155.035612][T10391] loop6: detected capacity change from 0 to 128 [ 155.058682][T10395] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2575'. [ 155.092618][T10395] loop2: detected capacity change from 0 to 764 [ 155.108137][T10395] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 155.120498][T10401] FAULT_INJECTION: forcing a failure. [ 155.120498][T10401] name failslab, interval 1, probability 0, space 0, times 0 [ 155.133192][T10401] CPU: 1 UID: 0 PID: 10401 Comm: syz.0.2578 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.133250][T10401] Tainted: [W]=WARN [ 155.133295][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.133307][T10401] Call Trace: [ 155.133313][T10401] [ 155.133321][T10401] __dump_stack+0x1d/0x30 [ 155.133345][T10401] dump_stack_lvl+0x95/0xd0 [ 155.133425][T10401] dump_stack+0x15/0x1b [ 155.133446][T10401] should_fail_ex+0x265/0x280 [ 155.133466][T10401] should_failslab+0x8c/0xb0 [ 155.133485][T10401] __kmalloc_cache_noprof+0x65/0x4c0 [ 155.133554][T10401] ? __se_sys_mount+0xef/0x2e0 [ 155.133571][T10401] ? memdup_user+0x99/0xd0 [ 155.133591][T10401] __se_sys_mount+0xef/0x2e0 [ 155.133620][T10401] ? fput+0x8f/0xc0 [ 155.133646][T10401] ? ksys_write+0x192/0x1a0 [ 155.133663][T10401] __x64_sys_mount+0x67/0x80 [ 155.133694][T10401] x64_sys_call+0x2cca/0x3000 [ 155.133742][T10401] do_syscall_64+0xca/0x2b0 [ 155.133786][T10401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.133808][T10401] RIP: 0033:0x7fae7a84f749 [ 155.133823][T10401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.133892][T10401] RSP: 002b:00007fae792af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 155.133914][T10401] RAX: ffffffffffffffda RBX: 00007fae7aaa5fa0 RCX: 00007fae7a84f749 [ 155.133933][T10401] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 155.134007][T10401] RBP: 00007fae792af090 R08: 0000200000000140 R09: 0000000000000000 [ 155.134024][T10401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.134037][T10401] R13: 00007fae7aaa6038 R14: 00007fae7aaa5fa0 R15: 00007ffe232f6578 [ 155.134056][T10401] [ 155.319542][T10403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.328095][T10403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.338801][T10404] loop5: detected capacity change from 0 to 7 [ 155.368653][T10404] loop5: [ 155.400500][T10410] loop0: detected capacity change from 0 to 1024 [ 155.407347][T10410] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 155.505244][T10428] loop2: detected capacity change from 0 to 128 [ 155.535742][T10434] loop2: detected capacity change from 0 to 128 [ 155.543585][T10434] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 155.558671][T10434] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.569859][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.577328][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.584820][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.592326][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.599845][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.607300][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.614716][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.622121][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.629558][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.637007][ T3432] hid-generic 0005:5B44:0004.0003: unknown main item tag 0x0 [ 155.646020][ T3432] hid-generic 0005:5B44:0004.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1 [ 155.665770][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.940525][T10449] loop5: detected capacity change from 0 to 512 [ 155.946862][T10449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.946922][T10449] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.949471][T10449] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 155.966591][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.973522][T10447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=10447 comm=syz.6.2596 [ 155.976883][T10454] loop5: detected capacity change from 0 to 128 [ 156.123774][T10461] 9p: Bad value for 'wfdno' [ 156.155743][T10463] loop6: detected capacity change from 0 to 128 [ 156.191078][T10469] loop5: detected capacity change from 0 to 1024 [ 156.249204][T10473] FAULT_INJECTION: forcing a failure. [ 156.249204][T10473] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 156.262469][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.5.2606 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.262502][T10473] Tainted: [W]=WARN [ 156.262509][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.262523][T10473] Call Trace: [ 156.262529][T10473] [ 156.262537][T10473] __dump_stack+0x1d/0x30 [ 156.262568][T10473] dump_stack_lvl+0x95/0xd0 [ 156.262592][T10473] dump_stack+0x15/0x1b [ 156.262614][T10473] should_fail_ex+0x265/0x280 [ 156.262641][T10473] should_fail_alloc_page+0xf2/0x100 [ 156.262668][T10473] __alloc_frozen_pages_noprof+0x109/0x360 [ 156.262704][T10473] alloc_pages_mpol+0xb3/0x260 [ 156.262738][T10473] vma_alloc_folio_noprof+0x1aa/0x300 [ 156.262774][T10473] handle_mm_fault+0xc31/0x2c60 [ 156.262810][T10473] ? _raw_spin_lock+0x52/0xa0 [ 156.262834][T10473] ? __pte_offset_map_lock+0x1d9/0x240 [ 156.262870][T10473] __get_user_pages+0x1024/0x1ed0 [ 156.262915][T10473] get_user_pages_remote+0x1d5/0x6c0 [ 156.262950][T10473] ? __rcu_read_unlock+0x4f/0x70 [ 156.262976][T10473] __update_ref_ctr+0x8e/0x3a0 [ 156.263014][T10473] uprobe_mmap+0x2de/0xd30 [ 156.263048][T10473] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 156.263082][T10473] __mmap_complete+0x1ed/0x230 [ 156.263101][T10473] mmap_region+0xb86/0x1410 [ 156.263154][T10473] do_mmap+0x9b3/0xbe0 [ 156.263187][T10473] vm_mmap_pgoff+0x17a/0x2e0 [ 156.263214][T10473] ksys_mmap_pgoff+0x268/0x310 [ 156.263248][T10473] x64_sys_call+0x16bb/0x3000 [ 156.263275][T10473] do_syscall_64+0xca/0x2b0 [ 156.263314][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.263338][T10473] RIP: 0033:0x7f406e50f749 [ 156.263354][T10473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.263373][T10473] RSP: 002b:00007f406cf77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 156.263393][T10473] RAX: ffffffffffffffda RBX: 00007f406e765fa0 RCX: 00007f406e50f749 [ 156.263407][T10473] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 156.263420][T10473] RBP: 00007f406cf77090 R08: 0000000000000006 R09: 0000000000000000 [ 156.263433][T10473] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 156.263446][T10473] R13: 00007f406e766038 R14: 00007f406e765fa0 R15: 00007ffc8db223e8 [ 156.263467][T10473] [ 156.263476][T10473] ref_ctr increment failed for inode: 0x9a0 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810b3a0000 [ 156.374983][T10475] EXT4-fs: Ignoring removed orlov option [ 156.512436][T10475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.548357][T10479] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 156.566244][ T1601] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.574638][ T1601] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.594291][ T1601] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.602512][ T1601] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.625298][ T1601] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.633586][ T1601] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.658821][ T1601] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.667079][ T1601] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.816366][T10497] tmpfs: Unknown parameter 'fsuuid' [ 156.841967][ T9887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.914771][T10504] qrtr: Invalid version 0 [ 156.949525][T10509] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 156.981537][T10502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 157.132375][T10525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.147545][T10525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.160139][T10524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.173077][T10524] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.192568][T10532] EXT4-fs: Ignoring removed mblk_io_submit option [ 157.203220][T10532] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.226230][T10532] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2630: bad orphan inode 11 [ 157.254057][T10532] ext4_test_bit(bit=10, block=4) = 1 [ 157.259384][T10532] is_bad_inode(inode)=0 [ 157.263541][T10532] NEXT_ORPHAN(inode)=3254779904 [ 157.268418][T10532] max_ino=32 [ 157.271710][T10532] i_nlink=0 [ 157.287480][T10532] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.2630: lblock 2 mapped to illegal pblock 2 (length 1) [ 157.309138][T10539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.333789][T10539] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.346588][T10532] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.2630: lblock 0 mapped to illegal pblock 48 (length 1) [ 157.360947][T10532] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2630: Failed to acquire dquot type 0 [ 157.372586][T10532] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 157.382175][T10532] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.2630: mark_inode_dirty error [ 157.393829][T10532] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 157.404585][T10532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.417741][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.453771][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.466195][ T3600] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 157.479288][ T3600] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 157.488778][ T3600] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 157.725026][T10567] __nla_validate_parse: 5 callbacks suppressed [ 157.725037][T10567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2642'. [ 157.798573][T10575] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2646'. [ 157.875303][T10573] loop0: p2 p3 p7 [ 157.891833][T10586] $Hÿ: renamed from bond0 (while UP) [ 157.899852][T10586] $Hÿ: entered promiscuous mode [ 157.904981][T10586] bond_slave_0: entered promiscuous mode [ 157.908918][T10589] FAULT_INJECTION: forcing a failure. [ 157.908918][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.910941][T10586] bond_slave_1: entered promiscuous mode [ 157.923876][T10589] CPU: 1 UID: 0 PID: 10589 Comm: syz.6.2652 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.923990][T10589] Tainted: [W]=WARN [ 157.924018][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.924054][T10589] Call Trace: [ 157.924093][T10589] [ 157.924116][T10589] __dump_stack+0x1d/0x30 [ 157.924195][T10589] dump_stack_lvl+0x95/0xd0 [ 157.924273][T10589] dump_stack+0x15/0x1b [ 157.924365][T10589] should_fail_ex+0x265/0x280 [ 157.924439][T10589] should_fail+0xb/0x20 [ 157.924532][T10589] should_fail_usercopy+0x1a/0x20 [ 157.924613][T10589] strncpy_from_user+0x27/0x260 [ 157.924745][T10589] strncpy_from_user_nofault+0x68/0xf0 [ 157.924845][T10589] bpf_probe_read_user_str+0x2a/0x70 [ 157.924941][T10589] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 157.924991][T10589] bpf_trace_run2+0x107/0x1d0 [ 157.925073][T10589] ? nf_tables_newset+0xe34/0x14e0 [ 157.925162][T10589] ? nf_tables_newset+0xe34/0x14e0 [ 157.925337][T10589] __traceiter_kfree+0x2e/0x50 [ 157.925411][T10589] ? nf_tables_newset+0xe34/0x14e0 [ 157.925497][T10589] kfree+0x353/0x3c0 [ 157.925630][T10589] nf_tables_newset+0xe34/0x14e0 [ 157.925803][T10589] nfnetlink_rcv+0xbc9/0x16c0 [ 157.925933][T10589] netlink_unicast+0x5c0/0x690 [ 157.926020][T10589] netlink_sendmsg+0x58b/0x6b0 [ 157.926127][T10589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.926238][T10589] __sock_sendmsg+0x145/0x180 [ 157.926292][T10589] ____sys_sendmsg+0x31e/0x4a0 [ 157.926372][T10589] ___sys_sendmsg+0x17b/0x1d0 [ 157.926537][T10589] __x64_sys_sendmsg+0xd4/0x160 [ 157.926695][T10589] x64_sys_call+0x17ba/0x3000 [ 157.926768][T10589] do_syscall_64+0xca/0x2b0 [ 157.926890][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.926986][T10589] RIP: 0033:0x7f41e406f749 [ 157.927023][T10589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.927123][T10589] RSP: 002b:00007f41e2acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.927187][T10589] RAX: ffffffffffffffda RBX: 00007f41e42c5fa0 RCX: 00007f41e406f749 [ 157.927222][T10589] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 157.927257][T10589] RBP: 00007f41e2acf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.927286][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.927321][T10589] R13: 00007f41e42c6038 R14: 00007f41e42c5fa0 R15: 00007ffdf0781488 [ 157.927387][T10589] [ 158.127946][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 158.130714][T10586] dummy0: entered promiscuous mode [ 158.341916][T10625] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2666'. [ 158.369771][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2668'. [ 158.387851][T10632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2669'. [ 158.413803][T10634] netlink: 'syz.1.2670': attribute type 4 has an invalid length. [ 158.444447][T10639] FAULT_INJECTION: forcing a failure. [ 158.444447][T10639] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 158.457744][T10639] CPU: 1 UID: 0 PID: 10639 Comm: syz.1.2672 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 158.457778][T10639] Tainted: [W]=WARN [ 158.457786][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.457800][T10639] Call Trace: [ 158.457807][T10639] [ 158.457816][T10639] __dump_stack+0x1d/0x30 [ 158.457842][T10639] dump_stack_lvl+0x95/0xd0 [ 158.457863][T10639] dump_stack+0x15/0x1b [ 158.457881][T10639] should_fail_ex+0x265/0x280 [ 158.457906][T10639] should_fail_alloc_page+0xf2/0x100 [ 158.457932][T10639] __alloc_frozen_pages_noprof+0x109/0x360 [ 158.457967][T10639] alloc_pages_mpol+0xb3/0x260 [ 158.457997][T10639] vma_alloc_folio_noprof+0x1aa/0x300 [ 158.458025][T10639] handle_mm_fault+0xc31/0x2c60 [ 158.458054][T10639] ? _raw_spin_lock+0x52/0xa0 [ 158.458072][T10639] ? __pte_offset_map_lock+0x1d9/0x240 [ 158.458101][T10639] __get_user_pages+0x1024/0x1ed0 [ 158.458144][T10639] get_user_pages_remote+0x1d5/0x6c0 [ 158.458177][T10639] ? __rcu_read_unlock+0x4f/0x70 [ 158.458200][T10639] __update_ref_ctr+0x8e/0x3a0 [ 158.458231][T10639] uprobe_mmap+0x2de/0xd30 [ 158.458255][T10639] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 158.458289][T10639] __mmap_complete+0x1ed/0x230 [ 158.458310][T10639] mmap_region+0xb86/0x1410 [ 158.458360][T10639] do_mmap+0x9b3/0xbe0 [ 158.458390][T10639] vm_mmap_pgoff+0x17a/0x2e0 [ 158.458417][T10639] ksys_mmap_pgoff+0x268/0x310 [ 158.458446][T10639] x64_sys_call+0x16bb/0x3000 [ 158.458472][T10639] do_syscall_64+0xca/0x2b0 [ 158.458506][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.458529][T10639] RIP: 0033:0x7f7531d2f749 [ 158.458544][T10639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.458564][T10639] RSP: 002b:00007f7530797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.458584][T10639] RAX: ffffffffffffffda RBX: 00007f7531f85fa0 RCX: 00007f7531d2f749 [ 158.458598][T10639] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 158.458611][T10639] RBP: 00007f7530797090 R08: 000000000000000a R09: 0000000000000000 [ 158.458630][T10639] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 158.458640][T10639] R13: 00007f7531f86038 R14: 00007f7531f85fa0 R15: 00007fff3600b5d8 [ 158.458656][T10639] [ 158.458665][T10639] ref_ctr increment failed for inode: 0xbe7 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88813ecab600 [ 158.505039][T10643] syz_tun: entered allmulticast mode [ 158.566675][T10642] EXT4-fs (loop6): too many log groups per flexible block group [ 158.713157][T10642] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 158.720145][T10642] EXT4-fs (loop6): mount failed [ 158.736032][T10642] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.748855][T10642] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.761490][T10642] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 158.789999][T10652] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 158.808750][ T9887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.262080][T10668] SELinux: failed to load policy [ 159.273667][T10668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.280370][T10668] EXT4-fs: Ignoring removed bh option [ 159.308233][T10670] xt_hashlimit: max too large, truncated to 1048576 [ 159.316722][T10668] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 159.348222][T10668] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.2681: corrupted inode contents [ 159.360561][T10668] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #11: comm syz.0.2681: mark_inode_dirty error [ 159.372206][T10668] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2681: invalid indirect mapped block 1 (level 1) [ 159.386010][T10668] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.2681: corrupted inode contents [ 159.399257][T10668] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 159.408319][T10668] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #11: comm syz.0.2681: corrupted inode contents [ 159.436526][T10668] EXT4-fs error (device loop0): ext4_truncate:4635: inode #11: comm syz.0.2681: mark_inode_dirty error [ 159.449083][T10668] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 159.461226][T10674] SELinux: failed to load policy [ 159.469052][T10668] EXT4-fs (loop0): 1 truncate cleaned up [ 159.475398][T10668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.487575][ T29] kauditd_printk_skb: 563 callbacks suppressed [ 159.487586][ T29] audit: type=1400 audit(1766524753.584:67840): avc: denied { setattr } for pid=10673 comm="syz.2.2683" name="UDPLITEv6" dev="sockfs" ino=30969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.519701][T10668] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.2681: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 159.782340][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.916585][T10665] Set syz1 is full, maxelem 65536 reached [ 159.923318][T10683] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.934710][ T29] audit: type=1326 audit(1766524754.064:67841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 159.961647][ T29] audit: type=1326 audit(1766524754.064:67842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 159.985382][ T29] audit: type=1326 audit(1766524754.064:67843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.009068][ T29] audit: type=1326 audit(1766524754.064:67844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.032699][ T29] audit: type=1326 audit(1766524754.064:67845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.056290][ T29] audit: type=1326 audit(1766524754.064:67846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.080090][ T29] audit: type=1326 audit(1766524754.064:67847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.103777][ T29] audit: type=1326 audit(1766524754.064:67848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.127351][ T29] audit: type=1326 audit(1766524754.064:67849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10687 comm="syz.2.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 160.173445][T10683] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.198296][T10691] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.238098][T10691] set_capacity_and_notify: 14 callbacks suppressed [ 160.238129][T10691] loop0: detected capacity change from 0 to 512 [ 160.255421][T10691] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.272130][T10691] EXT4-fs (loop0): 1 truncate cleaned up [ 160.281117][T10691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.349658][T10683] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.368914][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.395010][T10699] loop0: detected capacity change from 0 to 128 [ 160.427577][T10683] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.483174][ T1601] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.503687][ T1601] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.540039][T10705] openvswitch: netlink: Key type 110 is out of range max 32 [ 160.547212][ T1601] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.548391][T10705] netlink: 'syz.0.2696': attribute type 2 has an invalid length. [ 160.563280][T10705] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2696'. [ 160.574380][ T1601] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.611015][T10709] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2698'. [ 160.944359][T10723] SELinux: Context € is not valid (left unmapped). [ 161.089665][ T1618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.100052][ T1618] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.144818][T10733] loop5: detected capacity change from 0 to 2048 [ 161.184570][T10735] loop2: detected capacity change from 0 to 2048 [ 161.193779][ T1618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.204234][ T1618] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.246237][T10735] Alternate GPT is invalid, using primary GPT. [ 161.252651][T10735] loop2: p2 p3 p7 [ 161.268546][ T1618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.278906][ T1618] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.314923][T10733] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.327106][T10733] ext4 filesystem being mounted at /470/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.346384][ T1618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.356690][ T1618] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.395506][T10744] loop2: detected capacity change from 0 to 512 [ 161.402513][T10744] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.423519][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.437244][T10744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.450129][T10744] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.475220][ T1618] bridge_slave_1: left allmulticast mode [ 161.480952][ T1618] bridge_slave_1: left promiscuous mode [ 161.486791][ T1618] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.511594][ T1618] bridge_slave_0: left allmulticast mode [ 161.517456][ T1618] bridge_slave_0: left promiscuous mode [ 161.523572][ T1618] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.552679][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.562187][T10756] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2712'. [ 161.630686][T10765] loop6: detected capacity change from 0 to 512 [ 161.637505][T10765] EXT4-fs: Ignoring removed i_version option [ 161.645206][T10765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.666054][T10765] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2717'. [ 161.731576][T10802] FAULT_INJECTION: forcing a failure. [ 161.731576][T10802] name failslab, interval 1, probability 0, space 0, times 0 [ 161.744327][T10802] CPU: 0 UID: 0 PID: 10802 Comm: syz.2.2720 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.744368][T10802] Tainted: [W]=WARN [ 161.744377][T10802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.744496][T10802] Call Trace: [ 161.744503][T10802] [ 161.744511][T10802] __dump_stack+0x1d/0x30 [ 161.744536][T10802] dump_stack_lvl+0x95/0xd0 [ 161.744557][T10802] dump_stack+0x15/0x1b [ 161.744578][T10802] should_fail_ex+0x265/0x280 [ 161.744605][T10802] should_failslab+0x8c/0xb0 [ 161.744717][T10802] __kmalloc_cache_noprof+0x65/0x4c0 [ 161.744751][T10802] ? v9fs_get_tree+0x49/0x5f0 [ 161.744796][T10802] v9fs_get_tree+0x49/0x5f0 [ 161.744824][T10802] ? security_capable+0x83/0x90 [ 161.744881][T10802] vfs_get_tree+0x57/0x1d0 [ 161.744949][T10802] do_new_mount+0x24d/0x6a0 [ 161.744972][T10802] ? security_capable+0x83/0x90 [ 161.745010][T10802] path_mount+0x4ab/0xb80 [ 161.745108][T10802] ? user_path_at+0xbf/0x130 [ 161.745163][T10802] __se_sys_mount+0x28c/0x2e0 [ 161.745187][T10802] ? fput+0x8f/0xc0 [ 161.745290][T10802] __x64_sys_mount+0x67/0x80 [ 161.745314][T10802] x64_sys_call+0x2cca/0x3000 [ 161.745342][T10802] do_syscall_64+0xca/0x2b0 [ 161.745386][T10802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.745411][T10802] RIP: 0033:0x7f4e7f5cf749 [ 161.745427][T10802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.745447][T10802] RSP: 002b:00007f4e7e02f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 161.745468][T10802] RAX: ffffffffffffffda RBX: 00007f4e7f825fa0 RCX: 00007f4e7f5cf749 [ 161.745535][T10802] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 161.745548][T10802] RBP: 00007f4e7e02f090 R08: 0000200000000600 R09: 0000000000000000 [ 161.745562][T10802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.745642][T10802] R13: 00007f4e7f826038 R14: 00007f4e7f825fa0 R15: 00007fff73e591f8 [ 161.745663][T10802] [ 161.752100][ T1618] tipc: Disabling bearer [ 161.957718][ T1618] tipc: Left network mode [ 161.985657][T10718] chnl_net:caif_netlink_parms(): no params data found [ 162.045427][ T9887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.056166][ T1618] hsr_slave_0: left promiscuous mode [ 162.061913][ T1618] hsr_slave_1: left promiscuous mode [ 162.093333][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.100781][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.116812][T10865] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 162.125726][ T1618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.133144][ T1618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.144991][ T1618] veth1_macvtap: left promiscuous mode [ 162.150491][ T1618] veth0_macvtap: left promiscuous mode [ 162.156094][ T1618] veth1_vlan: left promiscuous mode [ 162.161452][ T1618] veth0_vlan: left promiscuous mode [ 162.208425][T10873] loop6: detected capacity change from 0 to 764 [ 162.216181][T10873] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 162.258404][ T1618] team0 (unregistering): Port device team_slave_0 removed [ 162.289719][T10885] loop6: detected capacity change from 0 to 128 [ 162.298954][T10885] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.311604][T10885] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 162.350895][T10865] team0: Port device dummy0 added [ 162.361665][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.369213][T10876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.395447][ T9887] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.405578][T10876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.412980][T10876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.470785][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.478110][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.485987][T10718] bridge_slave_0: entered allmulticast mode [ 162.492768][T10718] bridge_slave_0: entered promiscuous mode [ 162.501101][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.508245][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.515987][T10718] bridge_slave_1: entered allmulticast mode [ 162.522648][T10718] bridge_slave_1: entered promiscuous mode [ 162.543874][T10928] loop6: detected capacity change from 0 to 2048 [ 162.575525][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.589292][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.618928][T10928] loop6: p1 < > [ 162.649671][T10974] pimreg: entered allmulticast mode [ 162.653225][T10928] loop6: detected capacity change from 0 to 2048 [ 162.687965][T10718] team0: Port device team_slave_0 added [ 162.700727][ T1618] IPVS: stop unused estimator thread 0... [ 162.708650][T10718] team0: Port device team_slave_1 added [ 162.745235][T10928] loop6: p1 < > [ 162.760287][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.767828][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.794355][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.854592][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.861613][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.887801][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.998227][T11061] __nla_validate_parse: 8 callbacks suppressed [ 162.998243][T11061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2751'. [ 163.058861][T11079] Cannot find set identified by id 0 to match [ 163.068407][T10718] hsr_slave_0: entered promiscuous mode [ 163.091234][T10718] hsr_slave_1: entered promiscuous mode [ 163.110060][T10718] debugfs: 'hsr0' already exists in 'hsr' [ 163.115927][T10718] Cannot create hsr debugfs directory [ 163.121574][T11084] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 163.200815][T11094] FAULT_INJECTION: forcing a failure. [ 163.200815][T11094] name failslab, interval 1, probability 0, space 0, times 0 [ 163.213553][T11094] CPU: 1 UID: 0 PID: 11094 Comm: syz.6.2759 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.213588][T11094] Tainted: [W]=WARN [ 163.213598][T11094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.213627][T11094] Call Trace: [ 163.213634][T11094] [ 163.213642][T11094] __dump_stack+0x1d/0x30 [ 163.213669][T11094] dump_stack_lvl+0x95/0xd0 [ 163.213710][T11094] dump_stack+0x15/0x1b [ 163.213762][T11094] should_fail_ex+0x265/0x280 [ 163.213792][T11094] should_failslab+0x8c/0xb0 [ 163.213821][T11094] __kmalloc_noprof+0xb9/0x5a0 [ 163.213850][T11094] ? __rds_conn_create+0x40d/0x1030 [ 163.213951][T11094] ? __rds_conn_create+0x3e7/0x1030 [ 163.213978][T11094] __rds_conn_create+0x40d/0x1030 [ 163.214010][T11094] rds_conn_create_outgoing+0x43/0x60 [ 163.214039][T11094] rds_sendmsg+0xbd2/0x14a0 [ 163.214080][T11094] ? __pfx_rds_sendmsg+0x10/0x10 [ 163.214169][T11094] __sock_sendmsg+0x145/0x180 [ 163.214192][T11094] __sys_sendto+0x268/0x330 [ 163.214250][T11094] __x64_sys_sendto+0x76/0x90 [ 163.214283][T11094] x64_sys_call+0x29a7/0x3000 [ 163.214316][T11094] do_syscall_64+0xca/0x2b0 [ 163.214422][T11094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.214450][T11094] RIP: 0033:0x7f41e406f749 [ 163.214469][T11094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.214493][T11094] RSP: 002b:00007f41e2acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 163.214599][T11094] RAX: ffffffffffffffda RBX: 00007f41e42c5fa0 RCX: 00007f41e406f749 [ 163.214613][T11094] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 163.214626][T11094] RBP: 00007f41e2acf090 R08: 0000000000000000 R09: 0000000000000000 [ 163.214638][T11094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.214650][T11094] R13: 00007f41e42c6038 R14: 00007f41e42c5fa0 R15: 00007ffdf0781488 [ 163.214675][T11094] [ 163.503512][T11147] IPv4: Oversized IP packet from 127.202.26.0 [ 163.561534][T11172] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2765'. [ 163.579323][T11174] netlink: 'syz.5.2766': attribute type 3 has an invalid length. [ 163.594055][T11179] netlink: 'syz.2.2767': attribute type 1 has an invalid length. [ 163.632811][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2769'. [ 163.651794][T11183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2769'. [ 163.734243][T10718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.743273][T10718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.752000][T10718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.765693][T10718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.815560][T11214] vlan2: entered allmulticast mode [ 163.839060][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.851120][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.872831][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.880001][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.891064][ T1618] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.898203][ T1618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.046802][T11241] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2776'. [ 164.069111][T10718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.077810][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 164.086961][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 164.100697][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 164.117326][T11244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.164843][T11265] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 164.168154][T11245] loop6: p1 p3 p4 [ 164.199046][T11245] loop6: p4 size 589824 extends beyond EOD, truncated [ 164.220663][T11279] netlink: 'syz.1.2781': attribute type 2 has an invalid length. [ 164.228495][T11279] netlink: 'syz.1.2781': attribute type 4 has an invalid length. [ 164.236263][T11279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2781'. [ 164.281975][T10718] veth0_vlan: entered promiscuous mode [ 164.298549][T10718] veth1_vlan: entered promiscuous mode [ 164.326087][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2784: inode has both inline data and extents flags [ 164.339976][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2784: couldn't read orphan inode 15 (err -117) [ 164.353449][T11294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.358683][T10718] veth0_macvtap: entered promiscuous mode [ 164.375595][T11294] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 164.375626][T10718] veth1_macvtap: entered promiscuous mode [ 164.395807][T10718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.410449][T10718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.419252][ T9887] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.431659][T11015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.452992][T11015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.484027][T11015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.494612][T11015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.513074][ T29] kauditd_printk_skb: 309 callbacks suppressed [ 164.513087][ T29] audit: type=1400 audit(1766524758.634:68159): avc: denied { append } for pid=11315 comm="syz.6.2788" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 164.545362][T11316] Cannot find set identified by id 0 to match [ 164.569646][ T29] audit: type=1400 audit(1766524758.684:68160): avc: denied { create } for pid=11318 comm="syz.0.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 164.594420][T11321] netlink: 'syz.6.2790': attribute type 1 has an invalid length. [ 164.668194][T11332] vfat: Unknown parameter 's' [ 164.768498][T11348] EXT4-fs: test_dummy_encryption option not supported [ 164.842643][T11353] bio_check_eod: 102 callbacks suppressed [ 164.842672][T11353] syz.6.2798: attempt to access beyond end of device [ 164.842672][T11353] loop6: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 164.865603][T11353] syz.6.2798: attempt to access beyond end of device [ 164.865603][T11353] loop6: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 164.928657][T11361] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 165.024306][ T29] audit: type=1400 audit(1766524759.154:68161): avc: denied { ioctl } for pid=11369 comm="syz.0.2801" path="socket:[32899]" dev="sockfs" ino=32899 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.052499][T11374] netlink: 'syz.5.2797': attribute type 1 has an invalid length. [ 165.181041][T11381] netlink: 'syz.6.2803': attribute type 1 has an invalid length. [ 165.275896][T11383] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2804'. [ 165.290244][T11383] bond0: entered promiscuous mode [ 165.295335][T11383] bond_slave_0: entered promiscuous mode [ 165.301093][T11383] bond_slave_1: entered promiscuous mode [ 165.309004][T11383] ipvlan1: entered promiscuous mode [ 165.316860][T11383] ipvlan1: left promiscuous mode [ 165.322224][T11383] bond0: left promiscuous mode [ 165.327128][T11383] bond_slave_0: left promiscuous mode [ 165.332633][T11383] bond_slave_1: left promiscuous mode [ 165.358723][T11354] geneve2: entered promiscuous mode [ 165.412896][ T29] audit: type=1400 audit(1766524759.534:68162): avc: denied { bind } for pid=11393 comm="syz.2.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.477195][T11373] syzkaller1: entered promiscuous mode [ 165.482752][T11373] syzkaller1: entered allmulticast mode [ 165.508210][T11429] FAULT_INJECTION: forcing a failure. [ 165.508210][T11429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.521485][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.2.2806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 165.521533][T11429] Tainted: [W]=WARN [ 165.521541][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.521555][T11429] Call Trace: [ 165.521562][T11429] [ 165.521568][T11429] __dump_stack+0x1d/0x30 [ 165.521589][T11429] dump_stack_lvl+0x95/0xd0 [ 165.521609][T11429] dump_stack+0x15/0x1b [ 165.521704][T11429] should_fail_ex+0x265/0x280 [ 165.521758][T11429] should_fail+0xb/0x20 [ 165.521777][T11429] should_fail_usercopy+0x1a/0x20 [ 165.521804][T11429] _copy_from_iter+0xcf/0xe70 [ 165.521977][T11429] ? __alloc_skb+0x396/0x4b0 [ 165.521997][T11429] ? __alloc_skb+0x228/0x4b0 [ 165.522019][T11429] netlink_sendmsg+0x471/0x6b0 [ 165.522055][T11429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.522106][T11429] __sock_sendmsg+0x145/0x180 [ 165.522123][T11429] ____sys_sendmsg+0x31e/0x4a0 [ 165.522150][T11429] ___sys_sendmsg+0x17b/0x1d0 [ 165.522190][T11429] __x64_sys_sendmsg+0xd4/0x160 [ 165.522265][T11429] x64_sys_call+0x17ba/0x3000 [ 165.522291][T11429] do_syscall_64+0xca/0x2b0 [ 165.522329][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.522395][T11429] RIP: 0033:0x7f4e7f5cf749 [ 165.522408][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.522423][T11429] RSP: 002b:00007f4e7e02f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.522439][T11429] RAX: ffffffffffffffda RBX: 00007f4e7f825fa0 RCX: 00007f4e7f5cf749 [ 165.522451][T11429] RDX: 0000000038000016 RSI: 00002000000001c0 RDI: 0000000000000003 [ 165.522500][T11429] RBP: 00007f4e7e02f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.522514][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.522527][T11429] R13: 00007f4e7f826038 R14: 00007f4e7f825fa0 R15: 00007fff73e591f8 [ 165.522547][T11429] [ 165.747214][ T29] audit: type=1400 audit(1766524759.564:68163): avc: denied { listen } for pid=11393 comm="syz.2.2805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.774583][ T60] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.782966][ T60] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.791339][ T60] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 165.827707][ T60] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.836100][ T60] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.844503][ T60] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 165.859773][ T60] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.868302][ T60] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.876844][ T60] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 165.889208][T11431] set_capacity_and_notify: 8 callbacks suppressed [ 165.889223][T11431] loop2: detected capacity change from 0 to 128 [ 165.903019][ T60] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.911467][ T60] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.919855][ T60] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 165.956388][ T29] audit: type=1326 audit(1766524760.084:68164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 165.996471][T11438] 9p: Bad value for 'rfdno' [ 166.013939][ T29] audit: type=1326 audit(1766524760.114:68165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 166.037597][ T29] audit: type=1326 audit(1766524760.114:68166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 166.061354][ T29] audit: type=1326 audit(1766524760.114:68167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 166.085046][ T29] audit: type=1326 audit(1766524760.114:68168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11435 comm="syz.2.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e7f5cf749 code=0x7ffc0000 [ 166.139546][T11449] loop2: detected capacity change from 0 to 512 [ 166.148819][T11449] SELinux: Context system_u:object_r:getty_etc_t:s0 is not valid (left unmapped). [ 166.213776][T11461] netlink: 'syz.2.2814': attribute type 1 has an invalid length. [ 166.332572][T11457] loop6: detected capacity change from 0 to 512 [ 166.349091][T11457] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2812: error while reading EA inode 32 err=-116 [ 166.376122][T11457] EXT4-fs (loop6): Remounting filesystem read-only [ 166.382804][T11457] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 166.392975][T11457] EXT4-fs (loop6): 1 orphan inode deleted [ 166.399339][T11457] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.412132][T11457] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.444290][T11501] loop5: detected capacity change from 0 to 128 [ 166.465553][T11457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11457 comm=syz.6.2812 [ 166.615110][T11528] netlink: 'syz.5.2826': attribute type 1 has an invalid length. [ 166.685122][T11539] syz_tun: left allmulticast mode [ 166.703161][T11535] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 166.721961][T11544] loop5: detected capacity change from 0 to 164 [ 166.740828][T11549] loop2: detected capacity change from 0 to 128 [ 166.748092][T11544] FAULT_INJECTION: forcing a failure. [ 166.748092][T11544] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.748862][T11549] EXT4-fs: Ignoring removed nobh option [ 166.761644][T11544] CPU: 0 UID: 0 PID: 11544 Comm: syz.5.2832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.761787][T11544] Tainted: [W]=WARN [ 166.761801][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.761833][T11544] Call Trace: [ 166.761851][T11544] [ 166.761888][T11544] __dump_stack+0x1d/0x30 [ 166.762056][T11544] dump_stack_lvl+0x95/0xd0 [ 166.762132][T11544] dump_stack+0x15/0x1b [ 166.762194][T11544] should_fail_ex+0x265/0x280 [ 166.762315][T11544] should_fail_alloc_page+0xf2/0x100 [ 166.762384][T11544] __alloc_frozen_pages_noprof+0x109/0x360 [ 166.762471][T11544] alloc_pages_mpol+0xb3/0x260 [ 166.762614][T11544] alloc_pages_noprof+0x90/0x130 [ 166.762766][T11544] pte_alloc_one+0x1e/0xd0 [ 166.762849][T11544] __pte_alloc+0x32/0x2c0 [ 166.762933][T11544] handle_mm_fault+0x1c8e/0x2c60 [ 166.763065][T11544] ? check_vma_flags+0x26e/0x340 [ 166.763154][T11544] __get_user_pages+0x1024/0x1ed0 [ 166.763321][T11544] get_user_pages_remote+0x1d5/0x6c0 [ 166.763407][T11544] ? down_read+0x77/0xb0 [ 166.763513][T11544] get_arg_page+0x8e/0x1e0 [ 166.763595][T11544] copy_string_kernel+0x12c/0x1f0 [ 166.763695][T11544] do_execveat_common+0x5ad/0x750 [ 166.763823][T11544] ? getname_flags+0x154/0x3b0 [ 166.763919][T11544] __x64_sys_execveat+0x73/0x90 [ 166.764073][T11544] x64_sys_call+0x1c0e/0x3000 [ 166.764182][T11544] do_syscall_64+0xca/0x2b0 [ 166.764365][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.764437][T11544] RIP: 0033:0x7f406e50f749 [ 166.764487][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.764543][T11544] RSP: 002b:00007f406cf77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 166.764631][T11544] RAX: ffffffffffffffda RBX: 00007f406e765fa0 RCX: 00007f406e50f749 [ 166.764673][T11544] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.764713][T11544] RBP: 00007f406cf77090 R08: 0000000000001000 R09: 0000000000000000 [ 166.764753][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.764794][T11544] R13: 00007f406e766038 R14: 00007f406e765fa0 R15: 00007ffc8db223e8 [ 166.764903][T11544] [ 166.991767][T11549] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.012929][T11555] loop6: detected capacity change from 0 to 2048 [ 167.021028][T11549] ext4 filesystem being mounted at /519/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 167.054643][T11555] loop6: p1 < > p4 [ 167.073320][T11555] loop6: p4 size 8388608 extends beyond EOD, truncated [ 167.091528][ T3316] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.182810][T11593] loop2: detected capacity change from 0 to 128 [ 167.762813][T11673] SELinux: ebitmap: truncated map [ 167.770345][T11673] SELinux: failed to load policy [ 167.824086][T11680] FAULT_INJECTION: forcing a failure. [ 167.824086][T11680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.837260][T11680] CPU: 1 UID: 0 PID: 11680 Comm: syz.6.2863 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.837294][T11680] Tainted: [W]=WARN [ 167.837302][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.837314][T11680] Call Trace: [ 167.837319][T11680] [ 167.837325][T11680] __dump_stack+0x1d/0x30 [ 167.837416][T11680] dump_stack_lvl+0x95/0xd0 [ 167.837517][T11680] dump_stack+0x15/0x1b [ 167.837538][T11680] should_fail_ex+0x265/0x280 [ 167.837572][T11680] should_fail+0xb/0x20 [ 167.837590][T11680] should_fail_usercopy+0x1a/0x20 [ 167.837616][T11680] _copy_to_iter+0x251/0xe70 [ 167.837660][T11680] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 167.837679][T11680] ? __list_del_entry_valid_or_report+0x65/0x130 [ 167.837735][T11680] tun_do_read+0x11c7/0x15e0 [ 167.837781][T11680] tun_chr_read_iter+0x176/0x250 [ 167.837876][T11680] do_iter_readv_writev+0x4a1/0x540 [ 167.837930][T11680] vfs_readv+0x1ea/0x690 [ 167.838016][T11680] do_readv+0xe7/0x210 [ 167.838081][T11680] __x64_sys_readv+0x45/0x50 [ 167.838099][T11680] x64_sys_call+0x2831/0x3000 [ 167.838165][T11680] do_syscall_64+0xca/0x2b0 [ 167.838195][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.838213][T11680] RIP: 0033:0x7f41e406f749 [ 167.838229][T11680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.838282][T11680] RSP: 002b:00007f41e2acf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 167.838303][T11680] RAX: ffffffffffffffda RBX: 00007f41e42c5fa0 RCX: 00007f41e406f749 [ 167.838316][T11680] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000005 [ 167.838326][T11680] RBP: 00007f41e2acf090 R08: 0000000000000000 R09: 0000000000000000 [ 167.838338][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.838350][T11680] R13: 00007f41e42c6038 R14: 00007f41e42c5fa0 R15: 00007ffdf0781488 [ 167.838368][T11680] [ 168.306781][T11744] __nla_validate_parse: 6 callbacks suppressed [ 168.306796][T11744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2872'. [ 168.327707][T11744] ip6tnl1: entered allmulticast mode [ 168.509015][T11015] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.518985][T11015] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.530077][T11736] chnl_net:caif_netlink_parms(): no params data found [ 168.579149][T11015] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.588948][T11015] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.600517][T11736] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.607734][T11736] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.615132][T11736] bridge_slave_0: entered allmulticast mode [ 168.621485][T11736] bridge_slave_0: entered promiscuous mode [ 168.628582][T11736] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.635851][T11736] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.643211][T11736] bridge_slave_1: entered allmulticast mode [ 168.649812][T11736] bridge_slave_1: entered promiscuous mode [ 168.658339][T11015] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.668193][T11015] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.691770][T11736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.702224][T11736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.724203][T11015] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.734024][T11015] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.747231][T11736] team0: Port device team_slave_0 added [ 168.753987][T11736] team0: Port device team_slave_1 added [ 168.780379][T11736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.787366][T11736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.813608][T11736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.820149][T12002] loop5: detected capacity change from 0 to 128 [ 168.829496][T11736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.837520][T11736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.842335][T12002] syz.5.2879: attempt to access beyond end of device [ 168.842335][T12002] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 168.863443][T11736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.889182][T12002] syz.5.2879: attempt to access beyond end of device [ 168.889182][T12002] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 168.902969][T12002] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 168.912042][T12002] syz.5.2879: attempt to access beyond end of device [ 168.912042][T12002] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 168.925826][T12002] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 168.936068][T12002] syz.5.2879: attempt to access beyond end of device [ 168.936068][T12002] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 168.952105][T12002] syz.5.2879: attempt to access beyond end of device [ 168.952105][T12002] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 168.956339][T11736] hsr_slave_0: entered promiscuous mode [ 168.966150][T12002] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 168.973027][T11736] hsr_slave_1: entered promiscuous mode [ 168.986216][T12002] syz.5.2879: attempt to access beyond end of device [ 168.986216][T12002] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 168.999896][T12002] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 169.008751][T11736] debugfs: 'hsr0' already exists in 'hsr' [ 169.014545][T11736] Cannot create hsr debugfs directory [ 169.024728][T11015] bridge_slave_1: left allmulticast mode [ 169.030410][T11015] bridge_slave_1: left promiscuous mode [ 169.036168][T11015] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.043388][T12002] syz.5.2879: attempt to access beyond end of device [ 169.043388][T12002] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 169.057543][T12002] syz.5.2879: attempt to access beyond end of device [ 169.057543][T12002] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 169.071317][T12002] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 169.079883][T12002] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 169.081354][T12002] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 169.097417][T12002] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 169.098212][T12002] Buffer I/O error on dev loop5, logical block 115, lost async page write [ 169.114604][T12002] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 169.267598][T12051] netlink: 664 bytes leftover after parsing attributes in process `syz.0.2881'. [ 169.310439][T11015] tipc: Disabling bearer [ 169.315735][T11015] tipc: Left network mode [ 169.356232][T11015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.367110][T11015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.374563][T11015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.426921][T11015] veth1_macvtap: left promiscuous mode [ 169.432506][T11015] veth0_macvtap: left promiscuous mode [ 169.438355][T11015] veth1_vlan: left promiscuous mode [ 169.463733][T12105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2886'. [ 169.474470][T12106] validate_nla: 3 callbacks suppressed [ 169.474482][T12106] netlink: 'syz.5.2885': attribute type 4 has an invalid length. [ 169.487812][T12106] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2885'. [ 169.529226][T11015] team0 (unregistering): Port device team_slave_1 removed [ 169.539766][T11015] team0 (unregistering): Port device team_slave_0 removed [ 169.591573][T12106] .`: renamed from $Hÿ [ 169.630435][T12130] loop5: detected capacity change from 0 to 512 [ 169.647967][T12130] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2889: bg 0: block 248: padding at end of block bitmap is not set [ 169.663435][T12130] __quota_error: 498 callbacks suppressed [ 169.663448][T12130] Quota error (device loop5): write_blk: dquota write failed [ 169.676718][T12130] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 169.687338][T12130] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2889: Failed to acquire dquot type 1 [ 169.699270][T12130] EXT4-fs (loop5): 1 truncate cleaned up [ 169.705387][T12130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.718161][T12130] ext4 filesystem being mounted at /525/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.742553][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.773691][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.783088][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.941312][T11736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.949982][T11736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.958731][T11736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.968104][T11736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 170.008599][T11736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.021570][T11736] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.031988][ T1720] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.039154][ T1720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.049265][ T1720] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.056400][ T1720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.078053][ T29] audit: type=1400 audit(1766524764.204:68667): avc: denied { connect } for pid=12177 comm="syz.0.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.098519][ T29] audit: type=1400 audit(1766524764.204:68668): avc: denied { bind } for pid=12177 comm="syz.0.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 170.139593][ T29] audit: type=1326 audit(1766524764.264:68669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.163312][ T29] audit: type=1326 audit(1766524764.264:68670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.190135][ T29] audit: type=1326 audit(1766524764.314:68671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.213949][ T29] audit: type=1326 audit(1766524764.314:68672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.237727][ T29] audit: type=1326 audit(1766524764.314:68673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.261442][ T29] audit: type=1326 audit(1766524764.314:68674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.0.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 170.329115][T11736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.341586][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2897'. [ 170.415829][T11736] veth0_vlan: entered promiscuous mode [ 170.426454][T12203] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 170.440143][T11736] veth1_vlan: entered promiscuous mode [ 170.481809][T11736] veth0_macvtap: entered promiscuous mode [ 170.504626][T11736] veth1_macvtap: entered promiscuous mode [ 170.521007][T11736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.534739][T11736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.548373][ T175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.574922][ T175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.600360][ T175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.619124][ T175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.628940][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2908'. [ 170.639013][T12232] veth0_to_team: entered promiscuous mode [ 170.651644][T12235] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2871'. [ 170.721930][T12254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2915'. [ 170.808463][T12262] xt_hashlimit: max too large, truncated to 1048576 [ 170.825018][T12264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2917'. [ 170.871349][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2921'. [ 170.917013][T12267] ip6gre1: entered allmulticast mode [ 171.150543][T12273] qrtr: Invalid version 0 [ 171.452786][T12338] loop6: detected capacity change from 0 to 128 [ 171.538900][T12350] FAULT_INJECTION: forcing a failure. [ 171.538900][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 171.551631][T12350] CPU: 0 UID: 0 PID: 12350 Comm: syz.0.2945 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 171.551661][T12350] Tainted: [W]=WARN [ 171.551667][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.551799][T12350] Call Trace: [ 171.551817][T12350] [ 171.551825][T12350] __dump_stack+0x1d/0x30 [ 171.551916][T12350] dump_stack_lvl+0x95/0xd0 [ 171.552025][T12350] dump_stack+0x15/0x1b [ 171.552048][T12350] should_fail_ex+0x265/0x280 [ 171.552074][T12350] should_failslab+0x8c/0xb0 [ 171.552097][T12350] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 171.552121][T12350] ? sidtab_sid2str_get+0xa0/0x130 [ 171.552151][T12350] kmemdup_noprof+0x2b/0x70 [ 171.552169][T12350] sidtab_sid2str_get+0xa0/0x130 [ 171.552203][T12350] security_sid_to_context_core+0x1eb/0x2e0 [ 171.552291][T12350] security_sid_to_context+0x27/0x40 [ 171.552337][T12350] selinux_lsmprop_to_secctx+0x67/0xf0 [ 171.552371][T12350] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 171.552471][T12350] audit_log_subj_ctx+0xa4/0x3e0 [ 171.552492][T12350] ? skb_put+0xa9/0xf0 [ 171.552585][T12350] audit_log_task_context+0x48/0x70 [ 171.552628][T12350] audit_log_task+0xf4/0x250 [ 171.552703][T12350] ? kstrtouint+0x76/0xc0 [ 171.552757][T12350] audit_seccomp+0x61/0x100 [ 171.552797][T12350] ? __seccomp_filter+0x832/0x1260 [ 171.552829][T12350] __seccomp_filter+0x843/0x1260 [ 171.552865][T12350] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 171.552891][T12350] ? vfs_write+0x7e8/0x960 [ 171.552912][T12350] ? __rcu_read_unlock+0x4f/0x70 [ 171.552935][T12350] ? __fget_files+0x184/0x1c0 [ 171.553014][T12350] __secure_computing+0x82/0x150 [ 171.553045][T12350] syscall_trace_enter+0xcf/0x1e0 [ 171.553130][T12350] do_syscall_64+0xa4/0x2b0 [ 171.553185][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.553212][T12350] RIP: 0033:0x7f74c248f749 [ 171.553228][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.553245][T12350] RSP: 002b:00007f74c0ef7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000047 [ 171.553263][T12350] RAX: ffffffffffffffda RBX: 00007f74c26e5fa0 RCX: 00007f74c248f749 [ 171.553275][T12350] RDX: 00002000000004c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 171.553321][T12350] RBP: 00007f74c0ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 171.553337][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.553353][T12350] R13: 00007f74c26e6038 R14: 00007f74c26e5fa0 R15: 00007fff69c38df8 [ 171.553400][T12350] [ 171.955541][T12377] loop2: detected capacity change from 0 to 128 [ 172.081030][T12345] qrtr: Invalid version 0 [ 172.203659][T12412] veth0_to_team: entered promiscuous mode [ 172.277914][T12386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12386 comm=syz.6.2955 [ 172.453150][T12443] loop2: detected capacity change from 0 to 128 [ 172.475588][T12443] bio_check_eod: 34 callbacks suppressed [ 172.475630][T12443] syz.2.2972: attempt to access beyond end of device [ 172.475630][T12443] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 172.504873][T12443] syz.2.2972: attempt to access beyond end of device [ 172.504873][T12443] loop2: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 172.523013][T12443] syz.2.2972: attempt to access beyond end of device [ 172.523013][T12443] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 172.537632][T12443] syz.2.2972: attempt to access beyond end of device [ 172.537632][T12443] loop2: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 172.551877][T12443] syz.2.2972: attempt to access beyond end of device [ 172.551877][T12443] loop2: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 172.567453][T12443] syz.2.2972: attempt to access beyond end of device [ 172.567453][T12443] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 172.602362][T12443] syz.2.2972: attempt to access beyond end of device [ 172.602362][T12443] loop2: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 172.616717][T12443] syz.2.2972: attempt to access beyond end of device [ 172.616717][T12443] loop2: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 172.630553][T12443] syz.2.2972: attempt to access beyond end of device [ 172.630553][T12443] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 172.680927][T12443] syz.2.2972: attempt to access beyond end of device [ 172.680927][T12443] loop2: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 172.788614][T12455] 9p: Could not find request transport: EbÇ8^­Ä [ 172.943459][T12485] loop2: detected capacity change from 0 to 128 [ 173.133438][T12500] qrtr: Invalid version 0 [ 173.263570][T12526] loop5: detected capacity change from 0 to 512 [ 173.266284][T12526] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.289579][T12526] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 173.297614][T12526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0102] [ 173.310593][T12526] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 173.320117][T12526] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 173.329480][T12526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 173.364358][T12526] __nla_validate_parse: 9 callbacks suppressed [ 173.364449][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3002'. [ 173.401563][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.521709][T12564] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 173.734758][T12594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3022'. [ 173.806615][T12594] loop5: detected capacity change from 0 to 2048 [ 173.829046][T12594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.874086][ T175] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 173.898581][T12613] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 173.906914][ T175] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 173.919290][ T175] EXT4-fs (loop5): This should not happen!! Data will be lost [ 173.919290][ T175] [ 173.921591][T12611] loop2: detected capacity change from 0 to 2048 [ 173.928959][ T175] EXT4-fs (loop5): Total free blocks count 0 [ 173.928983][ T175] EXT4-fs (loop5): Free/Dirty block details [ 173.928996][ T175] EXT4-fs (loop5): free_blocks=66060288 [ 173.952847][ T175] EXT4-fs (loop5): dirty_blocks=16 [ 173.957994][ T175] EXT4-fs (loop5): Block reservation details [ 173.964024][ T175] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 173.983191][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.994809][T12611] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 174.016535][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3028'. [ 174.183041][T12653] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 174.195212][T12656] netlink: 'syz.5.3040': attribute type 1 has an invalid length. [ 174.203246][T12653] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3039'. [ 174.249916][T12625] qrtr: Invalid version 0 [ 174.281498][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3042'. [ 174.330980][T12670] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3046'. [ 174.364832][T12672] loop5: detected capacity change from 0 to 128 [ 174.388918][T12672] buffer_io_error: 48 callbacks suppressed [ 174.388932][T12672] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 174.403302][T12672] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 174.425182][T12672] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 174.438071][T12672] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 174.470811][T12672] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 174.479436][T12672] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 174.489681][T12672] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 174.503766][T12672] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 174.513225][T12672] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 174.522168][T12672] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 174.674907][T12697] netlink: 'syz.6.3053': attribute type 1 has an invalid length. [ 174.737667][T12704] loop6: detected capacity change from 0 to 1024 [ 174.783503][ T29] kauditd_printk_skb: 1464 callbacks suppressed [ 174.783517][ T29] audit: type=1326 audit(1766524768.904:70138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.822549][T12716] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3058'. [ 174.831655][ T29] audit: type=1326 audit(1766524768.904:70139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.855363][ T29] audit: type=1326 audit(1766524768.914:70140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.879255][ T29] audit: type=1326 audit(1766524768.914:70141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.944116][ T29] audit: type=1326 audit(1766524769.004:70142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.967836][ T29] audit: type=1326 audit(1766524769.004:70143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 174.991688][ T29] audit: type=1326 audit(1766524769.054:70144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 175.015249][ T29] audit: type=1326 audit(1766524769.054:70145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 175.038919][ T29] audit: type=1326 audit(1766524769.054:70146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 175.062515][ T29] audit: type=1326 audit(1766524769.054:70147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12713 comm="syz.0.3060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 175.142456][T12739] netlink: 'syz.5.3066': attribute type 1 has an invalid length. [ 175.262108][T12750] loop5: detected capacity change from 0 to 128 [ 175.372651][T12764] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 175.808867][T12780] qrtr: Invalid version 0 [ 176.311542][T12814] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 176.323076][T12814] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3091'. [ 176.356603][T12814] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.386458][T12814] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.488547][T12840] set_capacity_and_notify: 2 callbacks suppressed [ 176.488559][T12840] loop5: detected capacity change from 0 to 128 [ 176.502991][T12843] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3097'. [ 176.649691][T12844] qrtr: Invalid version 0 [ 176.802104][T12854] qrtr: Invalid version 0 [ 177.403489][T12870] loop2: detected capacity change from 0 to 128 [ 177.504657][ T357] bio_check_eod: 31122 callbacks suppressed [ 177.504675][ T357] kworker/u8:6: attempt to access beyond end of device [ 177.504675][ T357] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 177.553827][ T357] kworker/u8:6: attempt to access beyond end of device [ 177.553827][ T357] loop5: rw=1, sector=305, nr_sectors = 8 limit=128 [ 177.585812][T12882] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3111'. [ 177.605147][T12870] qrtr: Invalid version 0 [ 177.634835][T12889] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 177.653314][T12889] loop5: detected capacity change from 0 to 2048 [ 177.670496][T12889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.683094][T12899] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 177.783783][T12908] loop2: detected capacity change from 0 to 128 [ 177.796791][T12889] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.871865][T12908] syz.2.3117: attempt to access beyond end of device [ 177.871865][T12908] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 177.885466][T12908] syz.2.3117: attempt to access beyond end of device [ 177.885466][T12908] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 177.903625][T12908] syz.2.3117: attempt to access beyond end of device [ 177.903625][T12908] loop2: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 177.944403][T12908] syz.2.3117: attempt to access beyond end of device [ 177.944403][T12908] loop2: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 178.000866][T12908] syz.2.3117: attempt to access beyond end of device [ 178.000866][T12908] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 178.027865][T12908] syz.2.3117: attempt to access beyond end of device [ 178.027865][T12908] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 178.041589][T12908] syz.2.3117: attempt to access beyond end of device [ 178.041589][T12908] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 178.055466][T12908] syz.2.3117: attempt to access beyond end of device [ 178.055466][T12908] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 178.072754][T12917] qrtr: Invalid version 0 [ 178.485019][T12898] syz.6.3114 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 178.499221][T12898] CPU: 1 UID: 0 PID: 12898 Comm: syz.6.3114 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 178.499352][T12898] Tainted: [W]=WARN [ 178.499361][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.499375][T12898] Call Trace: [ 178.499383][T12898] [ 178.499406][T12898] __dump_stack+0x1d/0x30 [ 178.499429][T12898] dump_stack_lvl+0x95/0xd0 [ 178.499457][T12898] dump_stack+0x15/0x1b [ 178.499481][T12898] dump_header+0x81/0x240 [ 178.499506][T12898] oom_kill_process+0x295/0x350 [ 178.499531][T12898] out_of_memory+0x97b/0xb80 [ 178.499587][T12898] try_charge_memcg+0x610/0xa10 [ 178.499623][T12898] obj_cgroup_charge_pages+0xa6/0x150 [ 178.499684][T12898] __memcg_kmem_charge_page+0x9f/0x170 [ 178.499716][T12898] __alloc_frozen_pages_noprof+0x18f/0x360 [ 178.499747][T12898] alloc_pages_mpol+0xb3/0x260 [ 178.499847][T12898] alloc_pages_noprof+0x90/0x130 [ 178.499875][T12898] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 178.499918][T12898] __kvmalloc_node_noprof+0x492/0x6b0 [ 178.500026][T12898] ? ip_set_alloc+0x24/0x30 [ 178.500064][T12898] ? ip_set_alloc+0x24/0x30 [ 178.500102][T12898] ip_set_alloc+0x24/0x30 [ 178.500213][T12898] hash_netiface_create+0x282/0x740 [ 178.500255][T12898] ? __pfx_hash_netiface_create+0x10/0x10 [ 178.500362][T12898] ip_set_create+0x3cc/0x970 [ 178.500390][T12898] ? __nla_parse+0x40/0x60 [ 178.500417][T12898] nfnetlink_rcv_msg+0x4c6/0x590 [ 178.500545][T12898] netlink_rcv_skb+0x123/0x220 [ 178.500596][T12898] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 178.500639][T12898] nfnetlink_rcv+0x167/0x16c0 [ 178.500680][T12898] ? kmem_cache_free+0xe3/0x3a0 [ 178.500706][T12898] ? __kfree_skb+0x109/0x150 [ 178.500785][T12898] ? nlmon_xmit+0x4f/0x60 [ 178.500809][T12898] ? consume_skb+0x49/0x150 [ 178.500862][T12898] ? nlmon_xmit+0x4f/0x60 [ 178.500885][T12898] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 178.500931][T12898] ? __dev_queue_xmit+0x138d/0x1ec0 [ 178.500974][T12898] ? __dev_queue_xmit+0x148/0x1ec0 [ 178.501032][T12898] ? ref_tracker_free+0x37d/0x3e0 [ 178.501120][T12898] ? __netlink_deliver_tap+0x4dc/0x500 [ 178.501169][T12898] netlink_unicast+0x5c0/0x690 [ 178.501200][T12898] netlink_sendmsg+0x58b/0x6b0 [ 178.501308][T12898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.501345][T12898] __sock_sendmsg+0x145/0x180 [ 178.501365][T12898] ____sys_sendmsg+0x31e/0x4a0 [ 178.501486][T12898] ___sys_sendmsg+0x17b/0x1d0 [ 178.501534][T12898] __x64_sys_sendmsg+0xd4/0x160 [ 178.501585][T12898] x64_sys_call+0x17ba/0x3000 [ 178.501694][T12898] do_syscall_64+0xca/0x2b0 [ 178.501786][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.501816][T12898] RIP: 0033:0x7f41e406f749 [ 178.501834][T12898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.501858][T12898] RSP: 002b:00007f41e2acf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.501903][T12898] RAX: ffffffffffffffda RBX: 00007f41e42c5fa0 RCX: 00007f41e406f749 [ 178.501917][T12898] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000010 [ 178.501929][T12898] RBP: 00007f41e40f3f91 R08: 0000000000000000 R09: 0000000000000000 [ 178.501941][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.501983][T12898] R13: 00007f41e42c6038 R14: 00007f41e42c5fa0 R15: 00007ffdf0781488 [ 178.502011][T12898] [ 178.828918][T12898] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 178.835917][T12898] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 178.843816][T12898] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 178.851185][T12898] Memory cgroup stats for /syz6: [ 178.851496][T12898] cache 0 [ 178.859422][T12898] rss 0 [ 178.862193][T12898] shmem 0 [ 178.865154][T12898] mapped_file 0 [ 178.868650][T12898] dirty 0 [ 178.871657][T12898] writeback 12288 [ 178.875367][T12898] workingset_refault_anon 3 [ 178.879866][T12898] workingset_refault_file 58 [ 178.884473][T12898] swap 188416 [ 178.887825][T12898] swapcached 24576 [ 178.891586][T12898] pgpgin 36532 [ 178.894992][T12898] pgpgout 36526 [ 178.898464][T12898] pgfault 46307 [ 178.901933][T12898] pgmajfault 5 [ 178.905419][T12898] inactive_anon 12288 [ 178.909403][T12898] active_anon 12288 [ 178.913221][T12898] inactive_file 0 [ 178.916889][T12898] active_file 0 [ 178.920375][T12898] unevictable 0 [ 178.923847][T12898] hierarchical_memory_limit 314572800 [ 178.929271][T12898] hierarchical_memsw_limit 9223372036854771712 [ 178.935470][T12898] total_cache 0 [ 178.938947][T12898] total_rss 0 [ 178.942285][T12898] total_shmem 0 [ 178.945802][T12898] total_mapped_file 0 [ 178.949784][T12898] total_dirty 0 [ 178.953240][T12898] total_writeback 12288 [ 178.957500][T12898] total_workingset_refault_anon 3 [ 178.962540][T12898] total_workingset_refault_file 58 [ 178.968223][T12898] total_swap 188416 [ 178.972221][T12898] total_swapcached 24576 [ 178.976507][T12898] total_pgpgin 36532 [ 178.980456][T12898] total_pgpgout 36526 [ 178.984487][T12898] total_pgfault 46307 [ 178.988567][T12898] total_pgmajfault 5 [ 178.992474][T12898] total_inactive_anon 12288 [ 178.997012][T12898] total_active_anon 12288 [ 179.001348][T12898] total_inactive_file 0 [ 179.005536][T12898] total_active_file 0 [ 179.009537][T12898] total_unevictable 0 [ 179.013568][T12898] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3114,pid=12896,uid=0 [ 179.028391][T12898] Memory cgroup out of memory: Killed process 12896 (syz.6.3114) total-vm:93968kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 179.061061][T12898] syz.6.3114 (12898) used greatest stack depth: 7096 bytes left [ 179.215048][T12945] qrtr: Invalid version 0 [ 179.307600][T12950] qrtr: Invalid version 0 [ 179.433733][T12979] loop2: detected capacity change from 0 to 128 [ 179.562847][T13001] netlink: 'syz.2.3146': attribute type 21 has an invalid length. [ 179.570724][T13001] __nla_validate_parse: 2 callbacks suppressed [ 179.570789][T13001] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3146'. [ 179.651343][T13004] loop2: detected capacity change from 0 to 512 [ 179.682577][T13011] loop2: detected capacity change from 0 to 128 [ 179.698782][T13013] loop5: detected capacity change from 0 to 2048 [ 179.710103][T13011] buffer_io_error: 20 callbacks suppressed [ 179.710117][T13011] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 179.724879][T13011] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 179.736092][T13013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.739821][T12998] qrtr: Invalid version 0 [ 179.749121][T13011] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 179.764392][T13011] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 179.783963][ T29] kauditd_printk_skb: 1469 callbacks suppressed [ 179.783979][ T29] audit: type=1326 audit(1766524773.904:71617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.807397][T13011] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 179.814201][ T29] audit: type=1326 audit(1766524773.914:71618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.845833][ T29] audit: type=1326 audit(1766524773.914:71619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.847904][T13011] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 179.869493][ T29] audit: type=1326 audit(1766524773.914:71620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.869544][ T29] audit: type=1326 audit(1766524773.914:71621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.923527][T13011] Buffer I/O error on dev loop2, logical block 111, lost async page write [ 179.926553][ T29] audit: type=1326 audit(1766524773.944:71622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.937426][T13011] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 179.957224][ T29] audit: type=1326 audit(1766524773.944:71623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 179.957262][ T29] audit: type=1326 audit(1766524773.944:71624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 180.013074][ T29] audit: type=1326 audit(1766524773.944:71625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 180.013129][ T29] audit: type=1326 audit(1766524773.944:71626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12997 comm="syz.0.3144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74c248f749 code=0x7ffc0000 [ 180.046479][T13011] Buffer I/O error on dev loop2, logical block 115, lost async page write [ 180.069039][T13011] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 180.087549][ T3600] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.149293][T13034] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3164'. [ 180.166276][T13036] loop5: detected capacity change from 0 to 128 [ 180.196274][T13045] loop5: detected capacity change from 0 to 128 [ 180.332277][T13065] ================================================================== [ 180.340405][T13065] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 180.348783][T13065] [ 180.351139][T13065] write to 0xffffea00057667d8 of 8 bytes by task 3600 on cpu 0: [ 180.358754][T13065] delete_from_page_cache_batch+0x2f6/0x6f0 [ 180.364649][T13065] truncate_inode_pages_range+0x1ba/0x780 [ 180.370390][T13065] truncate_inode_pages+0x24/0x30 [ 180.375409][T13065] blkdev_flush_mapping+0xa4/0x1a0 [ 180.380522][T13065] bdev_release+0x2bf/0x3d0 [ 180.385016][T13065] blkdev_release+0x15/0x20 [ 180.389523][T13065] __fput+0x29b/0x650 [ 180.393526][T13065] ____fput+0x1c/0x30 [ 180.397526][T13065] task_work_run+0x131/0x1a0 [ 180.402104][T13065] exit_to_user_mode_loop+0x1fe/0x740 [ 180.407463][T13065] do_syscall_64+0x1e1/0x2b0 [ 180.412058][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.417976][T13065] [ 180.420287][T13065] read to 0xffffea00057667d8 of 8 bytes by task 13065 on cpu 1: [ 180.427903][T13065] folio_mapping+0xa1/0xe0 [ 180.432307][T13065] lru_add+0x8d/0x480 [ 180.436281][T13065] folio_batch_move_lru+0x1c5/0x280 [ 180.441473][T13065] folio_add_lru+0x14a/0x1f0 [ 180.446055][T13065] folio_add_lru_vma+0x49/0x70 [ 180.450830][T13065] do_wp_page+0x1550/0x2510 [ 180.455330][T13065] handle_mm_fault+0x7b0/0x2c60 [ 180.460175][T13065] do_user_addr_fault+0x630/0x1080 [ 180.465277][T13065] exc_page_fault+0x62/0xa0 [ 180.469776][T13065] asm_exc_page_fault+0x26/0x30 [ 180.474628][T13065] [ 180.476945][T13065] value changed: 0xffff8881004811a0 -> 0x0000000000000000 [ 180.484040][T13065] [ 180.486405][T13065] Reported by Kernel Concurrency Sanitizer on: [ 180.492550][T13065] CPU: 1 UID: 0 PID: 13065 Comm: syz.2.3165 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.503997][T13065] Tainted: [W]=WARN [ 180.507814][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 180.517857][T13065] ================================================================== [ 180.657224][T13057] qrtr: Invalid version 0