last executing test programs: 2m6.48360282s ago: executing program 1 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340b1bf747ec7f9b12eb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcd"], 0xb98}}, 0x2400c004) 2m6.387090129s ago: executing program 1 (id=103): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@enum={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x600}, 0x28) 2m6.221388995s ago: executing program 1 (id=108): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = dup(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB="400000001000390404000000fcdbdf25000003e4", @ANYRES32=0x0, @ANYBLOB="00080000f5925aeba34ebefe69fc524db7c82c269089c310060020801280080001007369740014000280a05bfc2885129023e267f0de81623e0f0baec0a8f70bda4ff3ef70699e42d0fd3c9bd84a916227dd62b375e70a534d77a50f475280538a121f090349474ccfb693a3673676bd46ca117ad58680770c5605"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4000810) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000002740), r12) sendmsg$NFC_CMD_DISABLE_SE(r12, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r11, @ANYRESOCT=r8, @ANYRESOCT=r7, @ANYRESHEX=r9, @ANYRES16=r5], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x80) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000340)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m5.280641374s ago: executing program 1 (id=118): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/165, 0xa5, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000040), 0xfe, 0x563, &(0x7f00000007c0)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) ioctl$sock_SIOCETHTOOL(r2, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0xc, 0x8, 0x5, 0x9, 0x2, 0xca1, 0x9, 0x1, 0x6, 0xff, 0xffffffff, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) fallocate(0xffffffffffffffff, 0x3, 0xf00, 0x10000) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r3, 0x0, 0x0, 0x5412, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) ioperm(0x0, 0x7fff, 0x15f9) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000003c0)=@abs={0x1}, 0x2) r5 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r5) ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000000140)={0x0, 0xffffffffffffffef}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000380)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', r6, 0x29, 0xf3, 0x0, 0x4, 0x2b, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x80, 0x9e, 0x5}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1820c2f334f0a076b3ca1a9dbbd3309aeab2d6225550fe0534cb15a50000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 2m4.69669575s ago: executing program 1 (id=126): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000980)=""/197, 0xc5}], 0x1, 0x8002, 0x0, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffdfe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0'}, 0xb) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e27, @broadcast}}, 0x4, 0x7fe, 0x0, 0x0, 0x8a, 0x0, 0x1}, 0x9c) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") syz_emit_ethernet(0x88, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(r4, r4, 0x0) 2m3.830198412s ago: executing program 1 (id=138): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000068d3404e84ae9976315bf7f00000000000000000"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m3.795720595s ago: executing program 32 (id=138): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x4c4}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1800000068d3404e84ae9976315bf7f00000000000000000"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) setns(r8, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.771026803s ago: executing program 5 (id=591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x6, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x1}], 0x1, 0x0, 0x4000}, 0x4044043) 1m31.650296474s ago: executing program 5 (id=595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x4, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m31.197498298s ago: executing program 5 (id=606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 1m31.147557983s ago: executing program 5 (id=607): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) eventfd2(0x1, 0x80000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}]}}]}, 0x38}}, 0x4048000) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711212000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$rxrpc(0x21, 0x2, 0x2) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) r9 = creat(&(0x7f0000000240)='./file0\x00', 0x40) ioctl$TIOCMBIC(r9, 0x5417, &(0x7f0000000480)=0x5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r10 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) ptrace(0x10, r10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) wait4(r10, 0x0, 0xa0000009, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40103d0b, &(0x7f0000000180)={0x8, 0x1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='ceph\x00', &(0x7f00000002c0)=@secondary) 1m30.869090869s ago: executing program 5 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, &(0x7f0000000040)=0x1e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4000}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = openat(0xffffffffffffff9c, 0x0, 0x48042, 0x8c) fallocate(r3, 0x10, 0x6, 0x10001) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r5 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) bind$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private0, 0x40}, 0x1c) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x98, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0xfba, 0x10000000, 0x0, 0x8}, 0x3, r11}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1m30.692549406s ago: executing program 5 (id=621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4b, &(0x7f0000000880)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0059fb008556411c7f724d9c986a0b000000d100", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r6, &(0x7f00000001c0), &(0x7f0000000380)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000000001000000000000000000000000078f7a1a59e01b5d56368912829983702543bb9db30de484ddd465058dc521b715a18da5419ceb41f71532f43502aed197eff0146d698680502b2ba1e2eafd26846c19fc8ad4d551f190c0e3bfa273c3c37d926d8eb411882de6b060893b75f1aeea6ee0b4cfa8d339225455fa0de61699538ce1feacc122638986a210e0e5518bccc6d61a42528dd229a7efd217fe2746f1030b4fb43855886932995ad543be7abde1485dbe4e43408d614ae2fefcd4163e6e4a94c37a430397a9c69064eeb22f83568550b1a194bd76dbfec7298"], 0x50) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14"], 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18200000b7960bf01635ed2ac6fa00210000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x5e, 0x80, 0xd}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x100a, 0x0, 0xffffffff}, 0x1c) close(r10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$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") syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m30.651388879s ago: executing program 33 (id=621): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4b, &(0x7f0000000880)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0059fb008556411c7f724d9c986a0b000000d100", @ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockname$packet(r6, &(0x7f00000001c0), &(0x7f0000000380)=0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000000000000001000000000000000000000000078f7a1a59e01b5d56368912829983702543bb9db30de484ddd465058dc521b715a18da5419ceb41f71532f43502aed197eff0146d698680502b2ba1e2eafd26846c19fc8ad4d551f190c0e3bfa273c3c37d926d8eb411882de6b060893b75f1aeea6ee0b4cfa8d339225455fa0de61699538ce1feacc122638986a210e0e5518bccc6d61a42528dd229a7efd217fe2746f1030b4fb43855886932995ad543be7abde1485dbe4e43408d614ae2fefcd4163e6e4a94c37a430397a9c69064eeb22f83568550b1a194bd76dbfec7298"], 0x50) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) ioctl$EVIOCSREP(r7, 0x40084503, &(0x7f0000000140)=[0x2, 0x9]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="14"], 0x6c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @broadcast}], 0x10) write$char_usb(r7, &(0x7f0000000040)="e2", 0x2250) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="18200000b7960bf01635ed2ac6fa00210000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x5e, 0x80, 0xd}]}) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x100a, 0x0, 0xffffffff}, 0x1c) close(r10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x5fc, &(0x7f0000001000)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.69570077s ago: executing program 3 (id=2176): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x58, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r5 = syz_io_uring_setup(0x373d, &(0x7f0000000500)={0x0, 0x4, 0x1, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r9, 0x6, 0x15, &(0x7f0000000180)=0xfffffff7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.565938672s ago: executing program 3 (id=2177): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2018ccd, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB='?'], 0xf5, 0x30f, &(0x7f0000002380)="$eJzs3U1rE0EYwPEnaV6a1poeREQUhgqiSJcm4M2DRVoQA0rbCFYQt3arIdukZEMhIrYHwatnDz14FEEEb15EvPbiJ/Dt1ktvFiyubHazbpIlTSt90//vYMad55md2dltt9tmsnbp2XxxztJ+2jGxPeKyl7zCspz/uPLl9OSHI+7/lRofncpklYqKyO1Hr4beV/tvvj36Limrg3fW1rPfV09NifyaeiBRVbBUyWlTzZTL1YiTPFuwippSN0xDtwxVKFlGpar0er0+YxpqziwvLNSUXpod6FuoGJal9FJNFY2aqpZVtVJT+n29UFKapqmBPoGIDPqlaFtdpFNi/uWGbcu6M0HJZWf+Q6KXG4W495r8u87iIGmZ/46xbSdHz272DHthw47585/YYv7x73Gv/6/Pu7n+m9zdzV5hr0zemr42msuNTSjVKzL/dDG/mHdf3frP/VIQUwxZmbgwvSn+PaJtS8T5d/xqbmxE1Q3K2fklL39pMe9+cxid8/IzknbuUwL50sjPuPmqOT8ufcH8rKTlWHh+tpEv0UB+Qs6dCeRrkpZP96Qspsw6N7eB/McZpa5cz7XsP1WPAwAAAAAAAADgMNKU78/z+4j/q96UpiXrf/Hh16eczU6cG+A/Xx+RtGyGP58fCX2+H5OTsX0cOAAAAAAA/xGr9rCom6ZR2X5BuojpeZHqsIu4iDgFkSdDTmc6Nnjc63FLldNGSFZCRNrb6emmz14hddHd3+sJr2Oy0wO1i4WoiAS3uG/WcAZvvmnEpMKOjxXd1gkwnGg/8rpp9u7pkIMjFdu2Q4Old2cndjJ0gN0UIpuNLSdCY+zI1u3Yuhl3tzQuzK32fjn8cuiy4My+O4OtB2r4m9uu2eGLxo/mN4oBAAAAOBwCPzgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB90uWaYd6iau6aYUZj3f7mGPE+Ir59SbbWz4ln3X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB9DvAAAA//88m7Qd") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4.10441764s ago: executing program 3 (id=2191): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r1, 0x0, 0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000400000000000000000000009400000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r5 = socket(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="55a7822c74e9a4c3f0802f294f76ea42c7e7bddd24ddb7bac3b02339dcba751fa4b00e22c1386dd70ca6e636a218c4f1c69ac7cd8b2238c22e1ad4e013261c5d8dd57febc51d0d86b327d3e1f1e73ebce4aefca7f856e6269343df11b64258cc489c14f2454086a5b85c2360d8f13a6f3e57a29f13741a8e4f27952b307cea", @ANYRESHEX, @ANYRES64=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000080)={@mcast2, 0x0, 0x2, 0x0, 0x4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x0, 0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x448c1}, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r10}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40) r11 = accept$nfc_llcp(r1, &(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x2, 0x7}, {0xd, 0x7, 0x1, 0x40}, {0x28, 0x1, 0x1, 0x7f}, {0x7, 0x8, 0x2a, 0x9afe}, {0x101, 0x5, 0xfd, 0x8}, {0x3, 0x80, 0x4, 0x6}, {0x4, 0x3, 0x3, 0x83}, {0x0, 0x1, 0xf, 0x4}, {0x4, 0x8, 0x6, 0x7}]}) quotactl_fd$Q_GETNEXTQUOTA(r11, 0xffffffff80000900, 0xffffffffffffffff, &(0x7f00000000c0)) 3.781050351s ago: executing program 4 (id=2199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r5, 0x0, 0x400000}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="5400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100"], 0x54}}, 0x4040004) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="3000000000ce86f50adac99972cf141dedb67d08e14296d018f476383add752e58e48b330ea71f77c48f98e3c585731644cecc208df7d0801bb33090b84258ad08971a11814bfa540a60ff0547b68e48b182a1b3869e383db3d35401476309623121f74b4ec2ca4c95a3bf96c9619ebba99fe3", @ANYRES16=r9, @ANYRESDEC=r4], 0x53}}, 0x0) 3.658586333s ago: executing program 4 (id=2202): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/current\x00') write$cgroup_subtree(r1, 0x0, 0x4c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000400000000000000000000009400000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r5 = socket(0xa, 0x3, 0x3a) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES16=r3, @ANYRES32=r1, @ANYBLOB="55a7822c74e9a4c3f0802f294f76ea42c7e7bddd24ddb7bac3b02339dcba751fa4b00e22c1386dd70ca6e636a218c4f1c69ac7cd8b2238c22e1ad4e013261c5d8dd57febc51d0d86b327d3e1f1e73ebce4aefca7f856e6269343df11b64258cc489c14f2454086a5b85c2360d8f13a6f3e57a29f13741a8e4f27952b307cea8620241200e1a13cf9ebefaa88001216febbda89bca36884e6f8f57746969fcc3f14d8d67f4f1ffb54e564acf3d81802c945338ce99f7a163a4af6d1a09abe2e", @ANYRESHEX, @ANYRES64=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000080)={@mcast2, 0x0, 0x2, 0x0, 0x4}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0x0, 0xb}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x448c1}, 0x0) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x6, r10}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f00000005c0)={{0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, {0xa, 0x0, 0x1, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x5c) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x148}}, 0x40) r11 = accept$nfc_llcp(r1, &(0x7f0000000000), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x9, &(0x7f0000000240)=[{0x2, 0x7}, {0xd, 0x7, 0x1, 0x40}, {0x28, 0x1, 0x1, 0x7f}, {0x7, 0x8, 0x2a, 0x9afe}, {0x101, 0x5, 0xfd, 0x8}, {0x3, 0x80, 0x4, 0x6}, {0x4, 0x3, 0x3, 0x83}, {0x0, 0x1, 0xf, 0x4}, {0x4, 0x8, 0x6, 0x7}]}) quotactl_fd$Q_GETNEXTQUOTA(r11, 0xffffffff80000900, 0xffffffffffffffff, &(0x7f00000000c0)) 2.794242854s ago: executing program 2 (id=2212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x80000001, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) clock_gettime(0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x751040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) 1.194653446s ago: executing program 2 (id=2221): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r7, 0x7}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private0}}, &(0x7f0000000680)=0xe8) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, r8, &(0x7f00000006c0)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@nullb, r8, &(0x7f00000001c0)='./file2\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) 1.123441843s ago: executing program 0 (id=2222): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r2) 1.05513942s ago: executing program 0 (id=2224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 927.728731ms ago: executing program 0 (id=2226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) 927.212982ms ago: executing program 4 (id=2227): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000380)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x4000) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x10001}, 0x6007, 0x4005, 0xb, 0x2, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, r1, 0x3) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="06000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000400)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) mq_notify(r0, &(0x7f0000000540)={0x0, 0x5, 0x0, @tid=r2}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00') unshare(0x2040400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) 869.165477ms ago: executing program 0 (id=2228): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10}, 0x18) writev(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="dfdeaf9543f4b2e0247dd76c2bc6d944466fc6a67d72d5e699c0ef423c0eae5399098cb947d9615b97d619f23f9fcfdbb5d5e590c28764692c090316eb94c2d61a4b3db6f69cd19c759b6cc83fb72ff376c4c39b205f18dd73bb0e230381f68287c1e90bbecdfddddb362c2e6fe43fcb841661cf90affb5a7c45662a36e73b00be2d059e8c9583b364e435834c8b77e62c94cba656a56c2dc1735d0af678c5dbcbdeec1787bbeb6a88", 0xa9}, {&(0x7f0000000080)="f6548421d42de65242be820b273ab712e4745ed5448bab4ed6e3bad895606922d7b7c56ca195898b46a070a1e615", 0x2e}, {&(0x7f0000000500)="658ba1fc198e7d6a9303070054142911d21d6e2288141538eabf347158c64e8483a72c4a141c6852cf85cf55545623e7c08368eba0329ab1558bb1187b303b2a941f86c4b86da5c559b999ed63dddc202e27a3760f3f538d7a8d772497e8b63de51abaa39efe4b6c57d8a1a0a00d1af5692905da3534c4908a2b413fdb6afcee782ffd427e9f5f8e5544091205d2538c95b4a31dc48b5e6a8481d1eca7f08998ae973187f23f4b01961b30c2c2af3eb8035f3c455bf3c80c0bf0c7a60ab069a3f4f88b7190632e7fbb703dfac4ecbcbe9e97eb570ac635cd5b9d89c625971bed39fe3f54ce90036dfd2a3608e3788a02d1571ae135e6", 0xf6}, {&(0x7f0000000100)="6d2926bff95626412794beb4", 0xc}, {&(0x7f0000000600)="91cee78b98fb8e627da26f6e840263ae7ec1f1531ef4e03c8ce9698e554d54b31658665e3f4ecc2bc7c4e0280e98483c6ddd33eca2397e8aac0da39085d226b49e8b362409919e304550fc9670ddb53d5fd4a05623cdcd8b5b26925b48c4c76ece5a02bf998d2e6e240d445ae42c14c44f498ad54eb8e0ae5d1209e48acb78b8426b50be164896c2c7bc766c09241cd2633bddca02480f613be84dada97ed238cbe018a805993029678a4d066c8202d266ff4739c6d99bd37bd979888312ea64dea8656212d3f020d2e86e4f342c848e9899e4f809e7ef3db5201fad41158402ca3879c0f35307002c058255", 0xec}], 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x484800) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x11, 0xffffffffffffffff, 0x85494000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0xf000, 0x0, &(0x7f0000a1f000/0xf000)=nil) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x1a, {0x2, 0x4e20, @empty}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xc) 544.239078ms ago: executing program 0 (id=2230): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4577, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x58, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r5 = syz_io_uring_setup(0x373d, &(0x7f0000000500)={0x0, 0x4, 0x1, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xfd90, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_tcp_int(r9, 0x6, 0x15, &(0x7f0000000180)=0xfffffff7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 456.567486ms ago: executing program 0 (id=2233): r0 = getpid() r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7ffffffe, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x6}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x9e801eeb3dba4c33) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r7, &(0x7f0000000f80)=""/4096, 0x1000) recvmmsg(r4, &(0x7f0000003700)=[{{&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f00000048c0)=""/144, 0x90}, {&(0x7f0000000240)=""/95, 0x5f}], 0x3, &(0x7f0000000440)=""/52, 0x34}, 0xe}, {{&(0x7f0000000580)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/122, 0x7a}, {&(0x7f0000000680)=""/232, 0xe8}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f0000000780)=""/115, 0x73}, {&(0x7f0000004880)=""/21, 0x15}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/24, 0x18}], 0x7}, 0xfff}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000a40)=""/233, 0xe9}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/171, 0xab}, {&(0x7f0000004980)=""/141, 0x8d}, {&(0x7f0000004a40)=""/172, 0xac}, {&(0x7f0000004b00)=""/211, 0xd3}], 0x6, &(0x7f0000000c00)=""/192, 0xc0}, 0x4}, {{&(0x7f0000000d00)=@ieee802154, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000d80)=""/223, 0xdf}, {&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x3, &(0x7f0000003440)=""/63, 0x3f}, 0x97c}, {{&(0x7f0000003480)=@ax25={{0x3, @rose}, [@bcast, @remote, @rose, @rose, @null, @rose, @remote, @netrom]}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003500)=""/75, 0x4b}, {&(0x7f0000003580)=""/175, 0xaf}], 0x2, &(0x7f0000003680)=""/109, 0x6d}, 0xe}], 0x5, 0x100, &(0x7f0000003840)={0x0, 0x989680}) ioctl$FS_IOC_READ_VERITY_METADATA(r7, 0xc0286687, &(0x7f0000000800)={0x1, 0x2, 0x1000, &(0x7f0000003880)=""/4096}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x804710, &(0x7f0000000040)={[], [{@seclabel}]}, 0xf9, 0x496, &(0x7f0000000f80)="$eJzs3M1PHOUfAPDvLNDSV/j1V6utraLV2PgChVbtwYMaTTxo4sFDPSLQWrstBjCxDVE0ph5NE+/Go4l/gTcvRj0YE6+aGE+mSZMSk1JPmHmDBRYKdGFb9vNJlnmenZl9nu/MPLPPzMNsAC2rJ/2TROyOiN8joivPLlygJ5/MTE8O3ZqeHEqiMjf75vTkUJku19tVZI5VIiqfJfFisrTc8UuXzw9WqyNjRb5v4sL7feOXLj9z7sLg2ZGzIxcHTp06eaL/+ecGnm1InGlcNw99NHr44GtvX31j6PTVd376Nq3WgSNL47itW3UCqqMn3Wo3ZjOL5z2+hrrfC/bUpJP2JlaENWmLiHR3dWTtvyvaYn7ndcWrnza1csCGSr+bti8/e2oW2MKSaHYNgOYov+jT69/ytUldj7vC9ZcithXpmenJoZm5+Nvn7nJ0bGD5PRFxeurfr9JXrPU+BADAOmR9m6fr9f8qcSCb5mMde4sxlO6I+F9E7IuI/0fE/oi4LyJb9v6IeCBfebZrleX3LMov7f9UrtWtc4Ok/b8Xavp+MzXxF5PutiK3J4u/IzlzrjpyvNgmx6Jje5rvX6GM71/57Yvl5tX2/9JXWn7ZFywqcK19e0RnzTrDgxODjdoI1z+JONReL/5kbiQgPQIORsShtX303jJx7slvDi+30O3jX0EDxplmv454It//U7Eo/lKy8vhkX2dUR473lUfFUj//euXN5cq/o/gbIN3/Oxce/4uW6PonycdrO6JaHRkbX3sZV/74fNlrmtUe/7XS439b8lY2Zv3Lu/l7Hw5OTIx1RmxLXs/y5TVd9v7A/LplPpv25/EfO1q//e8r1knjfzAi0oP4SEQ8FBEPF3V/JCIejYijK8T/48uPvbdC/Ekk0dT9P1z3/Dd3/HcnteP160i0nf/hu+VGzFe3/0/GVHauzWXnv/jrxkpxrbaCDdiEAAAAcNerRMTuSCq9ebpnd1Qqvb35//Dvj52V6uj4xFNnRj+4OJw/I9AdHZXyTldXzf3Q/mSq+MQ8P1DcKy7nnyjuG3/ZtiPL9w6NVoebHDu0ul0L23+U7T/1d1uzawdsOM9rQeta3P4rTaoHsPlW8/3vWgC2pjrtf0cz6gFsPtf/0Lrqtf+PF+X1/2FrWtr+/6z5aYAFdwOdBmCL0f+H1qX9Q+tad/vvbGw9gE11J8/1rz9RPiyw/s/pXPUT/q2SKH/xYiPL2hHz70Sl6SG3UCJtMZtb6PxvqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANzL/gsAAP//ZODlWQ==") r9 = syz_io_uring_setup(0x3f81, &(0x7f0000004c00)={0x0, 0x2b5c, 0x2, 0xfffffffe, 0x2d0, 0x0, r6}, &(0x7f00000004c0), &(0x7f0000000500)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, 0x0, 0x2) close(r1) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$userns(r0, &(0x7f00000000c0)) 377.266784ms ago: executing program 6 (id=2234): socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {0x0, 0x410c}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex(0x0, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 361.171045ms ago: executing program 4 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2400c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x378) 330.551488ms ago: executing program 6 (id=2236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000040)=""/222, &(0x7f0000000140)=0xde) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 258.133205ms ago: executing program 6 (id=2237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 188.176452ms ago: executing program 6 (id=2238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='system_u:object_r::ing_exec_t:s0 unconfined 0'], 0x41) 187.291712ms ago: executing program 3 (id=2239): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0x85, 0x518f5453, 0x1, 0xf9}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x79) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x200400, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001480)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x1a, 0xc, &(0x7f0000001780)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r0, @ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', r3, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f0000002000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x58, &(0x7f0000000000)={[{@abort}, {@acl}, {@nomblk_io_submit}, {@barrier}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@usrquota}, {@nobarrier}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") 181.062792ms ago: executing program 4 (id=2240): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000800)='0', 0x1, 0xffffffffffffffff) 169.474684ms ago: executing program 2 (id=2241): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x10}, 0x18) writev(r1, &(0x7f0000000380)=[{&(0x7f00000002c0)="dfdeaf9543f4b2e0247dd76c2bc6d944466fc6a67d72d5e699c0ef423c0eae5399098cb947d9615b97d619f23f9fcfdbb5d5e590c28764692c090316eb94c2d61a4b3db6f69cd19c759b6cc83fb72ff376c4c39b205f18dd73bb0e230381f68287c1e90bbecdfddddb362c2e6fe43fcb841661cf90affb5a7c45662a36e73b00be2d059e8c9583b364e435834c8b77e62c94cba656a56c2dc1735d0af678c5dbcbdeec1787bbeb6a88", 0xa9}, {&(0x7f0000000080)="f6548421d42de65242be820b273ab712e4745ed5448bab4ed6e3bad895606922d7b7c56ca195898b46a070a1e615", 0x2e}, {&(0x7f0000000500)="658ba1fc198e7d6a9303070054142911d21d6e2288141538eabf347158c64e8483a72c4a141c6852cf85cf55545623e7c08368eba0329ab1558bb1187b303b2a941f86c4b86da5c559b999ed63dddc202e27a3760f3f538d7a8d772497e8b63de51abaa39efe4b6c57d8a1a0a00d1af5692905da3534c4908a2b413fdb6afcee782ffd427e9f5f8e5544091205d2538c95b4a31dc48b5e6a8481d1eca7f08998ae973187f23f4b01961b30c2c2af3eb8035f3c455bf3c80c0bf0c7a60ab069a3f4f88b7190632e7fbb703dfac4ecbcbe9e97eb570ac635cd5b9d89c625971bed39fe3f54ce90036dfd2a3608e3788a02d1571ae135e6", 0xf6}, {&(0x7f0000000100)="6d2926bff95626412794beb4", 0xc}, {&(0x7f0000000600)="91cee78b98fb8e627da26f6e840263ae7ec1f1531ef4e03c8ce9698e554d54b31658665e3f4ecc2bc7c4e0280e98483c6ddd33eca2397e8aac0da39085d226b49e8b362409919e304550fc9670ddb53d5fd4a05623cdcd8b5b26925b48c4c76ece5a02bf998d2e6e240d445ae42c14c44f498ad54eb8e0ae5d1209e48acb78b8426b50be164896c2c7bc766c09241cd2633bddca02480f613be84dada97ed238cbe018a805993029678a4d066c8202d266ff4739c6d99bd37bd979888312ea64dea8656212d3f020d2e86e4f342c848e9899e4f809e7ef3db5201fad41158402ca3879c0f35307002c058255", 0xec}], 0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statfs(&(0x7f0000000200)='.\x00', &(0x7f0000000440)=""/137) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x484800) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x11, 0xffffffffffffffff, 0x85494000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0xf000, 0x0, &(0x7f0000a1f000/0xf000)=nil) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e20, @loopback}, {0x304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x1a, {0x2, 0x4e20, @empty}}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000200)=0xc) 157.897315ms ago: executing program 6 (id=2242): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='smaps_rollup\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, &(0x7f0000000040)=""/222, &(0x7f0000000140)=0xde) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 129.997317ms ago: executing program 4 (id=2243): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3fb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB], 0x20) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, 0x0, 0x0) r3 = epoll_create(0x5) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(0xffffffffffffffff, 0x12, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c250000000000202020c31af8ffa10000005e000000000000000701000000feffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r6) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x10}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) 105.37261ms ago: executing program 3 (id=2244): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x1000, 0x1000}], 0x1, 0x0) unshare(0x2c040000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000014c0)={0x0, 0x7f}, &(0x7f0000001540)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000015c0)=r0, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) unshare(0x2a020400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={0xffffffffffffffff, 0x0, 0xfc0, 0x11, &(0x7f0000000500)="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", &(0x7f0000000340)=""/17, 0x38c, 0x0, 0x7c, 0x79, &(0x7f0000000380)="80b3cc8f58da9a1efacf9d216d7ddd7f96ecebcffa0f2255ea6468e2692f8d4421271ecb28a674921a89c5f0aa11da49725a57ec1cdb27937218ff5e9136700a6689d0a5e05db56d346d23edb2eca12700497440d4a5bc3b0b804719f290d0578b792cfc7dcce9e99cbb71ed8c0744064327d5c257b6f89d39a66720", &(0x7f0000001500)="012abae8f61637f94d95c778e45e44ecb33037dafdbb7336b587af71456278fde993b7e71728c0d9d6e3104bd1fa40106515b30e6ffd20a39026278009ef2cac935330f4a472c9fdf194dafca6dbd4b4d3be0c9d32f4864e8c6ecabcb9714951800eb6b12a95b87af4dbf28757186a3a56868171174e647b85", 0x2, 0x0, 0x9}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x5, 0x4, 0x6104}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x61, 0x2}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 69.552503ms ago: executing program 6 (id=2245): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r4, &(0x7f00000015c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xd08, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000008c0)='p$', 0x2}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x3, 0x0}}, 0x30}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000001c0)="ab", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x1, @private0, 0x3}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000001740)=' ', 0x1}], 0x1}}], 0x3, 0x20044040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r6}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r2, 0x0, r3, 0x0, 0xfffd, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1075}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r8}, 0x18) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = pidfd_getfd(r1, r1, 0x0) setns(r9, 0x66020000) syz_init_net_socket$llc(0x1a, 0x801, 0x0) fcntl$setstatus(r2, 0x4, 0x46000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x108a) syz_clone(0x498144ee5f60e149, 0x0, 0x0, 0x0, 0x0, 0x0) 63.083534ms ago: executing program 2 (id=2246): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 31.734507ms ago: executing program 3 (id=2247): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 618.85µs ago: executing program 2 (id=2248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001f500000000000000000100000a14000000020a497f75241d4e1deb000005000006140000001100", @ANYRES64], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) 0s ago: executing program 2 (id=2249): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x114, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) kernel console output (not intermixed with test programs): T6808] __sock_sendmsg+0x145/0x180 [ 108.466730][ T6808] ____sys_sendmsg+0x31e/0x4a0 [ 108.466771][ T6808] ___sys_sendmsg+0x17b/0x1d0 [ 108.466817][ T6808] __x64_sys_sendmsg+0xd4/0x160 [ 108.466913][ T6808] x64_sys_call+0x17ba/0x3000 [ 108.466939][ T6808] do_syscall_64+0xca/0x2b0 [ 108.466983][ T6808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.467073][ T6808] RIP: 0033:0x7f214b15f749 [ 108.467091][ T6808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.467109][ T6808] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.467186][ T6808] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 108.467199][ T6808] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 108.467212][ T6808] RBP: 00007f214b1e3f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.467224][ T6808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.467236][ T6808] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 108.467257][ T6808] [ 108.803836][ T6808] memory: usage 307200kB, limit 307200kB, failcnt 989 [ 108.810759][ T6808] memory+swap: usage 307700kB, limit 9007199254740988kB, failcnt 0 [ 108.818713][ T6808] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 108.826204][ T6808] Memory cgroup stats for /syz3: [ 108.948571][ T6808] cache 1048576 [ 108.957219][ T6808] rss 94208 [ 108.960379][ T6808] shmem 0 [ 108.963336][ T6808] mapped_file 65536 [ 108.967260][ T6808] dirty 0 [ 108.970214][ T6808] writeback 0 [ 108.973521][ T6808] workingset_refault_anon 305 [ 108.978419][ T6808] workingset_refault_file 3132 [ 108.983293][ T6808] swap 393216 [ 108.986676][ T6808] swapcached 131072 [ 108.990570][ T6808] pgpgin 115924 [ 108.994164][ T6808] pgpgout 115636 [ 108.997877][ T6808] pgfault 107792 [ 109.001536][ T6808] pgmajfault 197 [ 109.005107][ T6808] inactive_anon 28672 [ 109.009189][ T6808] active_anon 102400 [ 109.012212][ T6817] loop0: detected capacity change from 0 to 128 [ 109.013300][ T6808] inactive_file 0 [ 109.013312][ T6808] active_file 1048576 [ 109.027259][ T6808] unevictable 0 [ 109.030815][ T6808] hierarchical_memory_limit 314572800 [ 109.036329][ T6808] hierarchical_memsw_limit 9223372036854771712 [ 109.042517][ T6808] total_cache 1048576 [ 109.046561][ T6808] total_rss 94208 [ 109.050226][ T6808] total_shmem 0 [ 109.053707][ T6808] total_mapped_file 65536 [ 109.058115][ T6808] total_dirty 0 [ 109.061599][ T6808] total_writeback 0 [ 109.065428][ T6808] total_workingset_refault_anon 305 [ 109.070753][ T6808] total_workingset_refault_file 3132 [ 109.076093][ T6808] total_swap 393216 [ 109.079926][ T6808] total_swapcached 131072 [ 109.084358][ T6808] total_pgpgin 134657 [ 109.088440][ T6808] total_pgpgout 134369 [ 109.092545][ T6808] total_pgfault 108774 [ 109.096698][ T6808] total_pgmajfault 197 [ 109.100837][ T6808] total_inactive_anon 28672 [ 109.105523][ T6808] total_active_anon 102400 [ 109.109979][ T6808] total_inactive_file 0 [ 109.114171][ T6808] total_active_file 1048576 [ 109.118776][ T6808] total_unevictable 0 [ 109.122826][ T6808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1045,pid=6807,uid=0 [ 109.137535][ T6808] Memory cgroup out of memory: Killed process 6807 (syz.3.1045) total-vm:96016kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 109.406360][ T29] kauditd_printk_skb: 962 callbacks suppressed [ 109.406374][ T29] audit: type=1326 audit(1767080310.946:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbd95dff34b code=0x7ffc0000 [ 109.482699][ T29] audit: type=1326 audit(1767080310.976:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 109.506206][ T29] audit: type=1326 audit(1767080310.986:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 109.529667][ T29] audit: type=1326 audit(1767080310.986:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 109.553123][ T29] audit: type=1326 audit(1767080310.946:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6816 comm="syz.0.1049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 109.667530][ T29] audit: type=1326 audit(1767080311.186:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 109.691113][ T29] audit: type=1326 audit(1767080311.186:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 109.714603][ T29] audit: type=1326 audit(1767080311.186:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 109.738106][ T29] audit: type=1326 audit(1767080311.186:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 109.761707][ T29] audit: type=1326 audit(1767080311.186:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz.3.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 109.854751][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1058'. [ 109.972465][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1058'. [ 110.261214][ T6866] FAULT_INJECTION: forcing a failure. [ 110.261214][ T6866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.274897][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.3.1067 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.274963][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.274979][ T6866] Call Trace: [ 110.274987][ T6866] [ 110.274998][ T6866] __dump_stack+0x1d/0x30 [ 110.275029][ T6866] dump_stack_lvl+0x95/0xd0 [ 110.275132][ T6866] dump_stack+0x15/0x1b [ 110.275155][ T6866] should_fail_ex+0x265/0x280 [ 110.275183][ T6866] should_fail+0xb/0x20 [ 110.275281][ T6866] should_fail_usercopy+0x1a/0x20 [ 110.275309][ T6866] _copy_from_iter+0xcf/0xe70 [ 110.275339][ T6866] ? __alloc_skb+0x396/0x4b0 [ 110.275366][ T6866] ? __alloc_skb+0x228/0x4b0 [ 110.275437][ T6866] netlink_sendmsg+0x471/0x6b0 [ 110.275477][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.275515][ T6866] __sock_sendmsg+0x145/0x180 [ 110.275545][ T6866] ____sys_sendmsg+0x31e/0x4a0 [ 110.275584][ T6866] ___sys_sendmsg+0x17b/0x1d0 [ 110.275640][ T6866] __x64_sys_sendmsg+0xd4/0x160 [ 110.275718][ T6866] x64_sys_call+0x17ba/0x3000 [ 110.275755][ T6866] do_syscall_64+0xca/0x2b0 [ 110.275800][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.275837][ T6866] RIP: 0033:0x7f214b15f749 [ 110.275857][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.275881][ T6866] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.275906][ T6866] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 110.275922][ T6866] RDX: 0000000004008840 RSI: 00002000000014c0 RDI: 0000000000000009 [ 110.275938][ T6866] RBP: 00007f2149bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 110.275953][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.276034][ T6866] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 110.276089][ T6866] [ 110.747553][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1079'. [ 110.822355][ T6898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 110.861678][ T6903] SELinux: security_context_str_to_sid (/) failed with errno=-22 [ 110.922362][ T6907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5137 sclass=netlink_route_socket pid=6907 comm=syz.2.1081 [ 110.945523][ T6909] loop0: detected capacity change from 0 to 512 [ 110.997854][ T6912] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 111.024894][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1081'. [ 111.198648][ T6924] netlink: 'syz.3.1090': attribute type 4 has an invalid length. [ 111.227603][ T6928] FAULT_INJECTION: forcing a failure. [ 111.227603][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 111.240412][ T6928] CPU: 0 UID: 0 PID: 6928 Comm: syz.0.1092 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.240442][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.240455][ T6928] Call Trace: [ 111.240462][ T6928] [ 111.240470][ T6928] __dump_stack+0x1d/0x30 [ 111.240499][ T6928] dump_stack_lvl+0x95/0xd0 [ 111.240560][ T6928] dump_stack+0x15/0x1b [ 111.240586][ T6928] should_fail_ex+0x265/0x280 [ 111.240672][ T6928] should_failslab+0x8c/0xb0 [ 111.240696][ T6928] kmem_cache_alloc_noprof+0x69/0x4b0 [ 111.240718][ T6928] ? audit_log_start+0x342/0x720 [ 111.240748][ T6928] audit_log_start+0x342/0x720 [ 111.240823][ T6928] ? kstrtouint+0x76/0xc0 [ 111.240850][ T6928] audit_seccomp+0x48/0x100 [ 111.240891][ T6928] ? __seccomp_filter+0x832/0x1260 [ 111.240956][ T6928] __seccomp_filter+0x843/0x1260 [ 111.240993][ T6928] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.241089][ T6928] ? vfs_write+0x7e8/0x960 [ 111.241112][ T6928] ? __rcu_read_unlock+0x4f/0x70 [ 111.241136][ T6928] ? __fget_files+0x184/0x1c0 [ 111.241163][ T6928] __secure_computing+0x82/0x150 [ 111.241203][ T6928] syscall_trace_enter+0xcf/0x1e0 [ 111.241281][ T6928] do_syscall_64+0xa4/0x2b0 [ 111.241319][ T6928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.241342][ T6928] RIP: 0033:0x7fbd95dff749 [ 111.241435][ T6928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.241457][ T6928] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 111.241481][ T6928] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 111.241530][ T6928] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 000000000000000d [ 111.241554][ T6928] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 111.241569][ T6928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.241585][ T6928] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 111.241611][ T6928] [ 111.250830][ T6928] netlink: 'syz.0.1092': attribute type 4 has an invalid length. [ 111.457701][ T1039] lo speed is unknown, defaulting to 1000 [ 111.463545][ T1039] syz1: Port: 1 Link DOWN [ 111.467996][ T3430] lo speed is unknown, defaulting to 1000 [ 111.547906][ T6935] netlink: 'syz.0.1095': attribute type 4 has an invalid length. [ 111.665846][ T6942] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.694818][ T6939] usb usb8: usbfs: process 6939 (syz.4.1097) did not claim interface 0 before use [ 111.745987][ T6952] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 111.754246][ T6952] netlink: 'syz.2.1100': attribute type 3 has an invalid length. [ 111.785279][ T6942] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.830272][ T6942] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.843762][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1104'. [ 111.867874][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.887978][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.900472][ T6942] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.936897][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 111.945191][ T6965] loop0: detected capacity change from 0 to 256 [ 111.964431][ T6965] vfat: Unknown parameter '18446744073709551615' [ 112.001285][ T4132] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.080777][ T6960] infiniband syz2: set down [ 112.085431][ T6960] infiniband syz2: added ip6_vti0 [ 112.090716][ T3430] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.097033][ T4132] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.097121][ T4132] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.097196][ T4132] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.197646][ T6960] RDS/IB: syz2: added [ 112.197668][ T6960] smc: adding ib device syz2 with port count 1 [ 112.310975][ T6960] smc: ib device syz2 port 1 has no pnetid [ 112.322464][ T3430] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.346658][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.474411][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.545432][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.588922][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.626480][ T6960] ip6_vti0 speed is unknown, defaulting to 1000 [ 112.738642][ T7008] loop6: detected capacity change from 0 to 128 [ 112.776748][ T7008] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.806559][ T7008] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.870748][ T5526] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.078674][ T7024] FAULT_INJECTION: forcing a failure. [ 113.078674][ T7024] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 113.092003][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.0.1128 Not tainted syzkaller #0 PREEMPT(voluntary) [ 113.092033][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.092047][ T7024] Call Trace: [ 113.092055][ T7024] [ 113.092064][ T7024] __dump_stack+0x1d/0x30 [ 113.092093][ T7024] dump_stack_lvl+0x95/0xd0 [ 113.092176][ T7024] dump_stack+0x15/0x1b [ 113.092212][ T7024] should_fail_ex+0x265/0x280 [ 113.092238][ T7024] should_fail_alloc_page+0xf2/0x100 [ 113.092301][ T7024] __alloc_frozen_pages_noprof+0x109/0x360 [ 113.092338][ T7024] alloc_pages_mpol+0xb3/0x260 [ 113.092413][ T7024] folio_alloc_mpol_noprof+0x39/0x80 [ 113.092446][ T7024] shmem_get_folio_gfp+0x3cf/0xd50 [ 113.092515][ T7024] shmem_write_begin+0xfc/0x1f0 [ 113.092551][ T7024] generic_perform_write+0x184/0x490 [ 113.092598][ T7024] shmem_file_write_iter+0xc5/0xf0 [ 113.092632][ T7024] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 113.092708][ T7024] vfs_write+0x52a/0x960 [ 113.092736][ T7024] ksys_write+0xda/0x1a0 [ 113.092759][ T7024] __x64_sys_write+0x40/0x50 [ 113.092781][ T7024] x64_sys_call+0x2847/0x3000 [ 113.092806][ T7024] do_syscall_64+0xca/0x2b0 [ 113.092901][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.092924][ T7024] RIP: 0033:0x7fbd95dff749 [ 113.092942][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.092961][ T7024] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.093060][ T7024] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 113.093140][ T7024] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000009 [ 113.093153][ T7024] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 113.093166][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.093178][ T7024] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 113.093200][ T7024] [ 113.363493][ T7030] netlink: 340 bytes leftover after parsing attributes in process `syz.0.1131'. [ 113.402182][ T7026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1130'. [ 113.414025][ T7032] loop6: detected capacity change from 0 to 512 [ 113.446343][ T7032] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.499087][ T7032] EXT4-fs (loop6): orphan cleanup on readonly fs [ 113.510045][ T7032] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1133: Allocating blocks 41-42 which overlap fs metadata [ 113.510370][ T7032] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1133: Allocating blocks 41-42 which overlap fs metadata [ 113.510891][ T7032] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1133: Failed to acquire dquot type 1 [ 113.511175][ T7032] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 113.511358][ T7032] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1133: corrupted inode contents [ 113.511616][ T7032] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.1133: mark_inode_dirty error [ 113.511807][ T7032] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1133: corrupted inode contents [ 113.512053][ T7032] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.1133: mark_inode_dirty error [ 113.512324][ T7032] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1133: corrupted inode contents [ 113.512454][ T7032] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 113.512700][ T7032] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.1133: corrupted inode contents [ 113.512898][ T7032] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.1133: mark_inode_dirty error [ 113.513110][ T7032] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 113.513353][ T7032] EXT4-fs (loop6): 1 truncate cleaned up [ 113.513958][ T7032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.527021][ T5526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.547848][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1134'. [ 113.729908][ T7045] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1136'. [ 114.378009][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1143'. [ 114.394868][ T7054] wireguard0: entered promiscuous mode [ 114.400456][ T7054] wireguard0: entered allmulticast mode [ 114.463463][ T7062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1144'. [ 114.516409][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 114.516426][ T29] audit: type=1326 audit(1767080316.056:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.576770][ T7066] lo speed is unknown, defaulting to 1000 [ 114.614795][ T7066] lo speed is unknown, defaulting to 1000 [ 114.625845][ T29] audit: type=1326 audit(1767080316.086:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.649610][ T29] audit: type=1326 audit(1767080316.086:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.673212][ T29] audit: type=1326 audit(1767080316.086:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.696684][ T29] audit: type=1326 audit(1767080316.086:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.720132][ T29] audit: type=1326 audit(1767080316.086:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.743831][ T29] audit: type=1326 audit(1767080316.086:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.756249][ T7066] ip6_vti0 speed is unknown, defaulting to 1000 [ 114.767288][ T29] audit: type=1326 audit(1767080316.086:7624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.797158][ T29] audit: type=1326 audit(1767080316.086:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.820687][ T29] audit: type=1326 audit(1767080316.086:7626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7063 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 114.870848][ T7071] loop4: detected capacity change from 0 to 512 [ 114.897566][ T7071] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1148: EA inode hash validation failed [ 114.920876][ T7071] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1148: corrupted inode contents [ 114.949306][ T7071] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #15: comm syz.4.1148: mark_inode_dirty error [ 114.990929][ T7071] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #15: comm syz.4.1148: corrupted inode contents [ 115.024997][ T7071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #15: comm syz.4.1148: mark_inode_dirty error [ 115.064233][ T7071] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #15: comm syz.4.1148: mark inode dirty (error -117) [ 115.105252][ T7071] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 115.135479][ T7071] EXT4-fs (loop4): 1 orphan inode deleted [ 115.152052][ T7071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.201986][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.213794][ T7076] veth0_vlan: left promiscuous mode [ 115.219215][ T7076] veth0_vlan: entered allmulticast mode [ 115.255828][ T7076] veth0_vlan: entered promiscuous mode [ 115.398558][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 115.696977][ T7113] FAULT_INJECTION: forcing a failure. [ 115.696977][ T7113] name failslab, interval 1, probability 0, space 0, times 0 [ 115.709762][ T7113] CPU: 1 UID: 0 PID: 7113 Comm: syz.3.1165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.709818][ T7113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.709835][ T7113] Call Trace: [ 115.709845][ T7113] [ 115.709856][ T7113] __dump_stack+0x1d/0x30 [ 115.709888][ T7113] dump_stack_lvl+0x95/0xd0 [ 115.709913][ T7113] dump_stack+0x15/0x1b [ 115.710005][ T7113] should_fail_ex+0x265/0x280 [ 115.710032][ T7113] should_failslab+0x8c/0xb0 [ 115.710056][ T7113] kmem_cache_alloc_noprof+0x69/0x4b0 [ 115.710080][ T7113] ? mempool_alloc_slab+0x1a/0x30 [ 115.710118][ T7113] mempool_alloc_slab+0x1a/0x30 [ 115.710236][ T7113] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 115.710272][ T7113] mempool_init_node+0x147/0x250 [ 115.710304][ T7113] ? __pfx_mempool_free_slab+0x10/0x10 [ 115.710403][ T7113] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 115.710438][ T7113] mempool_init_noprof+0x3a/0x50 [ 115.710484][ T7113] bioset_init+0x37b/0x480 [ 115.710507][ T7113] ? __pfx_no_op+0x10/0x10 [ 115.710625][ T7113] ? percpu_ref_init+0x1dd/0x250 [ 115.710720][ T7113] mddev_init+0xc6/0x420 [ 115.710763][ T7113] md_alloc+0x97/0x930 [ 115.710800][ T7113] ? __rcu_read_unlock+0x4f/0x70 [ 115.710857][ T7113] ? __pfx_md_probe+0x10/0x10 [ 115.710881][ T7113] md_alloc_and_put+0x18/0x170 [ 115.710914][ T7113] md_probe+0x68/0x80 [ 115.711021][ T7113] blk_request_module+0x1bd/0x1e0 [ 115.711052][ T7113] blkdev_get_no_open+0x4b/0x100 [ 115.711077][ T7113] bdev_file_open_by_dev+0xa5/0x250 [ 115.711103][ T7113] swsusp_check+0x3f/0x290 [ 115.711197][ T7113] software_resume+0x41/0x2f0 [ 115.711220][ T7113] resume_store+0x2d9/0x3d0 [ 115.711246][ T7113] ? __pfx_resume_store+0x10/0x10 [ 115.711272][ T7113] kobj_attr_store+0x4a/0x70 [ 115.711300][ T7113] ? __pfx_kobj_attr_store+0x10/0x10 [ 115.711393][ T7113] sysfs_kf_write+0xfe/0x120 [ 115.711446][ T7113] ? __pfx_sysfs_kf_write+0x10/0x10 [ 115.711527][ T7113] kernfs_fop_write_iter+0x1eb/0x300 [ 115.711562][ T7113] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 115.711656][ T7113] vfs_write+0x52a/0x960 [ 115.711681][ T7113] ksys_write+0xda/0x1a0 [ 115.711701][ T7113] __x64_sys_write+0x40/0x50 [ 115.711726][ T7113] x64_sys_call+0x2847/0x3000 [ 115.711826][ T7113] do_syscall_64+0xca/0x2b0 [ 115.711861][ T7113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.711888][ T7113] RIP: 0033:0x7f214b15f749 [ 115.711905][ T7113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.711944][ T7113] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 115.711971][ T7113] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 115.711986][ T7113] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000003 [ 115.712001][ T7113] RBP: 00007f2149bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.712016][ T7113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 115.712031][ T7113] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 115.712101][ T7113] [ 115.766821][ T7113] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 116.091558][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 116.113974][ T7123] syzkaller1: entered promiscuous mode [ 116.119595][ T7123] syzkaller1: entered allmulticast mode [ 116.215375][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 116.411144][ T7160] loop4: detected capacity change from 0 to 4096 [ 116.441363][ T7160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.534731][ T7175] loop6: detected capacity change from 0 to 512 [ 116.542003][ T7175] EXT4-fs: dax option not supported [ 116.845779][ T7191] lo speed is unknown, defaulting to 1000 [ 116.931076][ T7191] lo speed is unknown, defaulting to 1000 [ 116.996675][ T7191] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.078816][ T7202] __nla_validate_parse: 4 callbacks suppressed [ 117.078835][ T7202] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1198'. [ 117.126169][ T7205] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 117.194991][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.312403][ T7226] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 117.333802][ T7226] bond2 (unregistering): Released all slaves [ 117.585498][ T7243] loop0: detected capacity change from 0 to 512 [ 117.621413][ T7243] EXT4-fs: Ignoring removed i_version option [ 117.627703][ T7243] EXT4-fs: Ignoring removed bh option [ 117.651165][ T7247] syzkaller0: entered promiscuous mode [ 117.656746][ T7247] syzkaller0: entered allmulticast mode [ 117.662480][ T7243] EXT4-fs: dax option not supported [ 117.722875][ T7243] loop0: detected capacity change from 0 to 2048 [ 117.768550][ T7243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.817401][ T7243] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.031652][ T7268] FAULT_INJECTION: forcing a failure. [ 118.031652][ T7268] name failslab, interval 1, probability 0, space 0, times 0 [ 118.044432][ T7268] CPU: 1 UID: 0 PID: 7268 Comm: syz.3.1218 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.044466][ T7268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.044483][ T7268] Call Trace: [ 118.044491][ T7268] [ 118.044502][ T7268] __dump_stack+0x1d/0x30 [ 118.044611][ T7268] dump_stack_lvl+0x95/0xd0 [ 118.044640][ T7268] dump_stack+0x15/0x1b [ 118.044662][ T7268] should_fail_ex+0x265/0x280 [ 118.044801][ T7268] should_failslab+0x8c/0xb0 [ 118.044832][ T7268] kmem_cache_alloc_noprof+0x69/0x4b0 [ 118.044919][ T7268] ? getname_flags+0x80/0x3b0 [ 118.044987][ T7268] getname_flags+0x80/0x3b0 [ 118.045016][ T7268] user_path_at+0x28/0x130 [ 118.045160][ T7268] __se_sys_name_to_handle_at+0xfd/0x640 [ 118.045207][ T7268] ? ksys_write+0x192/0x1a0 [ 118.045234][ T7268] __x64_sys_name_to_handle_at+0x67/0x80 [ 118.045268][ T7268] x64_sys_call+0x164a/0x3000 [ 118.045358][ T7268] do_syscall_64+0xca/0x2b0 [ 118.045400][ T7268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.045421][ T7268] RIP: 0033:0x7f214b15f749 [ 118.045441][ T7268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.045472][ T7268] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 118.045494][ T7268] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 118.045506][ T7268] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 118.045522][ T7268] RBP: 00007f2149bbf090 R08: 0000000000000600 R09: 0000000000000000 [ 118.045596][ T7268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.045609][ T7268] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 118.045629][ T7268] [ 118.434780][ T7275] loop0: detected capacity change from 0 to 4096 [ 118.512282][ T7275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.635428][ T7285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 118.700081][ T7286] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1221'. [ 118.728817][ T7286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.752074][ T7286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.794088][ T7286] bond0 (unregistering): Released all slaves [ 119.087606][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.174366][ T7311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1231'. [ 119.183859][ T7310] loop6: detected capacity change from 0 to 1024 [ 119.191370][ T7290] Cannot find add_set index 1 as target [ 119.197651][ T7310] EXT4-fs: Ignoring removed bh option [ 119.260568][ T7310] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.298448][ T7310] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 273:freeing already freed block (bit 17); block bitmap corrupt. [ 119.314121][ T7310] EXT4-fs (loop6): Remounting filesystem read-only [ 119.331255][ T7310] EXT4-fs warning (device loop6): ext4_convert_unwritten_extents:4984: inode #15: block 64: len 64: ext4_ext_map_blocks returned -30 [ 119.380782][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1239'. [ 119.400652][ T7330] team0: entered promiscuous mode [ 119.405839][ T7330] team0: entered allmulticast mode [ 119.441765][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.450091][ T5526] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.463357][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1242'. [ 119.491436][ T7341] loop0: detected capacity change from 0 to 512 [ 119.541022][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 119.541095][ T29] audit: type=1326 audit(1767080321.076:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.616895][ T29] audit: type=1326 audit(1767080321.076:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.640623][ T29] audit: type=1326 audit(1767080321.076:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.664146][ T29] audit: type=1326 audit(1767080321.076:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.687674][ T29] audit: type=1326 audit(1767080321.076:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.711182][ T29] audit: type=1326 audit(1767080321.076:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.735171][ T29] audit: type=1326 audit(1767080321.076:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.758698][ T29] audit: type=1326 audit(1767080321.076:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.782325][ T29] audit: type=1326 audit(1767080321.076:8043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.805804][ T29] audit: type=1326 audit(1767080321.076:8044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7346 comm="syz.6.1243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 119.904076][ T7369] netlink: 'syz.0.1253': attribute type 1 has an invalid length. [ 119.915681][ T7373] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1255'. [ 120.050074][ T7383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7383 comm=syz.0.1253 [ 120.126238][ T7400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'. [ 120.202213][ T7412] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 120.279886][ T7423] delete_channel: no stack [ 120.394661][ T7439] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1280'. [ 120.454194][ T7448] loop6: detected capacity change from 0 to 512 [ 120.476386][ T7449] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 120.501578][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1285'. [ 120.579020][ T7465] FAULT_INJECTION: forcing a failure. [ 120.579020][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 120.591918][ T7465] CPU: 0 UID: 0 PID: 7465 Comm: syz.4.1291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.591953][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.591974][ T7465] Call Trace: [ 120.591986][ T7465] [ 120.592053][ T7465] __dump_stack+0x1d/0x30 [ 120.592084][ T7465] dump_stack_lvl+0x95/0xd0 [ 120.592112][ T7465] dump_stack+0x15/0x1b [ 120.592160][ T7465] should_fail_ex+0x265/0x280 [ 120.592191][ T7465] should_failslab+0x8c/0xb0 [ 120.592256][ T7465] kmem_cache_alloc_noprof+0x69/0x4b0 [ 120.592278][ T7465] ? audit_log_start+0x342/0x720 [ 120.592305][ T7465] audit_log_start+0x342/0x720 [ 120.592332][ T7465] ? kstrtouint+0x76/0xc0 [ 120.592359][ T7465] audit_seccomp+0x48/0x100 [ 120.592431][ T7465] ? __seccomp_filter+0x832/0x1260 [ 120.592460][ T7465] __seccomp_filter+0x843/0x1260 [ 120.592497][ T7465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 120.592534][ T7465] ? vfs_write+0x7e8/0x960 [ 120.592560][ T7465] ? __rcu_read_unlock+0x4f/0x70 [ 120.592580][ T7465] ? __fget_files+0x184/0x1c0 [ 120.592609][ T7465] __secure_computing+0x82/0x150 [ 120.592711][ T7465] syscall_trace_enter+0xcf/0x1e0 [ 120.592738][ T7465] do_syscall_64+0xa4/0x2b0 [ 120.592840][ T7465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.592940][ T7465] RIP: 0033:0x7efef675f749 [ 120.592960][ T7465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.592983][ T7465] RSP: 002b:00007efef51bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 120.593003][ T7465] RAX: ffffffffffffffda RBX: 00007efef69b5fa0 RCX: 00007efef675f749 [ 120.593015][ T7465] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 120.593027][ T7465] RBP: 00007efef51bf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.593067][ T7465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.593081][ T7465] R13: 00007efef69b6038 R14: 00007efef69b5fa0 R15: 00007fff8c38eb68 [ 120.593105][ T7465] [ 120.867784][ T1039] IPVS: starting estimator thread 0... [ 120.875461][ T7476] FAULT_INJECTION: forcing a failure. [ 120.875461][ T7476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.888641][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.6.1296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.888764][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.888781][ T7476] Call Trace: [ 120.888788][ T7476] [ 120.888798][ T7476] __dump_stack+0x1d/0x30 [ 120.888829][ T7476] dump_stack_lvl+0x95/0xd0 [ 120.888880][ T7476] dump_stack+0x15/0x1b [ 120.888907][ T7476] should_fail_ex+0x265/0x280 [ 120.888937][ T7476] should_fail+0xb/0x20 [ 120.889039][ T7476] should_fail_usercopy+0x1a/0x20 [ 120.889071][ T7476] _copy_from_user+0x1c/0xb0 [ 120.889109][ T7476] ___sys_sendmsg+0xc1/0x1d0 [ 120.889207][ T7476] __x64_sys_sendmsg+0xd4/0x160 [ 120.889252][ T7476] x64_sys_call+0x17ba/0x3000 [ 120.889285][ T7476] do_syscall_64+0xca/0x2b0 [ 120.889357][ T7476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.889379][ T7476] RIP: 0033:0x7f2331d9f749 [ 120.889395][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.889451][ T7476] RSP: 002b:00007f23307ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.889502][ T7476] RAX: ffffffffffffffda RBX: 00007f2331ff5fa0 RCX: 00007f2331d9f749 [ 120.889519][ T7476] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000006 [ 120.889551][ T7476] RBP: 00007f23307ff090 R08: 0000000000000000 R09: 0000000000000000 [ 120.889567][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.889581][ T7476] R13: 00007f2331ff6038 R14: 00007f2331ff5fa0 R15: 00007ffe0b803f08 [ 120.889608][ T7476] [ 121.054167][ T7475] IPVS: using max 1824 ests per chain, 91200 per kthread [ 121.363676][ T7499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.381792][ T7499] bond0 (unregistering): Released all slaves [ 121.448960][ T7509] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 121.641859][ T7538] loop6: detected capacity change from 0 to 2048 [ 121.651572][ T7538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.668197][ T7538] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.770659][ T7552] x_tables: duplicate underflow at hook 2 [ 122.040756][ T7572] batman_adv: batadv0: Removing interface: dummy0 [ 122.049028][ T7572] bridge_slave_0: left allmulticast mode [ 122.054728][ T7572] bridge_slave_0: left promiscuous mode [ 122.060534][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.071017][ T7572] bridge_slave_1: left allmulticast mode [ 122.076755][ T7572] bridge_slave_1: left promiscuous mode [ 122.082595][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.144585][ T7572] bond0: (slave bond_slave_0): Releasing backup interface [ 122.154225][ T7572] bond0: (slave bond_slave_1): Releasing backup interface [ 122.173185][ T7572] team0: Port device team_slave_0 removed [ 122.182172][ T7572] team0: Port device team_slave_1 removed [ 122.188328][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.196830][ T7572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.205434][ T7572] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.253639][ T7580] __nla_validate_parse: 7 callbacks suppressed [ 122.253659][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 122.268944][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 122.310430][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 122.476610][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 122.499200][ T7587] lo speed is unknown, defaulting to 1000 [ 122.616316][ T7587] lo speed is unknown, defaulting to 1000 [ 122.684420][ T7587] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.780143][ T7613] netlink: 'syz.6.1351': attribute type 1 has an invalid length. [ 122.794084][ T7610] 9p: Could not find request transport:  [ 122.820607][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 122.850797][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.925445][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=7618 comm=syz.6.1351 [ 122.938215][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=7618 comm=syz.6.1351 [ 122.950896][ T7618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=7618 comm=syz.6.1351 [ 123.166798][ T7636] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1358'. [ 123.200938][ T7636] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.242635][ T7636] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.290491][ T7636] bond0 (unregistering): Released all slaves [ 123.854747][ T7664] FAULT_INJECTION: forcing a failure. [ 123.854747][ T7664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.867987][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.0.1368 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.868022][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.868039][ T7664] Call Trace: [ 123.868110][ T7664] [ 123.868118][ T7664] __dump_stack+0x1d/0x30 [ 123.868146][ T7664] dump_stack_lvl+0x95/0xd0 [ 123.868176][ T7664] dump_stack+0x15/0x1b [ 123.868202][ T7664] should_fail_ex+0x265/0x280 [ 123.868231][ T7664] should_fail+0xb/0x20 [ 123.868304][ T7664] should_fail_usercopy+0x1a/0x20 [ 123.868329][ T7664] _copy_to_user+0x20/0xa0 [ 123.868372][ T7664] simple_read_from_buffer+0xb5/0x130 [ 123.868453][ T7664] proc_fail_nth_read+0x10e/0x150 [ 123.868538][ T7664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.868647][ T7664] vfs_read+0x1a8/0x770 [ 123.868667][ T7664] ? __rcu_read_unlock+0x4f/0x70 [ 123.868694][ T7664] ? __fget_files+0x184/0x1c0 [ 123.868822][ T7664] ? mutex_lock+0x58/0x90 [ 123.868857][ T7664] ksys_read+0xda/0x1a0 [ 123.868883][ T7664] __x64_sys_read+0x40/0x50 [ 123.868907][ T7664] x64_sys_call+0x2889/0x3000 [ 123.869005][ T7664] do_syscall_64+0xca/0x2b0 [ 123.869168][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.869257][ T7664] RIP: 0033:0x7fbd95dfe15c [ 123.869277][ T7664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.869302][ T7664] RSP: 002b:00007fbd94867030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.869327][ T7664] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dfe15c [ 123.869351][ T7664] RDX: 000000000000000f RSI: 00007fbd948670a0 RDI: 0000000000000007 [ 123.869368][ T7664] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 123.869450][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.869465][ T7664] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 123.869492][ T7664] [ 124.157672][ T7678] loop4: detected capacity change from 0 to 2048 [ 124.181941][ T7678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.223931][ T7678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.256464][ T7546] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 124.548832][ T7718] loop0: detected capacity change from 0 to 1024 [ 124.599234][ T7718] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.647377][ T7718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.790228][ T7718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.841745][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 124.841763][ T29] audit: type=1326 audit(1767080326.376:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 124.881284][ T29] audit: type=1326 audit(1767080326.406:8665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 124.904860][ T29] audit: type=1326 audit(1767080326.406:8666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 124.928355][ T29] audit: type=1326 audit(1767080326.406:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 124.928983][ T7718] netlink: 'syz.0.1378': attribute type 30 has an invalid length. [ 124.951737][ T29] audit: type=1326 audit(1767080326.406:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 124.983169][ T29] audit: type=1326 audit(1767080326.406:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 125.006738][ T29] audit: type=1326 audit(1767080326.406:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 125.030244][ T29] audit: type=1326 audit(1767080326.406:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 125.053666][ T29] audit: type=1326 audit(1767080326.406:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 125.077218][ T29] audit: type=1326 audit(1767080326.406:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7747 comm="syz.4.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 125.658659][ T7801] loop0: detected capacity change from 0 to 764 [ 125.661592][ T7801] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 125.732067][ T7805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.732203][ T7805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.077738][ T7833] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1403'. [ 126.313483][ T7857] FAULT_INJECTION: forcing a failure. [ 126.313483][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 126.326341][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.0.1408 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.326373][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.326389][ T7857] Call Trace: [ 126.326398][ T7857] [ 126.326408][ T7857] __dump_stack+0x1d/0x30 [ 126.326486][ T7857] dump_stack_lvl+0x95/0xd0 [ 126.326507][ T7857] dump_stack+0x15/0x1b [ 126.326532][ T7857] should_fail_ex+0x265/0x280 [ 126.326561][ T7857] should_failslab+0x8c/0xb0 [ 126.326587][ T7857] __kmalloc_cache_noprof+0x65/0x4c0 [ 126.326668][ T7857] ? __se_sys_timerfd_create+0xe2/0x2b0 [ 126.326699][ T7857] __se_sys_timerfd_create+0xe2/0x2b0 [ 126.326806][ T7857] __x64_sys_timerfd_create+0x31/0x40 [ 126.326835][ T7857] x64_sys_call+0xaa8/0x3000 [ 126.326865][ T7857] do_syscall_64+0xca/0x2b0 [ 126.326911][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.327002][ T7857] RIP: 0033:0x7fbd95dff749 [ 126.327019][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.327037][ T7857] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 126.327057][ T7857] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 126.327079][ T7857] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 126.327094][ T7857] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 126.327110][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.327127][ T7857] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 126.327237][ T7857] [ 126.681324][ T7886] loop0: detected capacity change from 0 to 164 [ 126.690832][ T7886] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.712507][ T7886] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.736550][ T7881] netlink: 668 bytes leftover after parsing attributes in process `syz.6.1414'. [ 126.746911][ T7886] rock: directory entry would overflow storage [ 126.753156][ T7886] rock: sig=0x4f50, size=4, remaining=3 [ 126.758849][ T7886] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.795264][ T7893] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.824247][ T7546] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 126.856682][ T7893] rock: directory entry would overflow storage [ 126.862957][ T7893] rock: sig=0x4f50, size=4, remaining=3 [ 126.868618][ T7893] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 126.885823][ T7886] FAULT_INJECTION: forcing a failure. [ 126.885823][ T7886] name failslab, interval 1, probability 0, space 0, times 0 [ 126.898687][ T7886] CPU: 1 UID: 0 PID: 7886 Comm: syz.0.1415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.898721][ T7886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.898807][ T7886] Call Trace: [ 126.898815][ T7886] [ 126.898824][ T7886] __dump_stack+0x1d/0x30 [ 126.898856][ T7886] dump_stack_lvl+0x95/0xd0 [ 126.898884][ T7886] dump_stack+0x15/0x1b [ 126.898907][ T7886] should_fail_ex+0x265/0x280 [ 126.898931][ T7886] should_failslab+0x8c/0xb0 [ 126.898968][ T7886] kmem_cache_alloc_noprof+0x69/0x4b0 [ 126.898998][ T7886] ? audit_log_start+0x342/0x720 [ 126.899027][ T7886] audit_log_start+0x342/0x720 [ 126.899054][ T7886] ? kstrtouint+0x76/0xc0 [ 126.899227][ T7886] audit_seccomp+0x48/0x100 [ 126.899385][ T7886] ? __seccomp_filter+0x832/0x1260 [ 126.899502][ T7886] __seccomp_filter+0x843/0x1260 [ 126.899619][ T7886] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.899713][ T7886] ? vfs_write+0x7e8/0x960 [ 126.899775][ T7886] ? __rcu_read_unlock+0x4f/0x70 [ 126.899860][ T7886] ? __fget_files+0x184/0x1c0 [ 126.899949][ T7886] __secure_computing+0x82/0x150 [ 126.900045][ T7886] syscall_trace_enter+0xcf/0x1e0 [ 126.900116][ T7886] do_syscall_64+0xa4/0x2b0 [ 126.900319][ T7886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.900472][ T7886] RIP: 0033:0x7fbd95dff749 [ 126.900517][ T7886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.900579][ T7886] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 126.900665][ T7886] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 126.900723][ T7886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 126.900764][ T7886] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 126.900829][ T7886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.900871][ T7886] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 126.900935][ T7886] [ 126.917121][ T7886] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 127.090173][ T7913] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 127.115523][ T7886] Symlink component flag not implemented [ 127.129797][ T7886] Symlink component flag not implemented [ 127.130975][ T7913] bond1 (unregistering): Released all slaves [ 127.140601][ T7886] Symlink component flag not implemented (7) [ 127.140633][ T7886] Symlink component flag not implemented (116) [ 127.258358][ T7920] loop0: detected capacity change from 0 to 512 [ 127.304316][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.317672][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.329577][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.347240][ T7920] loop0: detected capacity change from 0 to 512 [ 127.368456][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.385965][ T7939] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1427'. [ 127.396195][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.416891][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.448969][ T7920] loop0: detected capacity change from 0 to 512 [ 127.467532][ T7950] FAULT_INJECTION: forcing a failure. [ 127.467532][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 127.480271][ T7950] CPU: 1 UID: 0 PID: 7950 Comm: syz.6.1432 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.480305][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.480320][ T7950] Call Trace: [ 127.480347][ T7950] [ 127.480423][ T7950] __dump_stack+0x1d/0x30 [ 127.480452][ T7950] dump_stack_lvl+0x95/0xd0 [ 127.480479][ T7950] dump_stack+0x15/0x1b [ 127.480561][ T7950] should_fail_ex+0x265/0x280 [ 127.480591][ T7950] should_failslab+0x8c/0xb0 [ 127.480682][ T7950] __kmalloc_noprof+0xb9/0x5a0 [ 127.480710][ T7950] ? security_sk_alloc+0x52/0x120 [ 127.480744][ T7950] security_sk_alloc+0x52/0x120 [ 127.480771][ T7950] sk_prot_alloc+0xc2/0x190 [ 127.480897][ T7950] sk_alloc+0x34/0x3d0 [ 127.480957][ T7950] unix_create1+0xa5/0x400 [ 127.480987][ T7950] ? inode_init_always_gfp+0x4cd/0x500 [ 127.481054][ T7950] unix_create+0x11f/0x150 [ 127.481081][ T7950] __sock_create+0x2e5/0x580 [ 127.481106][ T7950] __sys_socketpair+0x1bc/0x430 [ 127.481207][ T7950] __x64_sys_socketpair+0x52/0x60 [ 127.481284][ T7950] x64_sys_call+0x2df3/0x3000 [ 127.481315][ T7950] do_syscall_64+0xca/0x2b0 [ 127.481418][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.481445][ T7950] RIP: 0033:0x7f2331da169a [ 127.481464][ T7950] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.481571][ T7950] RSP: 002b:00007f23307fef78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 127.481593][ T7950] RAX: ffffffffffffffda RBX: 00007f2331ff5f00 RCX: 00007f2331da169a [ 127.481609][ T7950] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 127.481625][ T7950] RBP: 00007f23307ff090 R08: 0000000000000000 R09: 0000000000000000 [ 127.481641][ T7950] R10: 00007f23307fef98 R11: 0000000000000246 R12: 0000000000000001 [ 127.481731][ T7950] R13: 00007f2331ff6038 R14: 00007f2331ff5fa0 R15: 00007ffe0b803f08 [ 127.481757][ T7950] [ 127.483410][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.690989][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.702413][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.717631][ T7920] loop0: detected capacity change from 0 to 512 [ 127.728853][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.741873][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.755270][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.770947][ T7920] loop0: detected capacity change from 0 to 512 [ 127.793729][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.806858][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.818337][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.836503][ T7920] loop0: detected capacity change from 0 to 512 [ 127.851237][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.871309][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.882887][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.902405][ T7920] loop0: detected capacity change from 0 to 512 [ 127.918725][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.931618][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.942850][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.958739][ T7920] loop0: detected capacity change from 0 to 512 [ 127.979528][ T7920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.992477][ T7920] ext4 filesystem being mounted at /285/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.004340][ T7920] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.014366][ T7988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1443'. [ 128.029593][ T7920] loop0: detected capacity change from 0 to 512 [ 128.060230][ T7920] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 128.164509][ T8007] FAULT_INJECTION: forcing a failure. [ 128.164509][ T8007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.177939][ T8007] CPU: 0 UID: 0 PID: 8007 Comm: syz.3.1450 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.177974][ T8007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.178041][ T8007] Call Trace: [ 128.178049][ T8007] [ 128.178130][ T8007] __dump_stack+0x1d/0x30 [ 128.178170][ T8007] dump_stack_lvl+0x95/0xd0 [ 128.178199][ T8007] dump_stack+0x15/0x1b [ 128.178225][ T8007] should_fail_ex+0x265/0x280 [ 128.178255][ T8007] should_fail+0xb/0x20 [ 128.178281][ T8007] should_fail_usercopy+0x1a/0x20 [ 128.178325][ T8007] _copy_from_user+0x1c/0xb0 [ 128.178363][ T8007] __sys_bpf+0x183/0x7c0 [ 128.178400][ T8007] __x64_sys_bpf+0x41/0x50 [ 128.178478][ T8007] x64_sys_call+0x28e1/0x3000 [ 128.178511][ T8007] do_syscall_64+0xca/0x2b0 [ 128.178555][ T8007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.178583][ T8007] RIP: 0033:0x7f214b15f749 [ 128.178602][ T8007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.178697][ T8007] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.178765][ T8007] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 128.178781][ T8007] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 128.178793][ T8007] RBP: 00007f2149bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.178805][ T8007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.178818][ T8007] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 128.178865][ T8007] [ 128.449178][ T8022] macvtap1: entered promiscuous mode [ 128.454544][ T8022] macvtap1: entered allmulticast mode [ 128.735889][ T8049] EXT4-fs: Ignoring removed bh option [ 128.745010][ T8049] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 128.789247][ T8049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.934923][ T8059] SELinux: security_context_str_to_sid (/) failed with errno=-22 [ 128.981276][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1464'. [ 129.043006][ T8064] netlink: 668 bytes leftover after parsing attributes in process `syz.6.1469'. [ 129.059289][ T8065] pim6reg: entered allmulticast mode [ 129.335970][ T8073] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 129.430533][ T8075] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 129.515597][ T8044] pim6reg: left allmulticast mode [ 129.564864][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.665077][ T8044] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1464'. [ 129.838245][ T8103] SELinux: security_context_str_to_sid (/) failed with errno=-22 [ 129.854385][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1483'. [ 129.920646][ T8095] smc: removing ib device syz1 [ 130.029249][ T8108] sg_write: data in/out 1768/10 bytes for SCSI command 0xfe-- guessing data in; [ 130.029249][ T8108] program syz.6.1483 not setting count and/or reply_len properly [ 130.411617][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1486'. [ 130.438866][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1486'. [ 130.497072][ T8122] netlink: 'syz.6.1486': attribute type 1 has an invalid length. [ 130.772731][ T8153] lo speed is unknown, defaulting to 1000 [ 130.873245][ T8153] ip6_vti0 speed is unknown, defaulting to 1000 [ 130.888206][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 130.888223][ T29] audit: type=1400 audit(1767080332.426:8978): avc: denied { listen } for pid=8166 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.914682][ T29] audit: type=1400 audit(1767080332.426:8979): avc: denied { setopt } for pid=8166 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.934395][ T29] audit: type=1400 audit(1767080332.426:8980): avc: denied { write } for pid=8166 comm="syz.4.1510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.953933][ T48] I/O error, dev loop0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 130.954575][ T8179] 9p: Bad value for 'wfdno' [ 130.973814][ T29] audit: type=1400 audit(1767080332.456:8981): avc: denied { map } for pid=8170 comm="syz.0.1511" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.001610][ T8180] SELinux: security_context_str_to_sid (/) failed with errno=-22 [ 131.055104][ T8179] siw: device registration error -23 [ 131.270952][ T8194] EXT4-fs: inline encryption not supported [ 131.277593][ T8194] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.290228][ T8194] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1519: lblock 2 mapped to illegal pblock 2 (length 1) [ 131.305436][ T8194] EXT4-fs (loop0): Remounting filesystem read-only [ 131.312150][ T8194] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 131.321089][ T8194] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 131.330440][ T8194] EXT4-fs (loop0): 1 orphan inode deleted [ 131.336914][ T8194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.382851][ T29] audit: type=1326 audit(1767080332.916:8982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 131.416066][ T29] audit: type=1326 audit(1767080332.916:8983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 131.439591][ T29] audit: type=1326 audit(1767080332.916:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 131.463064][ T29] audit: type=1326 audit(1767080332.916:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.3.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 131.529036][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.182586][ T8247] set_capacity_and_notify: 3 callbacks suppressed [ 132.182602][ T8247] loop0: detected capacity change from 0 to 512 [ 132.218081][ T8247] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 132.273911][ T8247] EXT4-fs (loop0): mount failed [ 132.331923][ T8268] netlink: 'syz.0.1547': attribute type 4 has an invalid length. [ 132.339781][ T8268] netlink: 14497 bytes leftover after parsing attributes in process `syz.0.1547'. [ 132.449329][ T8271] netlink: 'syz.4.1546': attribute type 10 has an invalid length. [ 132.457962][ T8271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1546'. [ 132.614339][ T8271] team0: Port device geneve1 added [ 132.640506][ T6060] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.649435][ T6060] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.667349][ T6060] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.676151][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.696167][ T6060] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.736334][ T6060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.817116][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 132.903580][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 132.944278][ T8273] pim6reg: entered allmulticast mode [ 133.001284][ T8283] pim6reg: left allmulticast mode [ 133.126205][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.336130][ T8273] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1549'. [ 133.353009][ T8318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64288 sclass=netlink_route_socket pid=8318 comm=syz.4.1566 [ 133.496584][ T8327] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8327 comm=syz.0.1572 [ 133.594728][ T8327] loop0: detected capacity change from 0 to 512 [ 133.613647][ T8327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.676226][ T8327] EXT4-fs (loop0): failed to initialize system zone (-117) [ 133.692011][ T8327] EXT4-fs (loop0): mount failed [ 133.763245][ T8340] loop0: detected capacity change from 0 to 1024 [ 133.770528][ T8340] EXT4-fs: Ignoring removed bh option [ 133.777177][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.808849][ T8340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.813093][ T8326] Process accounting resumed [ 133.891317][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.980308][ T8346] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1577'. [ 134.196212][ T3488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.431409][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1598'. [ 134.937706][ T8446] loop0: detected capacity change from 0 to 164 [ 134.946473][ T8446] iso9660: Unknown parameter ' 'Փ&d%0Ln[y5L?40}z0Yғ`zXd9gr`d%07 a!lחj>V9Ԉ7^aRN_T)ዸqYc\:(U3b\dP G^Xix3ipsҴ/#R7h!Ldؿ~\)^PFU5'`>0C' [ 134.992045][ T8446] 9p: Unknown access argument H'ZU@Z@G: -22 [ 135.263154][ T8482] ipt_REJECT: ECHOREPLY no longer supported. [ 135.274931][ T8482] cgroup: Need name or subsystem set [ 135.284078][ T8482] can0: slcan on ptm0. [ 135.306403][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 135.318129][ T8482] ip6gre1: entered allmulticast mode [ 135.318997][ T8483] loop0: detected capacity change from 0 to 2048 [ 135.350326][ T8483] EXT4-fs: Ignoring removed nomblk_io_submit option [ 135.380685][ T8483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.410532][ T8481] can0 (unregistered): slcan off ptm0. [ 135.508163][ T8493] lo speed is unknown, defaulting to 1000 [ 135.638170][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1638'. [ 135.653369][ T8493] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.971695][ T29] kauditd_printk_skb: 1208 callbacks suppressed [ 135.971714][ T29] audit: type=1326 audit(1767080337.506:10193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd95df65e7 code=0x7ffc0000 [ 136.071292][ T29] audit: type=1326 audit(1767080337.556:10194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 136.095022][ T29] audit: type=1326 audit(1767080337.556:10195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd95dff783 code=0x7ffc0000 [ 136.118619][ T29] audit: type=1326 audit(1767080337.556:10196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbd95dff807 code=0x7ffc0000 [ 136.142259][ T29] audit: type=1326 audit(1767080337.556:10197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd95d9b829 code=0x7ffc0000 [ 136.165735][ T29] audit: type=1326 audit(1767080337.556:10199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd95df65e7 code=0x7ffc0000 [ 136.189260][ T29] audit: type=1326 audit(1767080337.556:10198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbd95db6bdd code=0x7ffc0000 [ 136.212749][ T29] audit: type=1326 audit(1767080337.556:10200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd95d9b829 code=0x7ffc0000 [ 136.236199][ T29] audit: type=1326 audit(1767080337.556:10201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbd95e33e89 code=0x7ffc0000 [ 136.259915][ T29] audit: type=1326 audit(1767080337.556:10203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8521 comm="syz.0.1643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 136.375933][ T8534] netlink: 'syz.6.1645': attribute type 1 has an invalid length. [ 136.383797][ T8534] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1645'. [ 136.479225][ T8546] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.500942][ T8546] vhci_hcd vhci_hcd.2: invalid port number 96 [ 136.507283][ T8546] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 136.629326][ T8560] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1653'. [ 138.027046][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1681'. [ 138.226724][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1682'. [ 138.387585][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 138.398544][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.398627][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.398645][ T3323] Call Trace: [ 138.398653][ T3323] [ 138.398662][ T3323] __dump_stack+0x1d/0x30 [ 138.398694][ T3323] dump_stack_lvl+0x95/0xd0 [ 138.398750][ T3323] dump_stack+0x15/0x1b [ 138.398770][ T3323] dump_header+0x81/0x240 [ 138.398794][ T3323] oom_kill_process+0x295/0x350 [ 138.398824][ T3323] out_of_memory+0x97b/0xb80 [ 138.398855][ T3323] try_charge_memcg+0x610/0xa10 [ 138.398953][ T3323] charge_memcg+0x51/0xc0 [ 138.398998][ T3323] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 138.399045][ T3323] __read_swap_cache_async+0x17b/0x2d0 [ 138.399138][ T3323] swap_cluster_readahead+0x262/0x3c0 [ 138.399231][ T3323] swapin_readahead+0xde/0x820 [ 138.399270][ T3323] ? next_uptodate_folio+0x81c/0x890 [ 138.399321][ T3323] ? percpu_counter_add_batch+0xb6/0x130 [ 138.399345][ T3323] ? __rcu_read_unlock+0x4f/0x70 [ 138.399365][ T3323] ? swap_cache_get_folio+0x277/0x280 [ 138.399400][ T3323] do_swap_page+0x2b4/0x21e0 [ 138.399492][ T3323] ? __pfx_default_wake_function+0x10/0x10 [ 138.399580][ T3323] handle_mm_fault+0x9d8/0x2c60 [ 138.399631][ T3323] do_user_addr_fault+0x630/0x1080 [ 138.399693][ T3323] exc_page_fault+0x62/0xa0 [ 138.399784][ T3323] asm_exc_page_fault+0x26/0x30 [ 138.399805][ T3323] RIP: 0033:0x7f214b035fd7 [ 138.399825][ T3323] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 138.399849][ T3323] RSP: 002b:00007ffd95ddcc90 EFLAGS: 00010206 [ 138.399870][ T3323] RAX: 0000001b33f24000 RBX: 000000000000034f RCX: 0000000000021728 [ 138.399920][ T3323] RDX: 000000000f2de8ed RSI: 00007ffd95ddcd20 RDI: 000000000000000b [ 138.399933][ T3323] RBP: 00007ffd95ddcccc R08: 0000000039e791db R09: 7fffffffffffffff [ 138.399949][ T3323] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 138.399962][ T3323] R13: 00000000000927c0 R14: 00000000000217ba R15: 00007ffd95ddcd20 [ 138.400023][ T3323] [ 138.400102][ T3323] memory: usage 307200kB, limit 307200kB, failcnt 2341 [ 138.426759][ T8252] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 138.629083][ T3323] memory+swap: usage 307724kB, limit 9007199254740988kB, failcnt 0 [ 138.637049][ T3323] kmem: usage 303080kB, limit 9007199254740988kB, failcnt 0 [ 138.644440][ T3323] Memory cgroup stats for /syz3: [ 138.644657][ T3323] cache 4096 [ 138.653010][ T3323] rss 4214784 [ 138.656679][ T3323] shmem 0 [ 138.659633][ T3323] mapped_file 0 [ 138.663121][ T3323] dirty 0 [ 138.666113][ T3323] writeback 0 [ 138.669487][ T3323] workingset_refault_anon 506 [ 138.674236][ T3323] workingset_refault_file 5291 [ 138.679056][ T3323] swap 536576 [ 138.682379][ T3323] swapcached 0 [ 138.685784][ T3323] pgpgin 160345 [ 138.689387][ T3323] pgpgout 159315 [ 138.692948][ T3323] pgfault 160165 [ 138.696536][ T3323] pgmajfault 335 [ 138.700103][ T3323] inactive_anon 0 [ 138.703806][ T3323] active_anon 0 [ 138.707342][ T3323] inactive_file 4218880 [ 138.711517][ T3323] active_file 0 [ 138.715068][ T3323] unevictable 0 [ 138.718597][ T3323] hierarchical_memory_limit 314572800 [ 138.724079][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 138.730298][ T3323] total_cache 4096 [ 138.734078][ T3323] total_rss 4214784 [ 138.737936][ T3323] total_shmem 0 [ 138.741504][ T3323] total_mapped_file 0 [ 138.745534][ T3323] total_dirty 0 [ 138.749121][ T3323] total_writeback 0 [ 138.753020][ T3323] total_workingset_refault_anon 506 [ 138.758273][ T3323] total_workingset_refault_file 5291 [ 138.763648][ T3323] total_swap 536576 [ 138.767522][ T3323] total_swapcached 0 [ 138.771442][ T3323] total_pgpgin 179078 [ 138.775449][ T3323] total_pgpgout 178048 [ 138.779582][ T3323] total_pgfault 161147 [ 138.783701][ T3323] total_pgmajfault 335 [ 138.787832][ T3323] total_inactive_anon 0 [ 138.792003][ T3323] total_active_anon 0 [ 138.796033][ T3323] total_inactive_file 4218880 [ 138.800876][ T3323] total_active_file 0 [ 138.805083][ T3323] total_unevictable 0 [ 138.809184][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1656,pid=8563,uid=0 [ 138.823995][ T3323] Memory cgroup out of memory: Killed process 8563 (syz.3.1656) total-vm:96016kB, anon-rss:5228kB, file-rss:22332kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 139.532841][ T8642] hub 1-0:1.0: USB hub found [ 139.585198][ T8642] hub 1-0:1.0: 8 ports detected [ 139.691248][ T8655] 9p: Bad value for 'rfdno' [ 139.698258][ T8659] FAULT_INJECTION: forcing a failure. [ 139.698258][ T8659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.711631][ T8659] CPU: 0 UID: 0 PID: 8659 Comm: syz.6.1696 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.711731][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.711748][ T8659] Call Trace: [ 139.711757][ T8659] [ 139.711768][ T8659] __dump_stack+0x1d/0x30 [ 139.711798][ T8659] dump_stack_lvl+0x95/0xd0 [ 139.711830][ T8659] dump_stack+0x15/0x1b [ 139.711856][ T8659] should_fail_ex+0x265/0x280 [ 139.711898][ T8659] should_fail+0xb/0x20 [ 139.711917][ T8659] should_fail_usercopy+0x1a/0x20 [ 139.711982][ T8659] _copy_from_user+0x1c/0xb0 [ 139.712019][ T8659] ___sys_sendmsg+0xc1/0x1d0 [ 139.712076][ T8659] __x64_sys_sendmsg+0xd4/0x160 [ 139.712189][ T8659] x64_sys_call+0x17ba/0x3000 [ 139.712286][ T8659] do_syscall_64+0xca/0x2b0 [ 139.712330][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.712356][ T8659] RIP: 0033:0x7f2331d9f749 [ 139.712372][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.712429][ T8659] RSP: 002b:00007f23307ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.712448][ T8659] RAX: ffffffffffffffda RBX: 00007f2331ff5fa0 RCX: 00007f2331d9f749 [ 139.712460][ T8659] RDX: 0000000000000000 RSI: 0000200000000c80 RDI: 0000000000000006 [ 139.712474][ T8659] RBP: 00007f23307ff090 R08: 0000000000000000 R09: 0000000000000000 [ 139.712505][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.712520][ T8659] R13: 00007f2331ff6038 R14: 00007f2331ff5fa0 R15: 00007ffe0b803f08 [ 139.712587][ T8659] [ 140.304310][ T8677] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1703'. [ 140.361421][ T5667] kernel read not supported for file 920/task/921/auxv (pid: 5667 comm: kworker/0:16) [ 140.545400][ T8699] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 140.552247][ T8699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 140.559836][ T8699] vhci_hcd vhci_hcd.0: Device attached [ 140.605877][ T3484] IPVS: starting estimator thread 0... [ 140.686097][ T8710] IPVS: using max 1824 ests per chain, 91200 per kthread [ 140.702293][ T8703] vhci_hcd: connection closed [ 140.702790][ T6071] vhci_hcd vhci_hcd.0: stop threads [ 140.712898][ T6071] vhci_hcd vhci_hcd.0: release socket [ 140.713011][ T6071] vhci_hcd vhci_hcd.0: disconnect device [ 140.746393][ T3484] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 140.755936][ T8715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.977979][ T29] kauditd_printk_skb: 411 callbacks suppressed [ 140.977997][ T29] audit: type=1326 audit(1767080342.516:10614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.076040][ T29] audit: type=1326 audit(1767080342.556:10615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.099643][ T29] audit: type=1326 audit(1767080342.576:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.123202][ T29] audit: type=1326 audit(1767080342.586:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.146775][ T29] audit: type=1326 audit(1767080342.596:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.170344][ T29] audit: type=1326 audit(1767080342.606:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.326589][ T29] audit: type=1326 audit(1767080342.646:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.328180][ T8729] FAULT_INJECTION: forcing a failure. [ 141.328180][ T8729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.350348][ T29] audit: type=1326 audit(1767080342.686:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.363507][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.0.1723 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.363540][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 141.363556][ T8729] Call Trace: [ 141.363565][ T8729] [ 141.363574][ T8729] __dump_stack+0x1d/0x30 [ 141.363606][ T8729] dump_stack_lvl+0x95/0xd0 [ 141.363678][ T8729] dump_stack+0x15/0x1b [ 141.363777][ T8729] should_fail_ex+0x265/0x280 [ 141.363874][ T8729] should_fail+0xb/0x20 [ 141.364006][ T8729] should_fail_usercopy+0x1a/0x20 [ 141.364055][ T8729] _copy_from_user+0x1c/0xb0 [ 141.364153][ T8729] ___sys_recvmsg+0xaa/0x370 [ 141.364260][ T8729] ? 0xffffffff81000000 [ 141.364370][ T8729] ? __rcu_read_unlock+0x4f/0x70 [ 141.364479][ T8729] __x64_sys_recvmsg+0xd1/0x160 [ 141.364593][ T8729] x64_sys_call+0x2cbf/0x3000 [ 141.364682][ T8729] do_syscall_64+0xca/0x2b0 [ 141.364812][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.364928][ T8729] RIP: 0033:0x7fbd95dff749 [ 141.364976][ T8729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.365034][ T8729] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 141.365101][ T8729] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 141.365156][ T8729] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 141.365215][ T8729] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 141.365268][ T8729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.365354][ T8729] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 141.365423][ T8729] [ 141.556167][ T29] audit: type=1326 audit(1767080342.716:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.580269][ T29] audit: type=1326 audit(1767080342.716:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8702 comm="syz.3.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 141.776086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.035884][ T8774] tmpfs: Bad value for 'mpol' [ 142.428740][ T8812] IPv6: Can't replace route, no match found [ 142.455666][ T8812] No such timeout policy "syz1" [ 142.469587][ T8817] netlink: 12 bytes leftover after parsing attributes in process `wޣ'. [ 142.479444][ T8817] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 142.488513][ T5667] hid (null): global environment stack underflow [ 142.498877][ T5667] hid (null): unknown global tag 0xd [ 142.505334][ T5667] hid-generic 0006:FFFFFFFD:0001.0001: unknown main item tag 0x6 [ 142.513259][ T5667] hid-generic 0006:FFFFFFFD:0001.0001: global environment stack underflow [ 142.521995][ T5667] hid-generic 0006:FFFFFFFD:0001.0001: item 0 2 1 11 parsing failed [ 142.530737][ T5667] hid-generic 0006:FFFFFFFD:0001.0001: probe with driver hid-generic failed with error -22 [ 142.622613][ T8828] Cannot find add_set index 0 as target [ 142.816117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.021896][ T8858] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 143.227220][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1778'. [ 143.314908][ T8875] lo speed is unknown, defaulting to 1000 [ 143.364622][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1784'. [ 143.385644][ T8875] ip6_vti0 speed is unknown, defaulting to 1000 [ 144.030133][ T8941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1810'. [ 144.223246][ T8942] block device autoloading is deprecated and will be removed. [ 144.359415][ T8965] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(34) [ 144.366102][ T8965] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 144.373726][ T8965] vhci_hcd vhci_hcd.0: Device attached [ 144.397041][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.420388][ T8967] netlink: 668 bytes leftover after parsing attributes in process `syz.2.1821'. [ 144.420649][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.537207][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1816'. [ 144.556250][ T3492] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 145.066077][ T3492] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 145.678003][ T8969] vhci_hcd: connection reset by peer [ 145.692198][ T6071] vhci_hcd vhci_hcd.4: stop threads [ 145.697779][ T6071] vhci_hcd vhci_hcd.4: release socket [ 145.703190][ T6071] vhci_hcd vhci_hcd.4: disconnect device [ 145.722244][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1825'. [ 145.795617][ T9018] pim6reg: entered allmulticast mode [ 146.114930][ T9018] pim6reg: left allmulticast mode [ 146.163371][ T29] kauditd_printk_skb: 966 callbacks suppressed [ 146.163390][ T29] audit: type=1326 audit(1767080347.696:11590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.196193][ T9023] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1825'. [ 146.209352][ T29] audit: type=1326 audit(1767080347.696:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.232980][ T29] audit: type=1326 audit(1767080347.736:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.256663][ T29] audit: type=1326 audit(1767080347.736:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.280620][ T29] audit: type=1326 audit(1767080347.736:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.304250][ T29] audit: type=1326 audit(1767080347.736:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.310365][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.328426][ T29] audit: type=1326 audit(1767080347.736:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.360235][ T29] audit: type=1326 audit(1767080347.736:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.366568][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.384780][ T29] audit: type=1326 audit(1767080347.736:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.415864][ T29] audit: type=1326 audit(1767080347.736:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.3.1832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214b15f749 code=0x7ffc0000 [ 146.446994][ T9031] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 146.446994][ T9031] program syz.4.1830 not setting count and/or reply_len properly [ 148.083294][ T9105] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 148.499034][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1866'. [ 149.205271][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1877'. [ 149.247995][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 150.616575][ T3492] usb 9-1: enqueue for inactive port 0 [ 150.622214][ T3492] usb 9-1: enqueue for inactive port 0 [ 150.696052][ T3492] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 150.705341][ T9196] lo speed is unknown, defaulting to 1000 [ 150.734136][ T9203] netlink: 'syz.6.1902': attribute type 10 has an invalid length. [ 150.746919][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.767718][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.792238][ T9203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=9203 comm=syz.6.1902 [ 150.833455][ T9196] ip6_vti0 speed is unknown, defaulting to 1000 [ 151.202815][ T9218] lo speed is unknown, defaulting to 1000 [ 151.332978][ T9218] ip6_vti0 speed is unknown, defaulting to 1000 [ 151.762128][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 151.762154][ T29] audit: type=1400 audit(1767080353.266:12090): avc: denied { setopt } for pid=9212 comm=",&#^%" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.787618][ T29] audit: type=1400 audit(1767080353.266:12091): avc: denied { ioctl } for pid=9212 comm=",&#^%" path="socket:[25916]" dev="sockfs" ino=25916 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 151.939236][ T29] audit: type=1400 audit(1767080353.356:12092): avc: denied { write } for pid=9212 comm="syz.4.1905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.355091][ T29] audit: type=1326 audit(1767080353.886:12093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.436121][ T29] audit: type=1326 audit(1767080353.886:12094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.459918][ T29] audit: type=1326 audit(1767080353.886:12095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.483545][ T29] audit: type=1326 audit(1767080353.886:12096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.507234][ T29] audit: type=1326 audit(1767080353.886:12097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.530983][ T29] audit: type=1326 audit(1767080353.886:12099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.554576][ T29] audit: type=1326 audit(1767080353.886:12100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.0.1919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd95dff749 code=0x7ffc0000 [ 152.899872][ T9263] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1924'. [ 152.953169][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1928'. [ 152.970365][ T9270] loop9: detected capacity change from 0 to 7 [ 152.991867][ T9270] buffer_io_error: 20 callbacks suppressed [ 152.991911][ T9270] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.046238][ T9270] Buffer I/O error on dev loop9, logical block 0, async page read [ 153.054131][ T9270] loop9: unable to read partition table [ 153.069913][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1929'. [ 153.116705][ T9270] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 153.116705][ T9270] ) failed (rc=-5) [ 153.335483][ T9289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 153.449589][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1925'. [ 153.726621][ T9304] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1939'. [ 153.867702][ T9311] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.1941'. [ 153.878384][ T9311] netlink: zone id is out of range [ 153.883531][ T9311] netlink: zone id is out of range [ 153.896408][ T9311] netlink: zone id is out of range [ 153.901583][ T9311] netlink: zone id is out of range [ 153.923461][ T9311] netlink: zone id is out of range [ 153.931675][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 153.946139][ T9311] netlink: zone id is out of range [ 153.951305][ T9311] netlink: zone id is out of range [ 153.967204][ T9311] netlink: zone id is out of range [ 153.972376][ T9311] netlink: zone id is out of range [ 153.977828][ T9311] netlink: zone id is out of range [ 154.669089][ T9345] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1955'. [ 154.845695][ T9314] syz.0.1943 (9314) used greatest stack depth: 7072 bytes left [ 155.077680][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 155.267478][ T9366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1963'. [ 155.400401][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1962'. [ 155.421230][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 155.436023][ T9371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=41 sclass=netlink_xfrm_socket pid=9371 comm=syz.0.1964 [ 155.448678][ T9371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=9371 comm=syz.0.1964 [ 155.461185][ T9371] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=50 sclass=netlink_xfrm_socket pid=9371 comm=syz.0.1964 [ 155.537425][ T9380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1968'. [ 155.584660][ T9383] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1969'. [ 155.679405][ T9390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.692286][ T9393] Cannot find map_set index 0 as target [ 155.772182][ T9390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.870977][ T9401] lo speed is unknown, defaulting to 1000 [ 155.883173][ T9390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.896751][ T9412] ref_ctr_offset mismatch. inode: 0x83e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000018 [ 155.940089][ T9390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.013640][ T9401] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.040266][ T4118] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.063444][ T4118] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.092202][ T4118] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.116870][ T4118] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.326629][ T9438] sch_fq: defrate 0 ignored. [ 156.742412][ T9461] lo speed is unknown, defaulting to 1000 [ 156.812325][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 156.812341][ T29] audit: type=1326 audit(1767080358.346:12714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 156.897647][ T29] audit: type=1326 audit(1767080358.376:12715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 156.921398][ T29] audit: type=1326 audit(1767080358.376:12716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 156.945022][ T29] audit: type=1326 audit(1767080358.376:12717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 156.954375][ T9473] netlink: 'syz.6.2001': attribute type 1 has an invalid length. [ 156.968652][ T29] audit: type=1326 audit(1767080358.376:12718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 156.999996][ T29] audit: type=1326 audit(1767080358.376:12719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 157.023535][ T29] audit: type=1326 audit(1767080358.376:12720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 157.031126][ T9461] ip6_vti0 speed is unknown, defaulting to 1000 [ 157.047103][ T29] audit: type=1326 audit(1767080358.376:12721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 157.074566][ T9477] FAULT_INJECTION: forcing a failure. [ 157.074566][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 157.076845][ T29] audit: type=1326 audit(1767080358.376:12722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 157.089532][ T9477] CPU: 1 UID: 0 PID: 9477 Comm: syz.3.2003 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.089632][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.089702][ T9477] Call Trace: [ 157.089764][ T9477] [ 157.089786][ T9477] __dump_stack+0x1d/0x30 [ 157.089904][ T9477] dump_stack_lvl+0x95/0xd0 [ 157.089976][ T9477] dump_stack+0x15/0x1b [ 157.090047][ T9477] should_fail_ex+0x265/0x280 [ 157.090123][ T9477] should_failslab+0x8c/0xb0 [ 157.090240][ T9477] __kmalloc_noprof+0xb9/0x5a0 [ 157.090317][ T9477] ? hash_netport4_add+0x74b/0x1700 [ 157.090469][ T9477] hash_netport4_add+0x74b/0x1700 [ 157.090504][ T9477] ? hash_netport4_add+0x66/0x1700 [ 157.090560][ T9477] ? ip_set_range_to_cidr+0xe6/0x100 [ 157.090653][ T9477] hash_netport4_uadt+0x865/0x970 [ 157.090825][ T9477] ? __pfx_hash_netport4_add+0x10/0x10 [ 157.090934][ T9477] call_ad+0xdc/0x630 [ 157.091060][ T9477] ? __nla_parse+0x40/0x60 [ 157.091221][ T9477] ip_set_ad+0x5c0/0x690 [ 157.091331][ T9477] ip_set_uadd+0x41/0x50 [ 157.091387][ T9477] nfnetlink_rcv_msg+0x4c6/0x590 [ 157.091563][ T9477] netlink_rcv_skb+0x123/0x220 [ 157.091657][ T9477] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 157.091765][ T9477] nfnetlink_rcv+0x167/0x16c0 [ 157.091898][ T9477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.091964][ T9477] ? kernel_text_address+0x94/0xb0 [ 157.092049][ T9477] ? css_rstat_updated+0xbb/0x280 [ 157.092112][ T9477] ? try_charge_memcg+0x215/0xa10 [ 157.092218][ T9477] ? css_rstat_updated+0xbb/0x280 [ 157.092283][ T9477] ? xas_load+0x413/0x430 [ 157.092462][ T9477] ? __rcu_read_unlock+0x4f/0x70 [ 157.092552][ T9477] ? xa_load+0xb1/0xe0 [ 157.092681][ T9477] ? __account_obj_stock+0x211/0x350 [ 157.092800][ T9477] ? ___slab_alloc+0x2ec/0xb00 [ 157.092881][ T9477] ? obj_cgroup_charge_account+0x122/0x1a0 [ 157.092984][ T9477] ? security_inode_alloc+0x37/0x100 [ 157.093060][ T9477] ? should_fail_ex+0x30/0x280 [ 157.093134][ T9477] ? should_fail_ex+0xdb/0x280 [ 157.093164][ T9477] ? selinux_nlmsg_lookup+0x99/0x890 [ 157.093190][ T9477] ? __rcu_read_unlock+0x34/0x70 [ 157.093209][ T9477] ? __netlink_lookup+0x266/0x2a0 [ 157.093324][ T9477] netlink_unicast+0x5c0/0x690 [ 157.093417][ T9477] netlink_sendmsg+0x58b/0x6b0 [ 157.093546][ T9477] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.093725][ T9477] __sock_sendmsg+0x145/0x180 [ 157.093810][ T9477] ____sys_sendmsg+0x31e/0x4a0 [ 157.093923][ T9477] ___sys_sendmsg+0x17b/0x1d0 [ 157.094072][ T9477] __x64_sys_sendmsg+0xd4/0x160 [ 157.094179][ T9477] x64_sys_call+0x17ba/0x3000 [ 157.094257][ T9477] do_syscall_64+0xca/0x2b0 [ 157.094430][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.094500][ T9477] RIP: 0033:0x7f214b15f749 [ 157.094552][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.094617][ T9477] RSP: 002b:00007f2149bbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.094692][ T9477] RAX: ffffffffffffffda RBX: 00007f214b3b5fa0 RCX: 00007f214b15f749 [ 157.094728][ T9477] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 157.094770][ T9477] RBP: 00007f2149bbf090 R08: 0000000000000000 R09: 0000000000000000 [ 157.094870][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.094906][ T9477] R13: 00007f214b3b6038 R14: 00007f214b3b5fa0 R15: 00007ffd95ddc908 [ 157.095014][ T9477] [ 157.287204][ T9473] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 157.292247][ T29] audit: type=1326 audit(1767080358.376:12723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9467 comm="syz.4.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 158.011947][ T9532] lo speed is unknown, defaulting to 1000 [ 158.135460][ T9532] ip6_vti0 speed is unknown, defaulting to 1000 [ 158.398473][ T9550] netlink: 'syz.0.2028': attribute type 29 has an invalid length. [ 158.434465][ T9552] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.497366][ T9553] vlan2: entered allmulticast mode [ 158.541335][ T9552] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.611449][ T9552] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.695482][ T9552] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.752172][ T9560] __nla_validate_parse: 5 callbacks suppressed [ 158.752313][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 158.795162][ T9517] pim6reg: entered allmulticast mode [ 158.833442][ T6071] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.890640][ T6071] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.904311][ T6071] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.924630][ T6071] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.018868][ T9517] pim6reg: left allmulticast mode [ 159.175866][ T9517] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2016'. [ 159.252164][ T9576] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2038'. [ 159.848715][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 159.894557][ T9574] team0 (unregistering): Port device geneve1 removed [ 159.910235][ T4131] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.919055][ T9583] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2040'. [ 159.928391][ T4131] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.958701][ T9597] pim6reg: entered allmulticast mode [ 159.996815][ T4131] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.023501][ T4131] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.237625][ T9609] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2050'. [ 160.340886][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2053'. [ 160.551570][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2055'. [ 160.607291][ T9574] pim6reg: left allmulticast mode [ 160.766564][ T9597] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2037'. [ 161.105264][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2069'. [ 161.185178][ T9662] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 161.545725][ T9673] FAULT_INJECTION: forcing a failure. [ 161.545725][ T9673] name failslab, interval 1, probability 0, space 0, times 0 [ 161.558500][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.0.2076 Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.558526][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.558538][ T9673] Call Trace: [ 161.558545][ T9673] [ 161.558553][ T9673] __dump_stack+0x1d/0x30 [ 161.558703][ T9673] dump_stack_lvl+0x95/0xd0 [ 161.558725][ T9673] dump_stack+0x15/0x1b [ 161.558820][ T9673] should_fail_ex+0x265/0x280 [ 161.558844][ T9673] should_failslab+0x8c/0xb0 [ 161.558867][ T9673] __kmalloc_noprof+0xb9/0x5a0 [ 161.558891][ T9673] ? sock_kmalloc+0x85/0xc0 [ 161.558919][ T9673] ? terminate_walk+0x1e6/0x210 [ 161.558991][ T9673] ? iovec_from_user+0x5e/0x210 [ 161.559059][ T9673] sock_kmalloc+0x85/0xc0 [ 161.559088][ T9673] ____sys_sendmsg+0xf8/0x4a0 [ 161.559121][ T9673] ___sys_sendmsg+0x17b/0x1d0 [ 161.559217][ T9673] __x64_sys_sendmsg+0xd4/0x160 [ 161.559253][ T9673] x64_sys_call+0x17ba/0x3000 [ 161.559278][ T9673] do_syscall_64+0xca/0x2b0 [ 161.559379][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.559416][ T9673] RIP: 0033:0x7fbd95dff749 [ 161.559431][ T9673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.559451][ T9673] RSP: 002b:00007fbd94867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.559471][ T9673] RAX: ffffffffffffffda RBX: 00007fbd96055fa0 RCX: 00007fbd95dff749 [ 161.559484][ T9673] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 161.559496][ T9673] RBP: 00007fbd94867090 R08: 0000000000000000 R09: 0000000000000000 [ 161.559521][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.559533][ T9673] R13: 00007fbd96056038 R14: 00007fbd96055fa0 R15: 00007ffff3dc4708 [ 161.559556][ T9673] [ 161.826270][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 161.826291][ T29] audit: type=1326 audit(1767080363.366:13151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 161.894447][ T29] audit: type=1326 audit(1767080363.366:13152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 161.918275][ T29] audit: type=1326 audit(1767080363.366:13153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 161.941830][ T29] audit: type=1326 audit(1767080363.366:13154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 161.965443][ T29] audit: type=1326 audit(1767080363.366:13155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 161.989045][ T29] audit: type=1326 audit(1767080363.366:13156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 162.012712][ T29] audit: type=1326 audit(1767080363.366:13157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 162.036259][ T29] audit: type=1326 audit(1767080363.366:13158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 162.060093][ T29] audit: type=1326 audit(1767080363.366:13159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 162.083564][ T29] audit: type=1326 audit(1767080363.366:13160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9678 comm="syz.2.2079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb12af749 code=0x7ffc0000 [ 162.615812][ T9699] netlink: 'syz.2.2085': attribute type 2 has an invalid length. [ 162.623711][ T9699] netlink: 'syz.2.2085': attribute type 1 has an invalid length. [ 162.898977][ T9710] netlink: 'syz.3.2088': attribute type 1 has an invalid length. [ 162.906953][ T9710] netlink: 'syz.3.2088': attribute type 2 has an invalid length. [ 163.364157][ T9733] lo speed is unknown, defaulting to 1000 [ 163.464714][ T9742] tmpfs: Bad value for 'mpol' [ 163.543149][ T9733] ip6_vti0 speed is unknown, defaulting to 1000 [ 163.761795][ T9771] __nla_validate_parse: 10 callbacks suppressed [ 163.761850][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 163.797292][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2115'. [ 164.662110][ T9797] lo speed is unknown, defaulting to 1000 [ 164.824828][ T9797] ip6_vti0 speed is unknown, defaulting to 1000 [ 164.919726][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 164.992346][ T9773] pim6reg: entered allmulticast mode [ 165.000733][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 165.016566][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 165.132162][ T9765] pim6reg: left allmulticast mode [ 165.198582][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2108'. [ 165.223932][ T9808] lo speed is unknown, defaulting to 1000 [ 165.373226][ T9755] pim6reg: entered allmulticast mode [ 165.392090][ T9808] ip6_vti0 speed is unknown, defaulting to 1000 [ 165.558254][ T9824] IPv6: Can't replace route, no match found [ 165.568442][ T3505] Process accounting resumed [ 165.608858][ T9765] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2112'. [ 165.678448][ T9755] pim6reg: left allmulticast mode [ 165.756691][ T9813] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2108'. [ 165.789182][ T9773] Process accounting paused [ 165.861289][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 165.906853][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 166.046470][ T9842] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 166.468365][ T9874] lo speed is unknown, defaulting to 1000 [ 166.611635][ T9874] ip6_vti0 speed is unknown, defaulting to 1000 [ 166.874969][ T9907] lo speed is unknown, defaulting to 1000 [ 166.933949][ T9907] ip6_vti0 speed is unknown, defaulting to 1000 [ 167.129230][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 167.129246][ T29] audit: type=1400 audit(1767080368.666:13462): avc: denied { setattr } for pid=9911 comm="syz.6.2167" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.203700][ T29] audit: type=1326 audit(1767080368.696:13463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.6.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 167.227555][ T29] audit: type=1326 audit(1767080368.696:13464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.6.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 167.251148][ T29] audit: type=1326 audit(1767080368.696:13465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.6.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 167.275943][ T29] audit: type=1326 audit(1767080368.696:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.6.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 167.299620][ T29] audit: type=1326 audit(1767080368.696:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9911 comm="syz.6.2167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 167.421424][ T9892] pim6reg: entered allmulticast mode [ 167.525402][ T9892] pim6reg: left allmulticast mode [ 167.574570][ T9935] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 167.646295][ T9940] netlink: 'syz.6.2178': attribute type 2 has an invalid length. [ 167.935795][ T9949] lo speed is unknown, defaulting to 1000 [ 168.009167][ T9949] ip6_vti0 speed is unknown, defaulting to 1000 [ 169.271916][ T9980] __nla_validate_parse: 12 callbacks suppressed [ 169.271932][ T9980] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2194'. [ 169.308313][ T9991] netlink: 668 bytes leftover after parsing attributes in process `syz.6.2196'. [ 169.411322][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2197'. [ 169.429077][ T9996] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 169.454330][T10000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2199'. [ 169.463908][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2199'. [ 169.541261][ T29] audit: type=1326 audit(1767080371.076:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2331d965e7 code=0x7ffc0000 [ 169.565097][ T29] audit: type=1326 audit(1767080371.076:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2331d3b829 code=0x7ffc0000 [ 169.588846][ T29] audit: type=1326 audit(1767080371.076:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2331d9f749 code=0x7ffc0000 [ 169.612587][ T29] audit: type=1326 audit(1767080371.076:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10004 comm="syz.6.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2331d965e7 code=0x7ffc0000 [ 169.675143][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 170.167524][T10019] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2207'. [ 170.449795][T10034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2213'. [ 171.412001][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 171.501843][T10050] pim6reg: entered allmulticast mode [ 171.793124][T10007] pim6reg: left allmulticast mode [ 171.796095][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2218'. [ 172.104956][ T9974] pim6reg: entered allmulticast mode [ 172.121986][T10069] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 172.279929][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 172.279998][ T29] audit: type=1326 audit(1767080373.816:13649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.364731][ T29] audit: type=1326 audit(1767080373.816:13650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.388527][ T29] audit: type=1326 audit(1767080373.816:13651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.412321][ T29] audit: type=1326 audit(1767080373.816:13652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.436143][ T29] audit: type=1326 audit(1767080373.816:13653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.460127][ T29] audit: type=1326 audit(1767080373.816:13654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.483851][ T29] audit: type=1326 audit(1767080373.816:13655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.507792][ T29] audit: type=1326 audit(1767080373.816:13656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.531524][ T29] audit: type=1326 audit(1767080373.816:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.555652][ T29] audit: type=1326 audit(1767080373.816:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10079 comm="syz.4.2227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efef675f749 code=0x7ffc0000 [ 172.625606][ T9974] pim6reg: left allmulticast mode [ 172.682375][T10088] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 172.765200][T10095] lo speed is unknown, defaulting to 1000 [ 172.886104][T10095] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.176603][T10129] lo speed is unknown, defaulting to 1000 [ 173.229027][T10129] ip6_vti0 speed is unknown, defaulting to 1000 [ 173.476062][ C0] ================================================================== [ 173.484232][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 173.491475][ C0] [ 173.493835][ C0] read-write to 0xffff888100a34cb8 of 8 bytes by interrupt on cpu 1: [ 173.501947][ C0] wq_worker_tick+0x60/0x230 [ 173.506673][ C0] sched_tick+0xd7/0x220 [ 173.510984][ C0] update_process_times+0x15f/0x190 [ 173.516225][ C0] tick_nohz_handler+0x276/0x3d0 [ 173.521209][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 173.526447][ C0] hrtimer_interrupt+0x21a/0x460 [ 173.531426][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 173.537374][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 173.543069][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.549107][ C0] slab_update_freelist+0x5a/0xe0 [ 173.554196][ C0] __slab_free+0x104/0x2a0 [ 173.558709][ C0] kfree+0x2d8/0x3c0 [ 173.562648][ C0] io_free_region+0xa3/0x150 [ 173.567292][ C0] io_ring_ctx_free+0x21d/0x3d0 [ 173.572202][ C0] io_ring_exit_work+0x4ef/0x520 [ 173.577176][ C0] process_scheduled_works+0x4ce/0x9d0 [ 173.582663][ C0] worker_thread+0x582/0x770 [ 173.587277][ C0] kthread+0x489/0x510 [ 173.591385][ C0] ret_from_fork+0x149/0x290 [ 173.596005][ C0] ret_from_fork_asm+0x1a/0x30 [ 173.600801][ C0] [ 173.603143][ C0] read-write to 0xffff888100a34cb8 of 8 bytes by interrupt on cpu 0: [ 173.611220][ C0] wq_worker_tick+0x60/0x230 [ 173.615846][ C0] sched_tick+0xd7/0x220 [ 173.620122][ C0] update_process_times+0x15f/0x190 [ 173.625442][ C0] tick_nohz_handler+0x276/0x3d0 [ 173.630401][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 173.635623][ C0] hrtimer_interrupt+0x21a/0x460 [ 173.640591][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 173.646503][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 173.652163][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.658171][ C0] io_ring_exit_work+0x186/0x520 [ 173.663146][ C0] process_scheduled_works+0x4ce/0x9d0 [ 173.668655][ C0] worker_thread+0x582/0x770 [ 173.673279][ C0] kthread+0x489/0x510 [ 173.677376][ C0] ret_from_fork+0x149/0x290 [ 173.682081][ C0] ret_from_fork_asm+0x1a/0x30 [ 173.686872][ C0] [ 173.689217][ C0] value changed: 0x00000000001a65d0 -> 0x00000000001a8ce0 [ 173.696336][ C0] [ 173.698678][ C0] Reported by Kernel Concurrency Sanitizer on: [ 173.704847][ C0] CPU: 0 UID: 0 PID: 6056 Comm: kworker/u8:56 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.714844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 173.724977][ C0] Workqueue: iou_exit io_ring_exit_work [ 173.730561][ C0] ==================================================================