last executing test programs: 2m0.238598588s ago: executing program 4 (id=84): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000700)='./file1\x00', 0xa0c416, &(0x7f0000001e80)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRES16=r0, @ANYBLOB="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", @ANYRESDEC=r0, @ANYRES16=r0], 0x5, 0x29d, &(0x7f0000001bc0)="$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") write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd2b, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc8, 0x9, 0x1100}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x4000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x3, &(0x7f0000000100)=""/147, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1024020, &(0x7f0000000140)={[{@noprefix}]}) open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) 2m0.172637555s ago: executing program 4 (id=86): r0 = io_uring_setup(0x21dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x2, 0xd5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e23, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2e6, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2000000002}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x4, 0x1, 0x6a, 0xf800000, 0x0, 0x80000000}}, 0xe8) listen(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000300)={0xf84, 0xb3}, 0x1) r4 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x3, 0x4, 0xfb, 0x0, 0x1ff, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x19d313ff, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0xa000, 0x7f, 0x4, 0x6, 0x6, 0x9, 0x7, 0x0, 0x4f, 0x0, 0xec7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x750f9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x6}, 0x4, 0x5, 0xfff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffffffffffff, r4, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2m0.092803392s ago: executing program 4 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r2}, 0x20) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r4 = getpgid(0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='scsi_dispatch_cmd_start\x00', r5}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs$namespace(r4, &(0x7f0000000100)='ns/pid_for_children\x00') fcntl$lock(r1, 0x5, &(0x7f0000000540)={0x2, 0x2, 0x9, 0x10001, r4}) openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), &(0x7f0000000380)='%-010d \x00'}, 0x20) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="5f15efa87b77d9378bf853a28bac8f3e8a82afd85745aa9f46579c42bcc3690fd6fa6aa98bb79d4d347da94b1f42d33b2c08d982d675a1a2eed20fc761d93d902e8a43d5e65856edff3d7df3a51ee1226b9a11e8b8aec19c3a0c345a9910301604bd12b60660e502f2bc3be261a992ec14c45df0ea3d3c06204c8e05fe597e7f4f5df2276c3cbd8a842048dc3abbf7cdcb7e44e1b8880b0bfe05b89681a63bc238a107840bcb787a0ab5e60418871c5b6f5ce8c3b5bd86f8d05a7a948b5717bd3d4afcdd5e4e7ccd5eff88ddd2f6d40357a1dc507e1e5a4909d2b7fb3b7072", 0xdf, 0x20000802, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x10) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) msgget$private(0x0, 0x21) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='cachefiles_rename\x00', r9, 0x0, 0x1ff}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x2e, 0x1, r10}}, 0x40) 2m0.018155449s ago: executing program 4 (id=91): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x200000, &(0x7f0000000040)=ANY=[@ANYRES16]) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000580)='$\x00\x19y\x01\xff\xb4\x9e\x95oQE\xc9\x1f|\bZ\xf44\x7f)\x03c\x9a\x85\x01V\xb8p+\x84\xfb\xe6?\x88\xe9\x98Y\x0e\xd5P\xa2\xcc\x01*\xcd%v!\x82\xf1\xaaB\x04-\x88\xeb-q8\x03\xadO\xa0F\xc5Z\x0f\xee\x94\xfcy\xa5\xa4L\xa1\xd7g\x9d\xd2m5r\xef\xe1\xd1\x87\x1aM\xa6\xa8\xa2\xef\xb0\x9e\xa9d\xee\xacl\x9c\xcb\x03\x17\xbbG\x15\xba3\xa5r<]T\xc6R\x03\xee#\x0f\x88\xc4\xd3\x02\xd1 @\r\x1cc\xe4|\x13H\xc2\x1fq\x88\xdd\x98\xe1~\xb0\xedK\x17x\v\x9b\xaa\xb4\a\xb6\x8b\x9e*=\x8f\x05\x8b\x88\xc9\x12\xa6\x8fs\x98\xf1\xfe\xcdX\xce,AD\xd2v\xf4\xe5\xd3\xf3\xf1TY\x1c\x8a\x98\xf8\xcf6\xc3>]l\xdaQ\xac\n{)\xc9\x95\xb4\x12j}8\x03\xba&\xe8p\xe8\xf0\xa4\xa6e\xbc\xef\x93%/x\x19\xaa\xb5\x97\x98A\\\x91\x9a \xa8\xf8a\xd8\x97\x1eR\xaf\xc8\x9f', 0x0) unshare(0x2040400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x5, @none}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$ptp(r1, &(0x7f0000000280)=""/176, 0xb0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000040)) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 'syzkaller0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="27031c0016eaceec94b1c54b0f3d002f1eafacf706e10500000086dd00050003ee0b60010000009b37786fd808252372071e4939880fbc5ad752ee1867e7545d4380b474caab0ce1bfd38108d32ac8db6f00bffd05b186b17239136720", 0x5d}], 0x1}, 0x24004010) 1m58.848127461s ago: executing program 4 (id=107): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0x1000a) sendfile(r0, r1, &(0x7f0000000000)=0xa00, 0x1001) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) 1m58.188102685s ago: executing program 4 (id=117): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x1000000) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @private1}}}, 0x108) r3 = memfd_secret(0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r1, 0x0, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xffffffffffff0000, r6}) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x6aae, 0xfffffffffffffffa, 0x3, 0x1}, 0x0) r7 = getpgid(r6) wait4(r7, &(0x7f0000000140), 0x80000000, &(0x7f0000000480)) 1m58.134740039s ago: executing program 32 (id=117): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000003c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x1000000) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x9, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x6, 0x7ffc0001}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x9effffff, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x8, @private1}}}, 0x108) r3 = memfd_secret(0x0) fchownat(r3, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$lock(r1, 0x0, &(0x7f00000001c0)={0x2, 0x1, 0x1, 0xffffffffffff0000, r6}) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x6aae, 0xfffffffffffffffa, 0x3, 0x1}, 0x0) r7 = getpgid(r6) wait4(r7, &(0x7f0000000140), 0x80000000, &(0x7f0000000480)) 46.299860427s ago: executing program 0 (id=1517): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB=' \x00'], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10a8b336b21b00000000000000000000000100040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 46.261549351s ago: executing program 0 (id=1521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000000040)=0xfffffffb, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) openat$cgroup_ro(r2, &(0x7f0000000240)='pids.current\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x80d}, 0x0) 46.110334665s ago: executing program 0 (id=1522): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 46.083633598s ago: executing program 0 (id=1523): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='svcrdma_qp_error\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000280)={[], [{@flag='async'}]}, 0x1, 0xbc2, &(0x7f00000017c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x10000001}, 0x18) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000040)='./file0\x00', 0x21) r4 = syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x200) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000680)=""/71) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r6, &(0x7f0000000140)={0x18, 0x2, {0x1, @empty}}, 0x1e) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r12, @ANYRES64=r10, @ANYRES16=r9, @ANYRES16=r12, @ANYRESDEC=r11, @ANYRES16=r8, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r7], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{r7, 0x8, 0x5, 0x7, 0x80000001, 0x4, 0x2c92, 0xffffffff, 0x9, 0xffff, 0x6, 0x8, 0x1, 0x1, 0xd}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000040)='./file1\x00') 45.847024251s ago: executing program 0 (id=1528): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x5, 0x7ffc0001}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117d, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x5, 0xfffe, 0x0, 0x7, 0x80000001, 0x20, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdffff7ffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) socket(0x2, 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000004cbd18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000ac0)='l', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 45.615915553s ago: executing program 0 (id=1531): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00080400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x7f, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x30, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/55, 0x3e, 0x37, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000291400001000000018410000000000000000000000000000950000000000000085100000ffffffff852000000300000085100000f8ff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[{0x4, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x4, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xf, 0x6}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x8}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_ACT={0x488, 0x4, [@m_police={0x484, 0x3, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x4b8}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2be, &(0x7f00000008c0)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r8, r8, 0x0, 0x800000007) 45.594507444s ago: executing program 33 (id=1531): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=0x1, @ANYBLOB="00080400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000300"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @decl_tag={0x7f, 0x0, 0x0, 0x11, 0x2, 0x4}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x30, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000500)=""/55, 0x3e, 0x37, 0x0, 0x3}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x7, 0x0}, 0x8) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1e, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000100000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000291400001000000018410000000000000000000000000000950000000000000085100000ffffffff852000000300000085100000f8ff000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018100000", @ANYRES32=r4, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x3ff, 0xa6, &(0x7f0000000440)=""/166, 0x41100, 0x40, '\x00', 0x0, @fallback=0x36, r5, 0x8, &(0x7f0000000580)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r7, 0x8, &(0x7f0000000880), &(0x7f00000008c0)=[{0x4, 0x1, 0xc, 0x4}, {0x1, 0x1, 0x6, 0x9}, {0x1, 0x3, 0xf, 0xb}, {0x1, 0x3, 0x4, 0xb}, {0x2, 0x2, 0xb, 0x7}, {0x3, 0x2, 0xf, 0x6}, {0x0, 0x4, 0x7, 0x8}, {0x4, 0x1, 0xb, 0x8}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x4b8, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x48c, 0x2, [@TCA_FW_ACT={0x488, 0x4, [@m_police={0x484, 0x3, 0x0, 0x0, {{0xb}, {0x458, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x8, 0x5, 0x200, {0xc3, 0x2, 0xe331, 0x81, 0x2b, 0x2}, {0x1, 0x0, 0x401, 0xe9b, 0xd}, 0x2, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xc, 0x1000, 0x8, 0x8, 0x9, 0x1, 0x187, 0xffffffff, 0x31, 0xab4, 0xd3, 0x7, 0xe33, 0x7, 0x7, 0xfff, 0xc63, 0x40, 0x2, 0xd, 0x2, 0x7, 0x6, 0x5, 0x9, 0xe, 0x1, 0x80000001, 0x5, 0xb, 0x7, 0x9, 0x4, 0x80000000, 0x1, 0x7, 0x1, 0x80000001, 0xffffffff, 0x8, 0x5, 0xfffffffb, 0x1, 0x3, 0x9, 0x4, 0x526a, 0x8001, 0x5, 0x6, 0x61f, 0x1, 0xfffffffa, 0xfffffe00, 0x2, 0x66, 0xfff, 0x2f, 0xffff, 0x1000, 0xffff, 0x9, 0x9, 0x9, 0x2, 0x9, 0x4, 0xdcb, 0xd, 0x8, 0xffffffff, 0x8, 0x6, 0x5, 0x2, 0x5, 0x40, 0x3, 0x8, 0x80000001, 0x6, 0x2, 0x36e, 0x5, 0x80000001, 0x8, 0x5, 0xb3, 0xfffffff7, 0x6, 0x34f, 0x0, 0x1, 0x9aa, 0x10, 0x4, 0x3, 0x8, 0x9, 0x81, 0xf, 0x80, 0x6, 0x8, 0x0, 0x5, 0x5, 0x8001, 0x4, 0x0, 0xe, 0x9, 0x5, 0xedb8, 0x10000, 0xf4, 0x1000, 0x4, 0x4, 0x4, 0x8, 0x0, 0x16d, 0xfffffffc, 0x3, 0x9000, 0x6, 0x10001, 0x5, 0x6, 0xa5e, 0xcf, 0x5, 0x6, 0x6eaf, 0x0, 0x0, 0x5, 0xd36, 0xc19, 0x4, 0x3, 0x2, 0x400, 0xb8, 0x1ff, 0x9, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x0, 0x1, 0xc263, 0x7, 0xc, 0x3, 0x8, 0x9, 0x6, 0x81, 0x5, 0x3, 0x2, 0x9, 0xe65c, 0x3, 0x8, 0x3, 0xf, 0x80000001, 0xfff, 0x53a, 0x3, 0x2, 0xc00000, 0x7c85, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x2, 0xbaa4, 0x3ff, 0x7f, 0x7, 0xd91, 0x101, 0x1003a4d9, 0x32e4, 0x6, 0x5, 0x7, 0x3, 0x8000, 0x10, 0x0, 0x8, 0xfffeffff, 0x8, 0x4, 0x0, 0x8, 0xee3, 0x2, 0x10000, 0x5, 0x7, 0xfffffffc, 0x1, 0x1, 0x6, 0x81, 0xe0, 0x3, 0x3, 0x5, 0x6, 0x3, 0xae, 0x9, 0x6, 0x3, 0x5, 0x1, 0x4, 0x6, 0x0, 0x5, 0x3, 0x3ff, 0xba4f, 0x0, 0x4, 0x3, 0x4, 0xbe, 0x7, 0x0, 0x101, 0x4, 0x2c8f, 0x1ff, 0x489f9a93, 0x7, 0x2, 0x9, 0xffffff90, 0x80, 0xd, 0x5, 0x5]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x4b8}}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000880)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRES8, @ANYRESOCT], 0xff, 0x2be, &(0x7f00000008c0)="$eJzs3E1rE1sYwPEnmTST9tKX1YV7Nz7oRjdDjUsVGqUFMaCkHVEXwpRONSQmZSZoIoJZu+rnKC7dCeIX6N4P4K4I0lVXjjSZTCcxfQs1qen/B2XOOc85M2fmtPCcwszO482XpXXfWndqksyoJEWasicyJ0XpSITHdKucjtrldlaacm3+1e775SdP7+fy+cWC6lJu5UZWVWcufX799sPlL7V/Hn2cMU3Znnu28yP7bfvf7f92fq68KPpa9LVSramjq9VqzVktu7pW9EuW6sOy6/iuFiu+63XF18vVjY2GOpW16akNz/V9dSoNTUpDa1XNhLOqqGVZOj21X87IBZI+9Qh7q1Bwcn1DF+rJjTfPyzmGiEz+tqb21mhmBAAARunw/D8Z9enk/8ne/F/kmPz/Xdhr5tPA+X9C+uf/hkT5f8lt5f81r6HOc6cYz/9xJHuhUHAmDuoLJxqV/HMTwqASzVjlTlfI83KT/QeR/wMAAAAAAAAAAAAAAAAAAAAA8DfYC4LZIAhm949JEQnCuikiRqzeZyhviI+B+PoHsR8zXOAj1h9jIPbiXkbke7Nu1+1E69iOL93LL85rS+zFv9163Tai+PV2XLvjEzIVxrN942m5eqUd34/dfZCPxzfr9qSs9czV6Ko1z/IxAAAAAAAw1iyNzEWNGYn295alpvTGW/v3ViElIp3/D/Ts71Pyf2qINwIAAAAAAA7lN96UnHLZ9YZTMIZ4rYELIoMNvxmYZzINQ0RiLWa4VPE+hWWR05w5JUf1Scuxt6wnupYpbme2w124r7mBh2fOyW/dCQu3zuyEQUKk3dL5AnTPXwEAAACA8XKwHxj1TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLiG8emyUd8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcF78CgAA//8fCrEr") r8 = open(&(0x7f0000000240)='./file1\x00', 0xe142, 0x0) sendfile(r8, r8, 0x0, 0x800000007) 37.894403392s ago: executing program 1 (id=1615): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg$unix(r2, &(0x7f0000000080), 0x0, 0x3, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x0, 0x1012) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x17, 0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB='1'], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.957562737s ago: executing program 1 (id=1630): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x5, 0x7ffc0001}]}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117d, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x5, 0xfffe, 0x0, 0x7, 0x80000001, 0x20, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdffff7ffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) socket(0x2, 0x80805, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000004cbd18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4113, 0x1011}], 0x1, 0xf0, 0xa) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x4, 0x0, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x2}) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) 35.586971613s ago: executing program 1 (id=1634): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 35.487513682s ago: executing program 1 (id=1637): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x4e, 0x54, 0x0, 0xcb2, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x9de, 0x7ff}, 0x403a, 0x81, 0x800, 0x9, 0x8, 0x4002, 0x77c, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 35.242103856s ago: executing program 1 (id=1649): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000019000095000000000f00001ae9fbbdd71ce8be36a3b7d2f3c312b51762fa70551d6f1b685fb35d295065b1ac5d4adf5b89f3a9d1cd9a5d0c9e620d5a30f416fa08cc7f6973ed0911100869a930985af2e647ececab1935de8b47377b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115000800fffc010000000000000000e7ff00000001ff02000000000000000000000000000132"], 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000532000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000046000000760000dfbe98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) 34.972352032s ago: executing program 1 (id=1648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r6 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r9) r10 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r10) socket$kcm(0xa, 0x2, 0x73) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r8, @ANYRES16=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x1a, r13, 0x1, 0x8, 0x6, @broadcast}, 0x14) socket$netlink(0x10, 0x3, 0xe) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 19.914744543s ago: executing program 34 (id=1648): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x7fe2, 0x3, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r6 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=ANY=[@ANYBLOB="1c0000001c000104000000000000e9ff2d"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r9) r10 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r10) socket$kcm(0xa, 0x2, 0x73) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRESHEX=r8, @ANYRES16=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r11, &(0x7f0000000080)={0x11, 0x1a, r13, 0x1, 0x8, 0x6, @broadcast}, 0x14) socket$netlink(0x10, 0x3, 0xe) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 4.205324747s ago: executing program 5 (id=2056): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000003838daeb4b7b619aa8a2a901b10065d18d023dcdd76f904b2e65310cb1b7c3182dbd4d9a5a17af1422da7ea082268c5d167ebcdde228aa3b118564621ba3f65972beaafdf582b0639d2e02af"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) 2.917395951s ago: executing program 5 (id=2083): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7090000000000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.806628961s ago: executing program 5 (id=2084): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = io_uring_setup(0x5197, &(0x7f0000000300)={0x0, 0x417c, 0x40, 0x8001002, 0x3a8}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 2.7157981s ago: executing program 5 (id=2087): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000180)=r0) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) 1.790163779s ago: executing program 5 (id=2100): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x0, 0x3, 0x4, 0x1a}]}) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="000202"], 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3, 0x2, 0x6}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xa, 0x7f}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1010}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18) socket$packet(0x11, 0xa, 0x300) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x7040, 0x0) ioctl$PPPIOCBRIDGECHAN(r12, 0x40047435, &(0x7f00000002c0)=0xfffeffff) getpid() syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) 1.477677688s ago: executing program 6 (id=2110): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@func_proto]}, {0x0, [0x5f, 0x61, 0x0, 0x5f, 0x0, 0x0, 0x30, 0x0]}}, 0x0, 0x2e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x3, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) fdatasync(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000001"], 0x122}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x80) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8) clock_nanosleep(0x2, 0x1000000, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) 911.014523ms ago: executing program 2 (id=2113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') mlockall(0x7) syz_emit_ethernet(0x52, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x4e23, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@nop, @generic={0x4, 0x4, ' e'}]}}}}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRES16], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r2, 0x27, 0xe, 0x0, &(0x7f0000000080)="f8ad48cc02cb29dcc8007f5b88a8", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809014000ffd9dd00000010000100030808004149004006040800", 0x58}], 0x1) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 840.395949ms ago: executing program 5 (id=2115): r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r5, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000823000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000180)=0xc4) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000019"], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES64=r9, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r10, 0x0, {0x1, 0xff, 0x4}, 0x2}, 0x18) 591.912473ms ago: executing program 2 (id=2118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 333.566848ms ago: executing program 3 (id=2119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0xb}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r3, 0x0, 0x7fff}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000001927e33a2a274b4a02686d5ce0000000300", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000005a000000bca9000000000000350901000700000095000000000000003e9800000000000026080000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 332.024398ms ago: executing program 6 (id=2120): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x46c0, 0x4) sendto(r2, &(0x7f0000000100)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x800, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 307.209521ms ago: executing program 3 (id=2121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x240000c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 306.551641ms ago: executing program 2 (id=2122): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x80003}, 0x100002, 0x0, 0xffffffff, 0x3, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x4461, 0x3080, 0x8002, 0x25f}, &(0x7f0000000440)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r7}, 0x62) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {r8}}, './file0\x00'}) getsockopt$EBT_SO_GET_INIT_INFO(r12, 0x0, 0x82, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [0x8000, 0x5, 0x1, 0xa14, 0x167, 0xb]}, &(0x7f0000000080)=0x78) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r14}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) setitimer(0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 262.107725ms ago: executing program 6 (id=2123): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 261.513845ms ago: executing program 7 (id=2124): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 243.859287ms ago: executing program 3 (id=2125): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$eJzs3c1rHOUfAPDvbF76+vs1hVLUgwR6sFK7aRJfKgitR9FiQe91SbahZNMt2U1pYqHtwYJ4kSKIWBD/AO8eizcv+lcUtFCkBD14icxmtt1ks9kk3bqp8/nAtM8zz2yeeeaZ59nv7MyyAeTWaPpPIeLFiPgyiTjUUjYYWeHo6nbLj65PpUsSKysf/ZFEkq1rbp9k/x/IMi9ExE+fRZwotNdbW1yaLVUq5fksP1afuzJWW1w6eWmuNFOeKV+emJw8/cbkxNtvvdmztr56/q9vPrz33ukvji1//cODw3eSOBsHs7LWdjyFm62Z0RjNjslQnF234XgPKttNku1tPvys9oPtGcjG+VCkc8ChGMhGPfDfdyMiVoCcSox/yKlmHNC8tu/RdfBz4+G7qxdA7e0fXP1sJPY2ro32LydrrozS692RHtSf1vHj73fvpEt0+RziRg/qA2i6eSsiTg0Ots9/STb/7dypxofHm1tfR97ef6Cf7qXxz2sbxT+Fx/FPbBD/HNhg7O5E9/FfeNCDajpK4793Nox/H09dIwNZ7n+NmG8ouXipUj4VEf+PiOMxtCfNb3Y/5/Ty/ZVOZa3xX7qk9TdjwWw/HgzuWfua6VK99DRtbvXwVsRLT+LfJNrm/72NWHd9/6fH43ya+OXzrnUcLd99uVNZ9/a36n0EvPJ9xCsb9v+TO1rJ5vcnxxrnw1jzrGj35+2jv3aqf3vt7720//dv3v6RpPV+bW37dXy39+9yp7Kdnv/DyceNdPNG4rVSvT4/HjGcfNC+fuLJa5v55vZp+48f23z+2+j83xcRn2yx/beP3O646W7o/+lt9f/2E/ff//TbTvVvrf9fb6SOZ2u2Mv9tdQef5tgBAAAAAADAblOIiIORFIqP04VCsbj6fMeR2F+oVGv1ExerC5eno/Fd2ZEYKjTvdB9qeR5iPHsetpmfWJefjIjDEfHVwL5GvjhVrUz3u/EAAAAAAAAAAAAAAAAAAACwSxzo8P3/1G8D/d474Jnzk9+QX13Hfy9+6QnYlbz/Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj/kl/EPAAAAAAAAAAAAAAAAAAAAAAAAAAAAPXX+3Ll0WVl+dH0qzU9fXVyYrV49OV2uzRbnFqaKU9X5K8WZanWmUi5OVee6/b1KtXplfCIWro3Vy7X6WG1x6cJcdeFy/cKludJM+UJ56F9pFQAAAAAAAAAAAAAAAAAAADxfaotLs6VKpTzfj8TPhYj+1b7lxJnYFbux40TSrZfPZCfD2qLhtjVrEpElBp/VzicR0e9Dl+NEnycmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjxTwAAAP///b4wHA==") r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8804, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x18) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={@id={0x2, 0x0, @d}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 234.621118ms ago: executing program 6 (id=2126): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4a000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) (fail_nth: 3) 203.888481ms ago: executing program 7 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 202.785541ms ago: executing program 2 (id=2128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = io_uring_setup(0x5197, &(0x7f0000000300)={0x0, 0x417c, 0x40, 0x8001002, 0x3a8}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 169.049904ms ago: executing program 7 (id=2129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000308000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 90.332841ms ago: executing program 7 (id=2130): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0x8eef0a3e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a"], 0x38}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) 90.089721ms ago: executing program 3 (id=2131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r2, &(0x7f00000002c0), 0x0}, 0x20) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$VT_ACTIVATE(r4, 0x5606, 0x2) connect$vsock_stream(r3, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) 89.913621ms ago: executing program 3 (id=2132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC]) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 73.729533ms ago: executing program 6 (id=2133): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000c00000000000000008500000007000000040000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x4e21, 0x48e, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@loopback, {0x0, 0x0, 0xfffffffffffffffd, 0x8000000008, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x4}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x20}, [@encap={0x1c, 0x4, {0x0, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) 66.631344ms ago: executing program 3 (id=2134): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) getpgrp(0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = creat(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000a80)={0x194, 0x3, 0x1, 0x907, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xaf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x2, 0x44}}]}}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x2, 0x1, 0x14000000, 0xf8000000]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x71e2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6}, @CTA_NAT_DST={0x44, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4800}, 0x40010) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$evdev(0xffffffffffffffff, 0x0, 0x0) readv(r5, &(0x7f0000001140)=[{&(0x7f0000000700)=""/206, 0xce}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x2581ffaee334be09, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='sched_switch\x00', r6}, 0x18) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x7000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x10, 0xfffffffffffffffd, 0x0, 0xb, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = socket(0x2, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) 52.815945ms ago: executing program 2 (id=2135): syz_io_uring_setup(0x5f4a, 0x0, &(0x7f0000000040)=0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010010000000000000000c"], 0x58}}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x102, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1100, 0xc31, 0xfffffffc, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) setns(0xffffffffffffffff, 0x2000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="230003000000"], 0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x5453, 0x0) 21.992788ms ago: executing program 7 (id=2136): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x240000c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 21.102498ms ago: executing program 6 (id=2137): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r2}, 0x18) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) bind$inet(r5, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x714f, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='svcrdma_decode_rqst\x00', r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340) 699.94µs ago: executing program 7 (id=2138): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1a000}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 0s ago: executing program 2 (id=2139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@i_version}, {@usrquota}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14, 0x800) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x15}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0xa, 0x7b, 0x3ff}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000003c0)=[r0], &(0x7f0000000400)=[{0x1, 0x5, 0x3, 0xa}, {0x4, 0x3, 0xa, 0x8}, {0x5, 0x3, 0x3, 0x9}, {0x4, 0x1, 0x0, 0xb}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x3, 0x8}, {0x3, 0x2, 0xc, 0xb}, {0x1, 0x4, 0xa, 0xc}, {0x1, 0x5, 0xe}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r3, 0x4) r4 = syz_io_uring_setup(0x35c0, &(0x7f0000001480)={0x0, 0x90f1, 0x1000, 0x207, 0xec}, &(0x7f00000006c0), &(0x7f00000000c0)) io_uring_enter(r4, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): port 1(bridge_slave_0) entered forwarding state [ 119.466488][ T7674] loop5: detected capacity change from 0 to 128 [ 119.524227][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.543654][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.553518][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.573571][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.585526][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.592713][ T849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.626678][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.633788][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.684865][ T7675] qrtr: Invalid version 0 [ 119.765794][ T7684] __nla_validate_parse: 3 callbacks suppressed [ 119.765809][ T7684] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1550'. [ 119.803837][ T7687] loop1: detected capacity change from 0 to 128 [ 119.832579][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.020284][ T7694] qrtr: Invalid version 0 [ 120.075553][ T7612] veth0_vlan: entered promiscuous mode [ 120.093686][ T7612] veth1_vlan: entered promiscuous mode [ 120.139681][ T7612] veth0_macvtap: entered promiscuous mode [ 120.155914][ T7612] veth1_macvtap: entered promiscuous mode [ 120.181785][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.212131][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.235085][ T3431] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.266475][ T3431] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.304350][ T3431] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.323670][ T3431] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.412528][ T7710] 9p: Could not find request transport: f0x0000000000000005 [ 120.478409][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.485923][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.493365][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.531770][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.539524][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.547001][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.554424][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.561947][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.569399][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.576903][ T3393] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 120.587938][ T3393] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 120.615160][ T7721] loop2: detected capacity change from 0 to 1024 [ 120.622258][ T7721] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 120.659181][ T3393] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz0 [ 120.677877][ T7725] FAULT_INJECTION: forcing a failure. [ 120.677877][ T7725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.691108][ T7725] CPU: 1 UID: 0 PID: 7725 Comm: syz.2.1561 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.691185][ T7725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.691202][ T7725] Call Trace: [ 120.691255][ T7725] [ 120.691263][ T7725] __dump_stack+0x1d/0x30 [ 120.691321][ T7725] dump_stack_lvl+0x95/0xd0 [ 120.691348][ T7725] dump_stack+0x15/0x1b [ 120.691367][ T7725] should_fail_ex+0x265/0x280 [ 120.691436][ T7725] should_fail+0xb/0x20 [ 120.691455][ T7725] should_fail_usercopy+0x1a/0x20 [ 120.691536][ T7725] _copy_from_user+0x1c/0xb0 [ 120.691588][ T7725] __se_sys_add_key+0x20e/0x350 [ 120.691696][ T7725] __x64_sys_add_key+0x67/0x80 [ 120.691736][ T7725] x64_sys_call+0x2ea3/0x3000 [ 120.691769][ T7725] do_syscall_64+0xca/0x2b0 [ 120.691815][ T7725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.691862][ T7725] RIP: 0033:0x7f61d144f749 [ 120.691880][ T7725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.691921][ T7725] RSP: 002b:00007f61cfeb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 120.692004][ T7725] RAX: ffffffffffffffda RBX: 00007f61d16a5fa0 RCX: 00007f61d144f749 [ 120.692019][ T7725] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000780 [ 120.692035][ T7725] RBP: 00007f61cfeb7090 R08: fffffffffffffffb R09: 0000000000000000 [ 120.692051][ T7725] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 120.692066][ T7725] R13: 00007f61d16a6038 R14: 00007f61d16a5fa0 R15: 00007ffe6d7ecaf8 [ 120.692086][ T7725] [ 120.875146][ T3400] hid-generic 0000:0000:0000.0005: hidraw0: HID v8.00 Device [syz0] on syz0 [ 120.910029][ T7733] loop1: detected capacity change from 0 to 512 [ 120.918402][ T7733] ext4: Bad value for 'jqfmt' [ 121.031718][ T7743] loop5: detected capacity change from 0 to 512 [ 121.038636][ T7743] EXT4-fs: Ignoring removed i_version option [ 121.085038][ T7737] loop1: detected capacity change from 0 to 164 [ 121.117524][ T7737] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 121.233244][ T7743] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.502608][ T7752] loop6: detected capacity change from 0 to 128 [ 121.535054][ T7754] loop1: detected capacity change from 0 to 512 [ 121.558766][ T7752] bio_check_eod: 30829 callbacks suppressed [ 121.558785][ T7752] syz.6.1570: attempt to access beyond end of device [ 121.558785][ T7752] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 121.613953][ T7754] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 121.659256][ T7752] syz.6.1570: attempt to access beyond end of device [ 121.659256][ T7752] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 121.673011][ T7752] buffer_io_error: 140 callbacks suppressed [ 121.673028][ T7752] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 121.693786][ T7737] netlink: 'syz.1.1567': attribute type 1 has an invalid length. [ 121.703030][ T7737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1567'. [ 121.715857][ T7755] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.803523][ T7752] syz.6.1570: attempt to access beyond end of device [ 121.803523][ T7752] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 121.817358][ T7752] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 121.842483][ T7755] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 121.853977][ T7752] syz.6.1570: attempt to access beyond end of device [ 121.853977][ T7752] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 121.909748][ T29] kauditd_printk_skb: 2103 callbacks suppressed [ 121.909766][ T29] audit: type=1326 audit(1766524831.430:40634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 121.974371][ T7752] syz.6.1570: attempt to access beyond end of device [ 121.974371][ T7752] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 121.988172][ T7752] Buffer I/O error on dev loop6, logical block 83, lost async page write [ 122.058670][ T29] audit: type=1326 audit(1766524831.480:40635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.082751][ T29] audit: type=1326 audit(1766524831.480:40636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.106318][ T29] audit: type=1326 audit(1766524831.480:40637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.129928][ T29] audit: type=1326 audit(1766524831.480:40638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.153528][ T29] audit: type=1326 audit(1766524831.480:40639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.177069][ T29] audit: type=1326 audit(1766524831.480:40640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.193160][ T7752] syz.6.1570: attempt to access beyond end of device [ 122.193160][ T7752] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 122.201113][ T29] audit: type=1326 audit(1766524831.480:40641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.214830][ T7752] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 122.238502][ T29] audit: type=1326 audit(1766524831.480:40642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.270743][ T29] audit: type=1326 audit(1766524831.480:40643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7761 comm="syz.1.1572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 122.360980][ T7752] syz.6.1570: attempt to access beyond end of device [ 122.360980][ T7752] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 122.367318][ T7752] syz.6.1570: attempt to access beyond end of device [ 122.367318][ T7752] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 122.367353][ T7752] Buffer I/O error on dev loop6, logical block 95, lost async page write [ 122.367388][ T7752] syz.6.1570: attempt to access beyond end of device [ 122.367388][ T7752] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 122.367472][ T7752] Buffer I/O error on dev loop6, logical block 96, lost async page write [ 122.367517][ T7752] syz.6.1570: attempt to access beyond end of device [ 122.367517][ T7752] loop6: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 122.368176][ T7752] Buffer I/O error on dev loop6, logical block 111, lost async page write [ 122.368202][ T7752] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 122.368825][ T7752] Buffer I/O error on dev loop6, logical block 115, lost async page write [ 122.368888][ T7752] Buffer I/O error on dev loop6, logical block 116, lost async page write [ 122.845691][ T7772] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1575'. [ 122.871228][ T7773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1576'. [ 122.882246][ T3852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.932959][ T3489] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 123.001868][ T3489] hid-generic 0000:0000:0000.0007: hidraw0: HID v8.00 Device [syz0] on syz0 [ 123.151804][ T7795] loop1: detected capacity change from 0 to 128 [ 123.192344][ T7788] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 123.295885][ T7788] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 123.312209][ T7788] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 123.320289][ T7788] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1583'. [ 123.466190][ T7807] EXT4-fs: Ignoring removed i_version option [ 123.475522][ T7807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.679551][ T7806] qrtr: Invalid version 0 [ 123.698026][ T7811] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1590'. [ 123.982671][ T7815] 9p: Could not find request transport: f0x0000000000000005 [ 124.035603][ T10] hid-generic 0000:0000:0000.0008: hidraw0: HID v8.00 Device [syz0] on syz0 [ 124.134984][ T7817] qrtr: Invalid version 0 [ 124.241344][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v8.00 Device [syz0] on syz0 [ 124.323723][ T10] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 124.506331][ T7835] set_capacity_and_notify: 5 callbacks suppressed [ 124.506349][ T7835] loop5: detected capacity change from 0 to 128 [ 124.963657][ T7845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1602'. [ 125.074866][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.094129][ T7847] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1603'. [ 125.124844][ T3393] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 125.184233][ T3393] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 125.405904][ T3393] hid-generic 0000:0000:0000.000D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 125.477716][ T7871] loop1: detected capacity change from 0 to 128 [ 125.485565][ T7870] loop3: detected capacity change from 0 to 128 [ 125.636555][ T7872] qrtr: Invalid version 0 [ 125.773858][ T7878] loop1: detected capacity change from 0 to 512 [ 125.780885][ T7878] EXT4-fs: Ignoring removed i_version option [ 125.867756][ T7878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.897016][ T7880] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1616'. [ 126.194195][ T3489] hid_parser_main: 309 callbacks suppressed [ 126.194218][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.207747][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.215160][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.342989][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.350567][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.358115][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.365599][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.373191][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.380622][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.388127][ T3489] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 126.540898][ T7891] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1619'. [ 126.595429][ T5092] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 126.651368][ T5092] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz0] on syz0 [ 126.663949][ T3489] hid-generic 0000:0000:0000.000E: hidraw1: HID v8.00 Device [syz0] on syz0 [ 126.808093][ T7903] loop2: detected capacity change from 0 to 164 [ 126.961889][ T7903] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 127.024099][ T29] kauditd_printk_skb: 1174 callbacks suppressed [ 127.024142][ T29] audit: type=1400 audit(1766524836.540:41818): avc: denied { read } for pid=7910 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 127.115770][ T29] audit: type=1400 audit(1766524836.590:41819): avc: denied { mount } for pid=7908 comm="syz.6.1627" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 127.138354][ T29] audit: type=1400 audit(1766524836.600:41820): avc: denied { remount } for pid=7908 comm="syz.6.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 127.237698][ T7917] netlink: 'syz.2.1624': attribute type 1 has an invalid length. [ 127.245529][ T7917] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1624'. [ 127.352996][ T29] audit: type=1400 audit(1766524836.690:41821): avc: denied { ioctl } for pid=7910 comm="syz.3.1628" path="socket:[21000]" dev="sockfs" ino=21000 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.377899][ T29] audit: type=1400 audit(1766524836.690:41822): avc: denied { write } for pid=7910 comm="syz.3.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 127.587326][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.716809][ T29] audit: type=1326 audit(1766524837.240:41823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 127.740580][ T29] audit: type=1326 audit(1766524837.240:41824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 127.764142][ T29] audit: type=1326 audit(1766524837.240:41825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 127.787642][ T29] audit: type=1326 audit(1766524837.240:41826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 127.811199][ T29] audit: type=1326 audit(1766524837.240:41827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7920 comm="syz.1.1630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26c2ff749 code=0x7ffc0000 [ 127.887458][ T7927] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1632'. [ 127.938939][ T7929] loop3: detected capacity change from 0 to 128 [ 127.990504][ T3393] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz0] on syz0 [ 128.019290][ T7934] bio_check_eod: 13327 callbacks suppressed [ 128.019309][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.019309][ T7934] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 128.046323][ T7936] loop6: detected capacity change from 0 to 128 [ 128.065514][ T3489] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz0] on syz0 [ 128.066914][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.066914][ T7934] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 128.110016][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.110016][ T7934] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 128.145360][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.145360][ T7934] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 128.159793][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.159793][ T7934] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 128.179128][ T7936] syz.6.1636: attempt to access beyond end of device [ 128.179128][ T7936] loop6: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 128.197034][ T7929] qrtr: Invalid version 0 [ 128.202420][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.202420][ T7934] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 128.216243][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.216243][ T7934] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 128.230008][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.230008][ T7934] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 128.245347][ T7934] syz.3.1633: attempt to access beyond end of device [ 128.245347][ T7934] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 128.286114][ T7936] qrtr: Invalid version 0 [ 128.492813][ T7956] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1644'. [ 128.545017][ T3393] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz0] on syz0 [ 128.595453][ T3393] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz0] on syz0 [ 128.618888][ T7971] loop3: detected capacity change from 0 to 128 [ 128.750274][ T7984] loop2: detected capacity change from 0 to 128 [ 128.773895][ T7986] loop5: detected capacity change from 0 to 128 [ 128.787826][ T7978] qrtr: Invalid version 0 [ 128.915559][ T7987] qrtr: Invalid version 0 [ 128.966851][ T7988] qrtr: Invalid version 0 [ 129.002565][ T7991] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 129.100922][ T7991] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 129.159595][ T7990] netlink: 'syz.6.1656': attribute type 1 has an invalid length. [ 129.169172][ T7990] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1656'. [ 129.530497][ T7996] set_capacity_and_notify: 2 callbacks suppressed [ 129.530512][ T7996] loop3: detected capacity change from 0 to 128 [ 129.827542][ T7998] qrtr: Invalid version 0 [ 129.891975][ T5092] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 130.376626][ T8019] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1667'. [ 130.387257][ T8017] loop5: detected capacity change from 0 to 128 [ 130.505469][ T8018] loop2: detected capacity change from 0 to 164 [ 130.545898][ T8018] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 130.651249][ T8026] loop2: detected capacity change from 0 to 512 [ 130.709668][ T8023] qrtr: Invalid version 0 [ 130.716807][ T8026] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 130.776446][ T1039] hid-generic 0000:0000:0000.0016: hidraw0: HID v8.00 Device [syz0] on syz0 [ 130.810193][ T8026] netlink: 'syz.2.1668': attribute type 1 has an invalid length. [ 130.818083][ T8026] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1668'. [ 130.891890][ T36] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.00 Device [syz0] on syz0 [ 130.927020][ T8032] loop3: detected capacity change from 0 to 128 [ 130.960856][ T8032] buffer_io_error: 108 callbacks suppressed [ 130.960874][ T8032] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 130.994897][ T8032] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 131.004255][ T8032] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 131.013810][ T8032] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 131.022987][ T8032] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 131.113609][ T8032] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 131.135543][ T8021] syz.6.1669 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 131.149895][ T8021] CPU: 0 UID: 0 PID: 8021 Comm: syz.6.1669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.149925][ T8021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.149991][ T8021] Call Trace: [ 131.150000][ T8021] [ 131.150012][ T8021] __dump_stack+0x1d/0x30 [ 131.150165][ T8021] dump_stack_lvl+0x95/0xd0 [ 131.150195][ T8021] dump_stack+0x15/0x1b [ 131.150222][ T8021] dump_header+0x81/0x240 [ 131.150250][ T8021] oom_kill_process+0x295/0x350 [ 131.150318][ T8021] out_of_memory+0x97b/0xb80 [ 131.150360][ T8021] try_charge_memcg+0x610/0xa10 [ 131.150400][ T8021] obj_cgroup_charge_pages+0xa6/0x150 [ 131.150501][ T8021] __memcg_kmem_charge_page+0x9f/0x170 [ 131.150558][ T8021] __alloc_frozen_pages_noprof+0x18f/0x360 [ 131.150670][ T8021] alloc_pages_mpol+0xb3/0x260 [ 131.150789][ T8021] alloc_pages_noprof+0x90/0x130 [ 131.150825][ T8021] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 131.150868][ T8021] __kvmalloc_node_noprof+0x492/0x6b0 [ 131.150949][ T8021] ? ip_set_alloc+0x24/0x30 [ 131.150985][ T8021] ? ip_set_alloc+0x24/0x30 [ 131.151101][ T8021] ip_set_alloc+0x24/0x30 [ 131.151231][ T8021] hash_netiface_create+0x282/0x740 [ 131.151276][ T8021] ? __pfx_hash_netiface_create+0x10/0x10 [ 131.151319][ T8021] ip_set_create+0x3cc/0x970 [ 131.151387][ T8021] ? __nla_parse+0x40/0x60 [ 131.151467][ T8021] nfnetlink_rcv_msg+0x4c6/0x590 [ 131.151579][ T8021] netlink_rcv_skb+0x123/0x220 [ 131.151614][ T8021] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.151656][ T8021] nfnetlink_rcv+0x167/0x16c0 [ 131.151683][ T8021] ? kmem_cache_free+0xe3/0x3a0 [ 131.151724][ T8021] ? __kfree_skb+0x109/0x150 [ 131.151755][ T8021] ? nlmon_xmit+0x4f/0x60 [ 131.151856][ T8021] ? consume_skb+0x49/0x150 [ 131.151890][ T8021] ? nlmon_xmit+0x4f/0x60 [ 131.151965][ T8021] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 131.152031][ T8021] ? ref_tracker_free+0x48/0x3e0 [ 131.152061][ T8021] ? __tsan_memset+0x1da/0x1f0 [ 131.152183][ T8021] ? ref_tracker_free+0x37d/0x3e0 [ 131.152224][ T8021] ? __netlink_deliver_tap+0x4dc/0x500 [ 131.152361][ T8021] netlink_unicast+0x5c0/0x690 [ 131.152403][ T8021] netlink_sendmsg+0x58b/0x6b0 [ 131.152514][ T8021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.152546][ T8021] __sock_sendmsg+0x145/0x180 [ 131.152572][ T8021] ____sys_sendmsg+0x31e/0x4a0 [ 131.152749][ T8021] ___sys_sendmsg+0x17b/0x1d0 [ 131.152809][ T8021] __x64_sys_sendmsg+0xd4/0x160 [ 131.152889][ T8021] x64_sys_call+0x17ba/0x3000 [ 131.152921][ T8021] do_syscall_64+0xca/0x2b0 [ 131.152968][ T8021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.153033][ T8021] RIP: 0033:0x7f0dd61ff749 [ 131.153063][ T8021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.153086][ T8021] RSP: 002b:00007f0dd4c67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.153148][ T8021] RAX: ffffffffffffffda RBX: 00007f0dd6455fa0 RCX: 00007f0dd61ff749 [ 131.153162][ T8021] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000010 [ 131.153173][ T8021] RBP: 00007f0dd6283f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.153186][ T8021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.153201][ T8021] R13: 00007f0dd6456038 R14: 00007f0dd6455fa0 R15: 00007ffc58d4d308 [ 131.153227][ T8021] [ 131.153395][ T8021] memory: usage 307200kB, limit 307200kB, failcnt 315 [ 131.155091][ T8032] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 131.163377][ T8021] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 131.252130][ T8032] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 131.254048][ T8021] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 131.329169][ T8032] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 131.331189][ T8021] Memory cgroup stats for /syz6 [ 131.338367][ T8032] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 131.341022][ T8021] : [ 131.548488][ T8021] cache 0 [ 131.553909][ T8021] rss 0 [ 131.556809][ T8021] shmem 0 [ 131.559791][ T8021] mapped_file 0 [ 131.563267][ T8021] dirty 0 [ 131.566250][ T8021] writeback 0 [ 131.569562][ T8021] workingset_refault_anon 67 [ 131.574186][ T8021] workingset_refault_file 20 [ 131.578823][ T8021] swap 397312 [ 131.582127][ T8021] swapcached 4096 [ 131.585836][ T8021] pgpgin 4241 [ 131.589182][ T8021] pgpgout 4240 [ 131.592569][ T8021] pgfault 5501 [ 131.596000][ T8021] pgmajfault 31 [ 131.599546][ T8021] inactive_anon 0 [ 131.603195][ T8021] active_anon 4096 [ 131.606969][ T8021] inactive_file 0 [ 131.610616][ T8021] active_file 0 [ 131.614079][ T8021] unevictable 0 [ 131.617602][ T8021] hierarchical_memory_limit 314572800 [ 131.622989][ T8021] hierarchical_memsw_limit 9223372036854771712 [ 131.629249][ T8021] total_cache 0 [ 131.632728][ T8021] total_rss 0 [ 131.636064][ T8021] total_shmem 0 [ 131.639558][ T8021] total_mapped_file 0 [ 131.643569][ T8021] total_dirty 0 [ 131.647128][ T8021] total_writeback 0 [ 131.651043][ T8021] total_workingset_refault_anon 67 [ 131.656627][ T8021] total_workingset_refault_file 20 [ 131.662195][ T8021] total_swap 397312 [ 131.666091][ T8021] total_swapcached 4096 [ 131.670266][ T8021] total_pgpgin 4241 [ 131.674100][ T8021] total_pgpgout 4240 [ 131.678058][ T8021] total_pgfault 5501 [ 131.682018][ T8021] total_pgmajfault 31 [ 131.686046][ T8021] total_inactive_anon 0 [ 131.690238][ T8021] total_active_anon 4096 [ 131.694497][ T8021] total_inactive_file 0 [ 131.698692][ T8021] total_active_file 0 [ 131.702866][ T8021] total_unevictable 0 [ 131.706904][ T8021] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1669,pid=8020,uid=0 [ 131.721888][ T8021] Memory cgroup out of memory: Killed process 8020 (syz.6.1669) total-vm:96016kB, anon-rss:1136kB, file-rss:22708kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 131.787928][ T8046] loop5: detected capacity change from 0 to 128 [ 132.030634][ T29] kauditd_printk_skb: 2900 callbacks suppressed [ 132.030653][ T29] audit: type=1326 audit(1766524841.550:44728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 132.067417][ T8050] qrtr: Invalid version 0 [ 132.083625][ T29] audit: type=1326 audit(1766524841.580:44729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 132.107222][ T29] audit: type=1326 audit(1766524841.580:44730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26ff43f783 code=0x7ffc0000 [ 132.130584][ T29] audit: type=1326 audit(1766524841.580:44731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f26ff43f807 code=0x7ffc0000 [ 132.154047][ T29] audit: type=1326 audit(1766524841.580:44732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26ff3f6bdd code=0x7ffc0000 [ 132.177591][ T29] audit: type=1326 audit(1766524841.580:44733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f26ff473e89 code=0x7ffc0000 [ 132.201215][ T29] audit: type=1326 audit(1766524841.580:44734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26ff3f6c47 code=0x7ffc0000 [ 132.224668][ T29] audit: type=1326 audit(1766524841.580:44735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 132.248349][ T29] audit: type=1326 audit(1766524841.580:44736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 132.271860][ T29] audit: type=1326 audit(1766524841.580:44737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8044 comm="syz.5.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f26ff3f6357 code=0x7ffc0000 [ 132.467756][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1679'. [ 132.523283][ T10] hid_parser_main: 280 callbacks suppressed [ 132.523304][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.536964][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.544379][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.555984][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.563512][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.571162][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.578595][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.586017][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.593418][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.600858][ T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 132.611026][ T10] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.00 Device [syz0] on syz0 [ 132.654524][ T8060] loop6: detected capacity change from 0 to 128 [ 132.764797][ T8063] loop5: detected capacity change from 0 to 128 [ 132.858065][ T8068] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1686'. [ 132.899614][ T10] hid-generic 0000:0000:0000.0019: hidraw0: HID v8.00 Device [syz0] on syz0 [ 132.975580][ T8066] qrtr: Invalid version 0 [ 133.025242][ T8063] bio_check_eod: 50229 callbacks suppressed [ 133.025262][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.025262][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.052951][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.052951][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.068373][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.068373][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.082924][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.082924][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.097225][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.097225][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.111199][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 133.120209][ T8078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1690'. [ 133.130187][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.130187][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.144497][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.144497][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.175446][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.175446][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.178973][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 133.195754][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.195754][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.224462][ T8063] syz.5.1683: attempt to access beyond end of device [ 133.224462][ T8063] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 133.263993][ T8084] loop3: detected capacity change from 0 to 512 [ 133.443879][ T8090] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 133.599196][ T8084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.625446][ T8084] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.685105][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.870089][ T8099] loop2: detected capacity change from 0 to 128 [ 133.889414][ T8095] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 133.956585][ T8100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.015407][ T8100] bridge_slave_0: left allmulticast mode [ 134.021240][ T8100] bridge_slave_0: left promiscuous mode [ 134.026981][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.055842][ T8100] bridge_slave_1: left allmulticast mode [ 134.061570][ T8100] bridge_slave_1: left promiscuous mode [ 134.067431][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.083387][ T8100] bond0: (slave bond_slave_0): Releasing backup interface [ 134.119789][ T8100] bond0: (slave bond_slave_1): Releasing backup interface [ 134.138100][ T8100] team0: Port device team_slave_0 removed [ 134.169529][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1698'. [ 134.219579][ T8100] team0: Port device team_slave_1 removed [ 134.237375][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.244867][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.290932][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.298498][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.312367][ T8095] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 134.333588][ T8100] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 134.380403][ T8095] netlink: 'syz.5.1693': attribute type 1 has an invalid length. [ 134.393804][ T8095] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1693'. [ 134.399153][ T8115] 9p: Could not find request transport: f0x0000000000000005 [ 134.438539][ T8120] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1702'. [ 134.483049][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 134.673202][ T8127] qrtr: Invalid version 0 [ 134.681039][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 134.723495][ T10] hid-generic 0000:0000:0000.001C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 134.748965][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.924794][ T8135] set_capacity_and_notify: 4 callbacks suppressed [ 134.924848][ T8135] loop3: detected capacity change from 0 to 164 [ 135.000762][ T8135] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 135.132579][ T8140] loop6: detected capacity change from 0 to 512 [ 135.139810][ T8140] EXT4-fs (loop6): blocks per group (32768) and clusters per group (64) inconsistent [ 135.189391][ T8141] loop3: detected capacity change from 0 to 512 [ 135.219431][ T8141] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.320258][ T8135] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 135.410597][ T8147] 9p: Could not find request transport: f0x0000000000000005 [ 135.436602][ T8152] __nla_validate_parse: 2 callbacks suppressed [ 135.436622][ T8152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1715'. [ 135.510537][ T10] hid-generic 0000:0000:0000.001D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 135.535194][ T8157] x_tables: duplicate underflow at hook 2 [ 135.568997][ T8150] loop5: detected capacity change from 0 to 164 [ 135.589075][ T8150] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 135.796100][ T8150] loop5: detected capacity change from 0 to 512 [ 135.829429][ T8150] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 135.875907][ T8150] netlink: 'syz.5.1714': attribute type 1 has an invalid length. [ 135.884788][ T8150] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1714'. [ 135.897665][ T8176] loop6: detected capacity change from 0 to 128 [ 135.947392][ T8178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1726'. [ 135.982612][ T36] hid-generic 0000:0000:0000.001E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 136.024541][ T8185] 9p: Could not find request transport: f0x0000000000000005 [ 136.094475][ T8182] qrtr: Invalid version 0 [ 136.193426][ T8202] FAULT_INJECTION: forcing a failure. [ 136.193426][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.206684][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.5.1735 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.206728][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.206746][ T8202] Call Trace: [ 136.206754][ T8202] [ 136.206764][ T8202] __dump_stack+0x1d/0x30 [ 136.206789][ T8202] dump_stack_lvl+0x95/0xd0 [ 136.206810][ T8202] dump_stack+0x15/0x1b [ 136.206956][ T8202] should_fail_ex+0x265/0x280 [ 136.206988][ T8202] should_fail+0xb/0x20 [ 136.207009][ T8202] should_fail_usercopy+0x1a/0x20 [ 136.207079][ T8202] _copy_from_user+0x1c/0xb0 [ 136.207116][ T8202] ucma_write+0xd9/0x250 [ 136.207162][ T8202] ? __pfx_ucma_write+0x10/0x10 [ 136.207197][ T8202] vfs_write+0x269/0x960 [ 136.207248][ T8202] ? __rcu_read_unlock+0x4f/0x70 [ 136.207275][ T8202] ? __fget_files+0x184/0x1c0 [ 136.207310][ T8202] ksys_write+0xda/0x1a0 [ 136.207337][ T8202] __x64_sys_write+0x40/0x50 [ 136.207417][ T8202] x64_sys_call+0x2847/0x3000 [ 136.207451][ T8202] do_syscall_64+0xca/0x2b0 [ 136.207536][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.207557][ T8202] RIP: 0033:0x7f26ff43f749 [ 136.207572][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.207590][ T8202] RSP: 002b:00007f26fdea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.207615][ T8202] RAX: ffffffffffffffda RBX: 00007f26ff695fa0 RCX: 00007f26ff43f749 [ 136.207631][ T8202] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000003 [ 136.207647][ T8202] RBP: 00007f26fdea7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.207727][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.207739][ T8202] R13: 00007f26ff696038 R14: 00007f26ff695fa0 R15: 00007ffe294faee8 [ 136.207762][ T8202] [ 136.406410][ T8204] loop3: detected capacity change from 0 to 512 [ 136.413138][ T8204] EXT4-fs: inline encryption not supported [ 136.425213][ T8204] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 136.435177][ T8204] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1736: invalid indirect mapped block 2683928664 (level 1) [ 136.487333][ T8204] EXT4-fs (loop3): 1 truncate cleaned up [ 136.502575][ T8204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.536781][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 136.578830][ T8204] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1736: Invalid block bitmap block 3 in block_group 0 [ 136.606954][ T8204] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 136.617239][ T8208] loop5: detected capacity change from 0 to 164 [ 136.628583][ T8212] 9p: Could not find request transport: f0x0000000000000005 [ 136.642222][ T8208] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 136.669736][ T8204] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1736: invalid indirect mapped block 4294967295 (level 0) [ 136.684122][ T8204] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1736: invalid indirect mapped block 65536 (level 1) [ 136.720496][ T8217] ucma_write: process 826 (syz.2.1740) changed security contexts after opening file descriptor, this is not allowed. [ 136.762926][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.784562][ T36] hid-generic 0000:0000:0000.0020: hidraw0: HID v8.00 Device [syz0] on syz0 [ 136.879319][ T8231] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1746'. [ 136.929054][ T8233] loop6: detected capacity change from 0 to 512 [ 136.945676][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1748'. [ 136.954988][ T8233] EXT4-fs: Ignoring removed i_version option [ 136.961187][ T8233] EXT4-fs: Ignoring removed bh option [ 136.971699][ T8208] loop5: detected capacity change from 0 to 512 [ 136.981986][ T3393] hid-generic 0000:0000:0000.0021: hidraw0: HID v8.00 Device [syz0] on syz0 [ 136.992344][ T8233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.005151][ T8233] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.040020][ T8208] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 137.050326][ T7612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.081372][ T29] kauditd_printk_skb: 1665 callbacks suppressed [ 137.081390][ T29] audit: type=1326 audit(1766524846.600:46403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f5c29156357 code=0x7ffc0000 [ 137.111282][ T29] audit: type=1326 audit(1766524846.600:46404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5c291563b6 code=0x7ffc0000 [ 137.115754][ T8208] netlink: 'syz.5.1737': attribute type 1 has an invalid length. [ 137.134981][ T29] audit: type=1326 audit(1766524846.600:46405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135021][ T29] audit: type=1326 audit(1766524846.600:46406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135120][ T29] audit: type=1326 audit(1766524846.600:46407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135154][ T29] audit: type=1326 audit(1766524846.600:46408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135789][ T29] audit: type=1326 audit(1766524846.600:46409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135826][ T29] audit: type=1326 audit(1766524846.600:46410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135906][ T29] audit: type=1326 audit(1766524846.600:46411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.135938][ T29] audit: type=1326 audit(1766524846.600:46412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.3.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c2919f749 code=0x7ffc0000 [ 137.330600][ T8243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8243 comm=syz.2.1751 [ 137.354247][ T8208] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1737'. [ 137.386597][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1751'. [ 137.425510][ T8243] EXT4-fs: Invalid want_extra_isize -2147483647 [ 137.460862][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1759'. [ 137.479560][ T8262] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 137.505281][ T8262] ext4: Unknown parameter 'noacl' [ 137.515211][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1760'. [ 137.546353][ T3393] hid_parser_main: 280 callbacks suppressed [ 137.546374][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.559778][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.567288][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.582287][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.589873][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.597425][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.605006][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.612506][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.619612][ T8276] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 137.620108][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.628297][ T8276] EXT4-fs (loop6): orphan cleanup on readonly fs [ 137.635484][ T3393] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 137.646701][ T8276] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.1764: corrupted inode contents [ 137.652050][ T3393] hid-generic 0000:0000:0000.0022: hidraw0: HID v8.00 Device [syz0] on syz0 [ 137.671028][ T8276] EXT4-fs (loop6): Remounting filesystem read-only [ 137.677814][ T8276] EXT4-fs (loop6): 1 truncate cleaned up [ 137.684536][ T297] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.695210][ T297] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.706821][ T297] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 137.717627][ T8276] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.743504][ T7612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.849171][ T8294] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1772'. [ 137.923054][ T8289] qrtr: Invalid version 0 [ 138.005998][ T8296] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 138.036032][ T8281] bio_check_eod: 29821 callbacks suppressed [ 138.036088][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.036088][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.061295][ T3393] hid-generic 0000:0000:0000.0023: hidraw0: HID v8.00 Device [syz0] on syz0 [ 138.073210][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.073210][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.098268][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.098268][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.118342][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.118342][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.134596][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.134596][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.149226][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.149226][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.163867][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.163867][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.164221][ T8305] FAULT_INJECTION: forcing a failure. [ 138.164221][ T8305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.179537][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.179537][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.190833][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.6.1776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.190934][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.190993][ T8305] Call Trace: [ 138.191023][ T8305] [ 138.191046][ T8305] __dump_stack+0x1d/0x30 [ 138.191130][ T8305] dump_stack_lvl+0x95/0xd0 [ 138.191263][ T8305] dump_stack+0x15/0x1b [ 138.191329][ T8305] should_fail_ex+0x265/0x280 [ 138.191456][ T8305] should_fail+0xb/0x20 [ 138.191522][ T8305] should_fail_usercopy+0x1a/0x20 [ 138.191609][ T8305] _copy_to_user+0x20/0xa0 [ 138.191706][ T8305] simple_read_from_buffer+0xb5/0x130 [ 138.191808][ T8305] proc_fail_nth_read+0x10e/0x150 [ 138.191908][ T8305] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.191998][ T8305] vfs_read+0x1a8/0x770 [ 138.192085][ T8305] ? __rcu_read_unlock+0x4f/0x70 [ 138.192151][ T8305] ? __fget_files+0x184/0x1c0 [ 138.192227][ T8305] ? mutex_lock+0x58/0x90 [ 138.192344][ T8305] ksys_read+0xda/0x1a0 [ 138.192432][ T8305] __x64_sys_read+0x40/0x50 [ 138.192563][ T8305] x64_sys_call+0x2889/0x3000 [ 138.192668][ T8305] do_syscall_64+0xca/0x2b0 [ 138.192797][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.192872][ T8305] RIP: 0033:0x7f0dd61fe15c [ 138.192929][ T8305] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.193084][ T8305] RSP: 002b:00007f0dd4c67030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.193148][ T8305] RAX: ffffffffffffffda RBX: 00007f0dd6455fa0 RCX: 00007f0dd61fe15c [ 138.193190][ T8305] RDX: 000000000000000f RSI: 00007f0dd4c670a0 RDI: 0000000000000006 [ 138.193263][ T8305] RBP: 00007f0dd4c67090 R08: 0000000000000000 R09: 0000000000000000 [ 138.193299][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.193342][ T8305] R13: 00007f0dd6456038 R14: 00007f0dd6455fa0 R15: 00007ffc58d4d308 [ 138.193407][ T8305] [ 138.378214][ T8296] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 138.385991][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.385991][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.386053][ T8281] syz.5.1765: attempt to access beyond end of device [ 138.386053][ T8281] loop5: rw=8388608, sector=145, nr_sectors = 8 limit=128 [ 138.503284][ T8296] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 138.775590][ T297] buffer_io_error: 80 callbacks suppressed [ 138.775607][ T297] Buffer I/O error on dev loop5, logical block 336, lost async page write [ 138.910432][ T8324] FAULT_INJECTION: forcing a failure. [ 138.910432][ T8324] name failslab, interval 1, probability 0, space 0, times 0 [ 138.923125][ T8324] CPU: 0 UID: 0 PID: 8324 Comm: syz.5.1783 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.923168][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.923185][ T8324] Call Trace: [ 138.923193][ T8324] [ 138.923203][ T8324] __dump_stack+0x1d/0x30 [ 138.923233][ T8324] dump_stack_lvl+0x95/0xd0 [ 138.923254][ T8324] dump_stack+0x15/0x1b [ 138.923279][ T8324] should_fail_ex+0x265/0x280 [ 138.923366][ T8324] should_failslab+0x8c/0xb0 [ 138.923394][ T8324] __kmalloc_noprof+0xb9/0x5a0 [ 138.923420][ T8324] ? hash_ipportip6_add+0x8b8/0x1220 [ 138.923502][ T8324] hash_ipportip6_add+0x8b8/0x1220 [ 138.923589][ T8324] ? hash_ipportip6_add+0x59/0x1220 [ 138.923631][ T8324] hash_ipportip6_uadt+0x4d4/0x5d0 [ 138.923668][ T8324] ? __pfx_hash_ipportip6_add+0x10/0x10 [ 138.923765][ T8324] call_ad+0xdc/0x630 [ 138.923808][ T8324] ? __nla_parse+0x40/0x60 [ 138.923842][ T8324] ip_set_ad+0x5c0/0x690 [ 138.923888][ T8324] ip_set_uadd+0x41/0x50 [ 138.923912][ T8324] nfnetlink_rcv_msg+0x4c6/0x590 [ 138.924031][ T8324] netlink_rcv_skb+0x123/0x220 [ 138.924069][ T8324] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.924105][ T8324] nfnetlink_rcv+0x167/0x16c0 [ 138.924139][ T8324] ? __account_obj_stock+0x2d6/0x350 [ 138.924243][ T8324] ? xas_load+0x413/0x430 [ 138.924284][ T8324] ? xas_load+0x413/0x430 [ 138.924320][ T8324] ? __rcu_read_unlock+0x4f/0x70 [ 138.924340][ T8324] ? xa_load+0xb1/0xe0 [ 138.924408][ T8324] ? __account_obj_stock+0x211/0x350 [ 138.924439][ T8324] ? obj_cgroup_charge_account+0x122/0x1a0 [ 138.924503][ T8324] ? should_fail_ex+0x30/0x280 [ 138.924616][ T8324] ? should_fail_ex+0xdb/0x280 [ 138.924672][ T8324] ? selinux_nlmsg_lookup+0x99/0x890 [ 138.924699][ T8324] ? __rcu_read_unlock+0x34/0x70 [ 138.924733][ T8324] ? __netlink_lookup+0x266/0x2a0 [ 138.924851][ T8324] netlink_unicast+0x5c0/0x690 [ 138.924881][ T8324] netlink_sendmsg+0x58b/0x6b0 [ 138.924951][ T8324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.924993][ T8324] __sock_sendmsg+0x145/0x180 [ 138.925020][ T8324] ____sys_sendmsg+0x31e/0x4a0 [ 138.925069][ T8324] ___sys_sendmsg+0x17b/0x1d0 [ 138.925180][ T8324] __x64_sys_sendmsg+0xd4/0x160 [ 138.925219][ T8324] x64_sys_call+0x17ba/0x3000 [ 138.925317][ T8324] do_syscall_64+0xca/0x2b0 [ 138.925396][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.925424][ T8324] RIP: 0033:0x7f26ff43f749 [ 138.925447][ T8324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.925471][ T8324] RSP: 002b:00007f26fdea7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.925560][ T8324] RAX: ffffffffffffffda RBX: 00007f26ff695fa0 RCX: 00007f26ff43f749 [ 138.925576][ T8324] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 138.925590][ T8324] RBP: 00007f26fdea7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.925602][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.925614][ T8324] R13: 00007f26ff696038 R14: 00007f26ff695fa0 R15: 00007ffe294faee8 [ 138.925637][ T8324] [ 139.281311][ T8331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8331 comm=syz.5.1783 [ 139.332266][ T8324] EXT4-fs: Invalid want_extra_isize -2147483647 [ 139.657514][ T3393] hid-generic 0000:0000:0000.0024: hidraw0: HID v8.00 Device [syz0] on syz0 [ 139.734098][ T8347] 9p: Could not find request transport: f0x0000000000000005 [ 139.837363][ T8353] FAULT_INJECTION: forcing a failure. [ 139.837363][ T8353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.850532][ T8353] CPU: 0 UID: 0 PID: 8353 Comm: syz.5.1792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.850592][ T8353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.850604][ T8353] Call Trace: [ 139.850610][ T8353] [ 139.850617][ T8353] __dump_stack+0x1d/0x30 [ 139.850643][ T8353] dump_stack_lvl+0x95/0xd0 [ 139.850731][ T8353] dump_stack+0x15/0x1b [ 139.850752][ T8353] should_fail_ex+0x265/0x280 [ 139.850806][ T8353] should_fail+0xb/0x20 [ 139.850902][ T8353] should_fail_usercopy+0x1a/0x20 [ 139.851002][ T8353] _copy_from_user+0x1c/0xb0 [ 139.851033][ T8353] ucma_write+0xd9/0x250 [ 139.851063][ T8353] ? __pfx_ucma_write+0x10/0x10 [ 139.851183][ T8353] vfs_write+0x269/0x960 [ 139.851206][ T8353] ? __rcu_read_unlock+0x4f/0x70 [ 139.851299][ T8353] ? __fget_files+0x184/0x1c0 [ 139.851328][ T8353] ksys_write+0xda/0x1a0 [ 139.851353][ T8353] __x64_sys_write+0x40/0x50 [ 139.851376][ T8353] x64_sys_call+0x2847/0x3000 [ 139.851399][ T8353] do_syscall_64+0xca/0x2b0 [ 139.851473][ T8353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.851517][ T8353] RIP: 0033:0x7f26ff43f749 [ 139.851536][ T8353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.851652][ T8353] RSP: 002b:00007f26fdea7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.851676][ T8353] RAX: ffffffffffffffda RBX: 00007f26ff695fa0 RCX: 00007f26ff43f749 [ 139.851691][ T8353] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000003 [ 139.851707][ T8353] RBP: 00007f26fdea7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.851723][ T8353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.851738][ T8353] R13: 00007f26ff696038 R14: 00007f26ff695fa0 R15: 00007ffe294faee8 [ 139.851763][ T8353] [ 140.046777][ T8349] qrtr: Invalid version 0 [ 140.450823][ T8380] __nla_validate_parse: 13 callbacks suppressed [ 140.450839][ T8380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1804'. [ 140.514028][ T8387] set_capacity_and_notify: 9 callbacks suppressed [ 140.514047][ T8387] loop3: detected capacity change from 0 to 164 [ 140.533051][ T8387] iso9660: Unknown parameter '0xffffffffffffffff' [ 140.596040][ T8390] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1806'. [ 140.618241][ T8393] loop3: detected capacity change from 0 to 128 [ 140.633894][ T8393] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 140.654014][ T8393] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 140.665796][ T8393] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 140.674340][ T8393] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 140.683802][ T8393] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 140.694335][ T8393] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 140.703831][ T8393] Buffer I/O error on dev loop3, logical block 99, lost async page write [ 140.712626][ T8393] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 140.720941][ T8398] loop5: detected capacity change from 0 to 128 [ 140.723861][ T8393] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 140.736666][ T8397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'. [ 140.816721][ T8403] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1811'. [ 140.885323][ T8405] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1812'. [ 140.897113][ T8405] loop2: detected capacity change from 0 to 512 [ 140.934773][ T8405] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1812: error while reading EA inode 32 err=-116 [ 140.969519][ T8412] loop3: detected capacity change from 0 to 128 [ 140.995462][ T8405] EXT4-fs (loop2): Remounting filesystem read-only [ 141.002994][ T8414] loop5: detected capacity change from 0 to 512 [ 141.015561][ T8405] EXT4-fs (loop2): 1 orphan inode deleted [ 141.026701][ T8414] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1814: error while reading EA inode 32 err=-116 [ 141.039931][ T8405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.066978][ T8414] EXT4-fs (loop5): Remounting filesystem read-only [ 141.085965][ T8414] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 141.096179][ T8414] EXT4-fs (loop5): 1 orphan inode deleted [ 141.102440][ T8414] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.126253][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.163773][ T3852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.174385][ T8416] qrtr: Invalid version 0 [ 141.469977][ T8426] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1819'. [ 141.524737][ T8428] loop2: detected capacity change from 0 to 512 [ 141.546368][ T8428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.573614][ T8428] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.602300][ T8436] loop6: detected capacity change from 0 to 1024 [ 141.609304][ T8436] EXT4-fs: inline encryption not supported [ 141.637346][ T3431] Bluetooth: hci0: Frame reassembly failed (-84) [ 141.639016][ T8436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.660107][ T8441] loop5: detected capacity change from 0 to 128 [ 141.687213][ T8436] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.1823: Allocating blocks 385-513 which overlap fs metadata [ 141.884536][ T8447] loop5: detected capacity change from 0 to 512 [ 141.891250][ T8447] EXT4-fs: dax option not supported [ 142.102959][ T29] kauditd_printk_skb: 1514 callbacks suppressed [ 142.102973][ T29] audit: type=1326 audit(1766524851.620:47921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.114313][ T8459] qrtr: Invalid version 0 [ 142.132957][ T29] audit: type=1326 audit(1766524851.620:47922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.160950][ T29] audit: type=1326 audit(1766524851.620:47923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.184765][ T29] audit: type=1326 audit(1766524851.620:47924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.208223][ T29] audit: type=1326 audit(1766524851.620:47925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.231818][ T29] audit: type=1326 audit(1766524851.620:47926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.255413][ T29] audit: type=1326 audit(1766524851.620:47927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.279021][ T29] audit: type=1326 audit(1766524851.630:47928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.302557][ T29] audit: type=1326 audit(1766524851.630:47929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.326200][ T29] audit: type=1326 audit(1766524851.630:47930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8453 comm="syz.5.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 142.668414][ T8465] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1831'. [ 142.705834][ T8435] EXT4-fs (loop6): pa ffff8881073c6540: logic 16, phys. 129, len 24 [ 142.713892][ T8435] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 142.786089][ T8471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8471 comm=syz.3.1834 [ 142.854449][ T4575] hid_parser_main: 77 callbacks suppressed [ 142.854464][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.867836][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.875274][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.882978][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.890420][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.897972][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.905403][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.912884][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.920334][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.927789][ T4575] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 142.936019][ T4575] hid-generic 0000:0000:0000.0025: hidraw0: HID v8.00 Device [syz0] on syz0 [ 143.012818][ T8477] EXT4-fs: dax option not supported [ 143.184818][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1839'. [ 143.295068][ T7612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.314482][ T8486] bio_check_eod: 40825 callbacks suppressed [ 143.314496][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.314496][ T8486] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 143.339510][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.339510][ T8486] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 143.353552][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.353552][ T8486] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 143.371350][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.371350][ T8486] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 143.432162][ T8487] qrtr: Invalid version 0 [ 143.437943][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.437943][ T8486] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 143.455033][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.455033][ T8486] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 143.468968][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.468968][ T8486] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 143.483307][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.483307][ T8486] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 143.497243][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.497243][ T8486] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 143.511137][ T8486] syz.3.1842: attempt to access beyond end of device [ 143.511137][ T8486] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 143.645490][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 143.679456][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.841556][ T8513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1850'. [ 143.882421][ T8496] chnl_net:caif_netlink_parms(): no params data found [ 143.916747][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1851'. [ 143.987773][ T8496] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.994874][ T8496] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.036226][ T8496] bridge_slave_0: entered allmulticast mode [ 144.042909][ T8496] bridge_slave_0: entered promiscuous mode [ 144.050117][ T8496] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.057245][ T8496] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.064841][ T8496] bridge_slave_1: entered allmulticast mode [ 144.071565][ T8496] bridge_slave_1: entered promiscuous mode [ 144.180807][ T8532] qrtr: Invalid version 0 [ 144.197339][ T8496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.216850][ T8496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.248949][ T8496] team0: Port device team_slave_0 added [ 144.255719][ T8496] team0: Port device team_slave_1 added [ 144.274078][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.281107][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.307116][ T8496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.326621][ T4575] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 144.337768][ T8496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.344779][ T8496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.370766][ T8496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.382074][ T8539] sctp: [Deprecated]: syz.6.1857 (pid 8539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.382074][ T8539] Use struct sctp_sack_info instead [ 144.524322][ T8496] hsr_slave_0: entered promiscuous mode [ 144.532726][ T8496] hsr_slave_1: entered promiscuous mode [ 144.555515][ T8496] debugfs: 'hsr0' already exists in 'hsr' [ 144.561312][ T8496] Cannot create hsr debugfs directory [ 144.772298][ T8496] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 144.799581][ T8496] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 144.820148][ T8496] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 144.833361][ T8496] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 144.917141][ T8496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.935774][ T8565] IPVS: set_ctl: invalid protocol: 46 172.20.20.38:20000 [ 144.944328][ T8496] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.962955][ T7524] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.970164][ T7524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.997689][ T7524] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.004895][ T7524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.048990][ T8569] buffer_io_error: 81 callbacks suppressed [ 145.049068][ T8569] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 145.053662][ T8496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.082333][ T8569] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 145.103927][ T8569] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 145.115398][ T8569] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 145.127764][ T8571] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 145.136261][ T8569] Buffer I/O error on dev loop5, logical block 95, lost async page write [ 145.145804][ T8569] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 145.162367][ T8571] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 145.184202][ T8569] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 145.206306][ T8571] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 145.251392][ T8496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.482016][ T8496] veth0_vlan: entered promiscuous mode [ 145.491704][ T8496] veth1_vlan: entered promiscuous mode [ 145.539245][ T8496] veth0_macvtap: entered promiscuous mode [ 145.553403][ T8496] veth1_macvtap: entered promiscuous mode [ 145.561892][ T8604] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 145.572676][ T8604] SELinux: failed to load policy [ 145.600528][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.622319][ T8496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.643493][ T3601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.653629][ T3601] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.680456][ T3601] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.696296][ T8612] set_capacity_and_notify: 6 callbacks suppressed [ 145.696316][ T8612] loop6: detected capacity change from 0 to 128 [ 145.707701][ T3601] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.813553][ T8621] loop7: detected capacity change from 0 to 128 [ 145.902929][ T8626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.930325][ T3400] hid-generic 0000:0000:0000.0027: hidraw0: HID v8.00 Device [syz0] on syz0 [ 145.940849][ T8622] qrtr: Invalid version 0 [ 145.953609][ T8626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.023121][ T8626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.070135][ T8626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.087059][ T8639] loop7: detected capacity change from 0 to 164 [ 146.104105][ T8639] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 146.185267][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.197943][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.234255][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.258816][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.393718][ T8655] __nla_validate_parse: 1 callbacks suppressed [ 146.393738][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'. [ 146.442708][ T8639] loop7: detected capacity change from 0 to 512 [ 146.531782][ T8639] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 146.584837][ T8639] netlink: 'syz.7.1884': attribute type 1 has an invalid length. [ 146.594239][ T8639] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1884'. [ 146.613645][ T8660] loop2: detected capacity change from 0 to 128 [ 146.710848][ T3478] hid-generic 0000:0000:0000.0028: hidraw0: HID v8.00 Device [syz0] on syz0 [ 146.781466][ T8669] loop7: detected capacity change from 0 to 1024 [ 146.788376][ T8669] ext4: Unknown parameter 'subj_role' [ 146.820962][ T8669] netlink: 'syz.7.1898': attribute type 29 has an invalid length. [ 146.829825][ T8669] netlink: 'syz.7.1898': attribute type 29 has an invalid length. [ 146.841696][ T8669] netlink: 524 bytes leftover after parsing attributes in process `syz.7.1898'. [ 146.850861][ T8669] unsupported nla_type 58 [ 146.875754][ T8676] loop2: detected capacity change from 0 to 512 [ 146.896432][ T8676] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1901: error while reading EA inode 32 err=-116 [ 146.928993][ T8676] EXT4-fs (loop2): Remounting filesystem read-only [ 146.946226][ T8676] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 146.957238][ T8676] EXT4-fs (loop2): 1 orphan inode deleted [ 146.963512][ T8676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.976396][ T8676] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.099125][ T8694] loop3: detected capacity change from 0 to 512 [ 147.105959][ T8694] EXT4-fs: Ignoring removed i_version option [ 147.185234][ T29] kauditd_printk_skb: 1559 callbacks suppressed [ 147.185252][ T29] audit: type=1326 audit(1766524856.690:49490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 147.215125][ T29] audit: type=1326 audit(1766524856.690:49491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 147.238785][ T29] audit: type=1326 audit(1766524856.690:49492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 147.262359][ T29] audit: type=1326 audit(1766524856.690:49493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 147.286097][ T29] audit: type=1326 audit(1766524856.690:49494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8693 comm="syz.2.1908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 147.444406][ T8688] loop6: detected capacity change from 0 to 164 [ 147.473441][ T8694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.603160][ T8688] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 147.969965][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1913'. [ 147.989909][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 147.995053][ T29] audit: type=1400 audit(1766524857.080:49495): avc: denied { map } for pid=8700 comm="syz.7.1910" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 147.999163][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 148.088898][ T8713] loop6: detected capacity change from 0 to 512 [ 148.105543][ T8713] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 148.146063][ T8713] netlink: 'syz.6.1906': attribute type 1 has an invalid length. [ 148.153930][ T8713] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1906'. [ 148.187684][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 148.196746][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 148.248346][ T8710] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 148.355295][ T29] audit: type=1326 audit(1766524857.820:49496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 148.378873][ T29] audit: type=1326 audit(1766524857.820:49497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 148.402763][ T29] audit: type=1326 audit(1766524857.820:49498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 148.426449][ T29] audit: type=1326 audit(1766524857.820:49499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8721 comm="syz.2.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 148.463716][ T8727] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8727 comm=syz.5.1917 [ 148.604212][ T36] hid_parser_main: 109 callbacks suppressed [ 148.604231][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.617648][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.625100][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.690601][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.698152][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.705609][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.713010][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.720438][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.727874][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.735293][ T36] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 148.955518][ T36] hid-generic 0000:0000:0000.0029: hidraw0: HID v8.00 Device [syz0] on syz0 [ 149.149664][ T8738] bio_check_eod: 16145 callbacks suppressed [ 149.149683][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.149683][ T8738] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 149.177773][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.177773][ T8738] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 149.191280][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.191280][ T8738] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 149.194315][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.205976][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.205976][ T8738] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 149.227710][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.227710][ T8738] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 149.280548][ T8739] qrtr: Invalid version 0 [ 149.295552][ T1039] hid-generic 0000:0000:0000.002A: hidraw0: HID v8.00 Device [syz0] on syz0 [ 149.311134][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.311134][ T8738] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 149.355089][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.355089][ T8738] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 149.383907][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.383907][ T8738] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 149.408537][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.408537][ T8738] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 149.433397][ T8738] syz.7.1924: attempt to access beyond end of device [ 149.433397][ T8738] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 149.470320][ T8752] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 149.545514][ T8752] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.586081][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.678987][ T8756] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 149.846102][ T8775] Unable to read rock-ridge attributes [ 149.874376][ T8775] Unable to read rock-ridge attributes [ 149.880510][ T8775] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 149.889920][ T8775] Unable to read rock-ridge attributes [ 149.948643][ T8778] EXT4-fs: Ignoring removed orlov option [ 150.022286][ T8756] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 150.028137][ T8778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.146380][ T8756] netlink: 'syz.5.1931': attribute type 1 has an invalid length. [ 150.159809][ T4575] hid-generic 0000:0000:0000.002B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 150.265399][ T3393] hid-generic 0000:0000:0000.002C: hidraw1: HID v8.00 Device [syz0] on syz0 [ 150.660744][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.752211][ T8812] set_capacity_and_notify: 6 callbacks suppressed [ 150.752268][ T8812] loop3: detected capacity change from 0 to 128 [ 150.773374][ T8812] buffer_io_error: 110 callbacks suppressed [ 150.773392][ T8812] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 150.826723][ T8812] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 150.853114][ T8812] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 150.871971][ T8812] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 150.889620][ T8812] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 150.899842][ T8818] loop5: detected capacity change from 0 to 128 [ 150.915369][ T8818] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 150.928416][ T8812] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 150.937040][ T8818] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 150.956314][ T8818] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 150.973361][ T8812] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 151.309667][ T1039] hid-generic 0000:0000:0000.002D: hidraw0: HID v8.00 Device [syz0] on syz0 [ 151.426725][ T8837] loop7: detected capacity change from 0 to 1024 [ 151.446003][ T8837] EXT4-fs: Ignoring removed bh option [ 151.483228][ T8837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.550197][ T8849] loop2: detected capacity change from 0 to 128 [ 151.688518][ T8851] loop6: detected capacity change from 0 to 512 [ 151.702195][ T8496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.729811][ T8851] EXT4-fs (loop6): orphan cleanup on readonly fs [ 151.740133][ T8851] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1965: bg 0: block 248: padding at end of block bitmap is not set [ 151.777582][ T8851] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1965: Failed to acquire dquot type 1 [ 151.796450][ T8851] EXT4-fs (loop6): 1 truncate cleaned up [ 151.812910][ T8851] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.889803][ T8853] qrtr: Invalid version 0 [ 151.902986][ T8851] __nla_validate_parse: 11 callbacks suppressed [ 151.903062][ T8851] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1965'. [ 151.929226][ T8858] loop5: detected capacity change from 0 to 128 [ 152.029472][ T8860] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1968'. [ 152.221856][ T8867] loop7: detected capacity change from 0 to 512 [ 152.228544][ T8867] EXT4-fs: Ignoring removed i_version option [ 152.288818][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 152.288835][ T29] audit: type=1326 audit(1766524861.810:50204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 152.362902][ T8867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.504453][ T7612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.833624][ T8882] syzkaller1: entered promiscuous mode [ 152.839193][ T8882] syzkaller1: entered allmulticast mode [ 153.111534][ T29] audit: type=1326 audit(1766524861.840:50205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.135079][ T29] audit: type=1326 audit(1766524861.840:50206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.158618][ T29] audit: type=1326 audit(1766524861.840:50207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.182279][ T29] audit: type=1326 audit(1766524861.840:50208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.205838][ T29] audit: type=1326 audit(1766524861.840:50209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.229436][ T29] audit: type=1326 audit(1766524861.850:50210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.252942][ T29] audit: type=1326 audit(1766524861.850:50211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.276602][ T29] audit: type=1326 audit(1766524861.850:50212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.300247][ T29] audit: type=1326 audit(1766524861.850:50213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8848 comm="syz.2.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f61d1482005 code=0x7ffc0000 [ 153.538343][ T8889] SELinux: failed to load policy [ 153.622483][ T8894] loop5: detected capacity change from 0 to 512 [ 153.659214][ T8894] EXT4-fs: dax option not supported [ 153.697389][ T8899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1979'. [ 153.723063][ T8894] hub 9-0:1.0: USB hub found [ 153.733128][ T8894] hub 9-0:1.0: 8 ports detected [ 153.814507][ T8901] syz_tun: refused to change device tx_queue_len [ 153.846566][ T1039] hid_parser_main: 135 callbacks suppressed [ 153.846586][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.860134][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.867711][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.935472][ T8905] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1982'. [ 153.963329][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.970937][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.978563][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.986143][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 153.993552][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 154.001002][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 154.008499][ T1039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 154.085267][ T8908] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 154.144879][ T1039] hid-generic 0000:0000:0000.002E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 154.174546][ T8911] loop2: detected capacity change from 0 to 1024 [ 154.181684][ T8911] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 154.191470][ T8911] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 154.264386][ T8911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.283280][ T8496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.321404][ T8911] EXT4-fs: Ignoring removed orlov option [ 154.327213][ T8911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 154.344443][ T8911] EXT4-fs (loop2): can't enable nombcache during remount [ 154.362877][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.380234][ T8919] loop5: detected capacity change from 0 to 128 [ 154.417531][ T8919] bio_check_eod: 8382 callbacks suppressed [ 154.417550][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.417550][ T8919] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 154.462063][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.462063][ T8919] loop5: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 154.499147][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.499147][ T8919] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 154.523643][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.523643][ T8919] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 154.545645][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.545645][ T8919] loop5: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 154.559699][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.559699][ T8919] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 154.574128][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.574128][ T8919] loop5: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 154.588338][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.588338][ T8919] loop5: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 154.603778][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.603778][ T8919] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 154.618852][ T8919] syz.5.1987: attempt to access beyond end of device [ 154.618852][ T8919] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 154.744558][ T8936] EXT4-fs: Ignoring removed i_version option [ 154.753669][ T8936] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.892007][ T8941] EXT4-fs (loop7): 1 orphan inode deleted [ 154.905524][ T8884] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:14: Failed to release dquot type 1 [ 154.922695][ T8941] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.957819][ T8941] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.079555][ T8496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.313129][ T1039] hid-generic 0000:0000:0000.002F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 155.552808][ T8957] hub 6-0:1.0: USB hub found [ 155.567707][ T8957] hub 6-0:1.0: 8 ports detected [ 155.767821][ T8972] set_capacity_and_notify: 2 callbacks suppressed [ 155.767837][ T8972] loop5: detected capacity change from 0 to 128 [ 155.993245][ T8973] qrtr: Invalid version 0 [ 156.394826][ T8980] netlink: 'syz.6.2008': attribute type 4 has an invalid length. [ 156.474793][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.525046][ T36] hid-generic 0000:0000:0000.0030: hidraw0: HID v8.00 Device [syz0] on syz0 [ 156.614563][ T8994] loop3: detected capacity change from 0 to 1024 [ 156.623637][ T8994] EXT4-fs: Ignoring removed orlov option [ 156.649924][ T8994] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 156.688488][ T8994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.766545][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.836221][ T9010] loop3: detected capacity change from 0 to 128 [ 156.847011][ T9010] buffer_io_error: 107 callbacks suppressed [ 156.847029][ T9010] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 156.888277][ T9010] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 156.908282][ T9010] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 156.947376][ T9010] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 156.976288][ T9010] Buffer I/O error on dev loop3, logical block 95, lost async page write [ 157.025287][ T9010] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 157.041102][ T9019] can0: slcan on ttyS3. [ 157.067774][ T9010] Buffer I/O error on dev loop3, logical block 111, lost async page write [ 157.076751][ T9010] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 157.086850][ T9010] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 157.096972][ T9010] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 157.105655][ T9018] can0 (unregistered): slcan off ttyS3. [ 157.115086][ T3400] hid-generic 0000:0000:0000.0031: hidraw0: HID v8.00 Device [syz0] on syz0 [ 157.202021][ T9035] loop2: detected capacity change from 0 to 128 [ 157.212104][ T9033] loop5: detected capacity change from 0 to 128 [ 157.295333][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 157.295349][ T29] audit: type=1326 audit(1766524866.820:50793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9034 comm="syz.2.2027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61d144f749 code=0x7ffc0000 [ 157.352556][ T9031] loop6: detected capacity change from 0 to 164 [ 157.361925][ T29] audit: type=1326 audit(1766524866.860:50794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 157.385463][ T29] audit: type=1326 audit(1766524866.860:50795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f26ff43f783 code=0x7ffc0000 [ 157.408819][ T29] audit: type=1326 audit(1766524866.860:50796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f26ff43f807 code=0x7ffc0000 [ 157.432308][ T29] audit: type=1326 audit(1766524866.860:50797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26ff3f6bdd code=0x7ffc0000 [ 157.455790][ T29] audit: type=1326 audit(1766524866.860:50798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f26ff473e89 code=0x7ffc0000 [ 157.479302][ T29] audit: type=1326 audit(1766524866.860:50799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26ff3f6c47 code=0x7ffc0000 [ 157.502853][ T29] audit: type=1326 audit(1766524866.860:50800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f26ff3f6357 code=0x7ffc0000 [ 157.526548][ T29] audit: type=1326 audit(1766524866.860:50802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26ff43f749 code=0x7ffc0000 [ 157.550066][ T29] audit: type=1326 audit(1766524866.860:50801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9032 comm="syz.5.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f26ff3f63b6 code=0x7ffc0000 [ 157.583491][ T9031] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 157.775313][ T9037] qrtr: Invalid version 0 [ 157.799440][ T9031] loop6: detected capacity change from 0 to 512 [ 157.807604][ T9036] qrtr: Invalid version 0 [ 157.812025][ T9031] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 157.903862][ T9031] netlink: 'syz.6.2028': attribute type 1 has an invalid length. [ 157.915133][ T9031] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2028'. [ 158.028927][ T9052] loop6: detected capacity change from 0 to 128 [ 158.044370][ T9052] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 158.066710][ T9052] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 158.116575][ T9052] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 158.187850][ T9055] loop3: detected capacity change from 0 to 128 [ 158.194643][ T9055] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.207718][ T9055] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.247419][ T9065] loop2: detected capacity change from 0 to 512 [ 158.257686][ T9065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 158.269098][ T9065] EXT4-fs (loop2): 1 truncate cleaned up [ 158.275737][ T9065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.302385][ T7612] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.323684][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.355398][ T9072] EXT4-fs: Ignoring removed oldalloc option [ 158.368420][ T9072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.386397][ T9072] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.508753][ T9085] FAULT_INJECTION: forcing a failure. [ 158.508753][ T9085] name failslab, interval 1, probability 0, space 0, times 0 [ 158.521568][ T9085] CPU: 0 UID: 0 PID: 9085 Comm: syz.7.2045 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.521670][ T9085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.521686][ T9085] Call Trace: [ 158.521695][ T9085] [ 158.521754][ T9085] __dump_stack+0x1d/0x30 [ 158.521795][ T9085] dump_stack_lvl+0x95/0xd0 [ 158.521824][ T9085] dump_stack+0x15/0x1b [ 158.521849][ T9085] should_fail_ex+0x265/0x280 [ 158.521926][ T9085] should_failslab+0x8c/0xb0 [ 158.521954][ T9085] __kmalloc_cache_noprof+0x65/0x4c0 [ 158.521986][ T9085] ? rxrpc_lookup_local+0x2a3/0xc70 [ 158.522016][ T9085] rxrpc_lookup_local+0x2a3/0xc70 [ 158.522046][ T9085] ? _raw_spin_lock_bh+0x56/0xb0 [ 158.522151][ T9085] ? _raw_spin_unlock_bh+0x36/0x40 [ 158.522218][ T9085] ? lock_sock_nested+0x112/0x140 [ 158.522240][ T9085] rxrpc_sendmsg+0x2f3/0x590 [ 158.522264][ T9085] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 158.522287][ T9085] __sock_sendmsg+0x145/0x180 [ 158.522356][ T9085] ____sys_sendmsg+0x31e/0x4a0 [ 158.522457][ T9085] ___sys_sendmsg+0x17b/0x1d0 [ 158.522506][ T9085] __x64_sys_sendmsg+0xd4/0x160 [ 158.522548][ T9085] x64_sys_call+0x17ba/0x3000 [ 158.522579][ T9085] do_syscall_64+0xca/0x2b0 [ 158.522754][ T9085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.522788][ T9085] RIP: 0033:0x7f923df4f749 [ 158.522803][ T9085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.522824][ T9085] RSP: 002b:00007f923c9b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.522848][ T9085] RAX: ffffffffffffffda RBX: 00007f923e1a5fa0 RCX: 00007f923df4f749 [ 158.522941][ T9085] RDX: 0000000024008800 RSI: 0000200000000080 RDI: 0000000000000005 [ 158.522956][ T9085] RBP: 00007f923c9b7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.523032][ T9085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.523044][ T9085] R13: 00007f923e1a6038 R14: 00007f923e1a5fa0 R15: 00007ffea27ba308 [ 158.523065][ T9085] [ 158.524566][ T9081] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.2041: Freeing blocks not in datazone - block = 0, count = 16 [ 158.752655][ T9083] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 158.794515][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 158.803797][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 158.827215][ T9094] binfmt_misc: register: failed to install interpreter file ./file0 [ 158.828675][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 158.844410][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 158.880748][ T9100] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm wg1: invalid block [ 158.897790][ T9100] EXT4-fs (loop3): Remounting filesystem read-only [ 158.913302][ T9100] EXT4-fs (loop3): 2 truncates cleaned up [ 158.919965][ T9100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.954679][ T9100] 9p: Bad value for 'rfdno' [ 158.976437][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 158.985590][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2050'. [ 159.031582][ T9083] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 159.061668][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.107831][ T7524] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 159.108593][ T9114] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 159.133201][ T7524] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 159.146795][ T7524] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.146795][ T7524] [ 159.182461][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 159.192967][ T9114] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.193560][ T9117] tipc: Started in network mode [ 159.208446][ T9117] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 159.227328][ T9117] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 159.229770][ T8496] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 159.236704][ T9117] tipc: Enabled bearer , priority 10 [ 159.347972][ T9127] veth2: entered promiscuous mode [ 159.353535][ T9127] veth2: entered allmulticast mode [ 159.485825][ T9134] bio_check_eod: 12370 callbacks suppressed [ 159.485845][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.485845][ T9134] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 159.505809][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.505809][ T9134] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 159.521082][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.521082][ T9134] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 159.534982][ T9131] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 159.543098][ T9131] EXT4-fs (loop2): orphan cleanup on readonly fs [ 159.550846][ T9131] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.2058: corrupted inode contents [ 159.563204][ T9131] EXT4-fs (loop2): Remounting filesystem read-only [ 159.570237][ T9131] EXT4-fs (loop2): 1 truncate cleaned up [ 159.576062][ T3427] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.586659][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.586659][ T9134] loop6: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 159.586661][ T3427] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 159.612588][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.612588][ T9134] loop6: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 159.626501][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.626501][ T9134] loop6: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 159.640952][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.640952][ T9134] loop6: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 159.655143][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.655143][ T9134] loop6: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 159.693120][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.693120][ T9134] loop6: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 159.708044][ T9134] syz.6.2059: attempt to access beyond end of device [ 159.708044][ T9134] loop6: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 159.711385][ T3427] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 159.758880][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 159.947834][ T9149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.972598][ T9149] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.073200][ T36] hid_parser_main: 106 callbacks suppressed [ 160.073292][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.086778][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.094187][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.116443][ T9149] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.125698][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.133164][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.140643][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.148111][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.155550][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.163022][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.170551][ T36] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 160.179066][ T36] hid-generic 0000:0000:0000.0032: hidraw0: HID v8.00 Device [syz0] on syz0 [ 160.369147][ T3393] tipc: Node number set to 1 [ 160.410708][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.471749][ T9191] tmpfs: Too few inodes for current use [ 160.504440][ T36] hid-generic 0000:0000:0000.0033: hidraw0: HID v8.00 Device [syz0] on syz0 [ 160.542789][ T9197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2080'. [ 160.610568][ T9204] proc: Unknown parameter '—á@' [ 160.629969][ T9204] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 160.639547][ T9204] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.657144][ T9197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.698015][ T9204] FAT-fs (loop3): FAT read failed (blocknr 128) [ 160.734058][ T7612] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.777912][ T9217] set_capacity_and_notify: 12 callbacks suppressed [ 160.777928][ T9217] loop6: detected capacity change from 0 to 128 [ 161.014029][ T9227] bridge: RTM_NEWNEIGH with invalid state 0x3d [ 161.022440][ T9227] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2089'. [ 161.257903][ T9220] qrtr: Invalid version 0 [ 161.525404][ T36] hid-generic 0000:0000:0000.0034: hidraw0: HID v8.00 Device [syz0] on syz0 [ 161.595301][ T9242] loop2: detected capacity change from 0 to 1024 [ 161.627641][ T9242] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 161.646436][ T9242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.713222][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.790080][ T9271] netlink: 'syz.6.2102': attribute type 10 has an invalid length. [ 161.822384][ T9271] team0: Failed to send options change via netlink (err -105) [ 161.829985][ T9271] team0: Port device dummy0 added [ 161.850479][ T9273] loop2: detected capacity change from 0 to 512 [ 161.857044][ T9273] EXT4-fs: Ignoring removed i_version option [ 161.863836][ T9271] netlink: 'syz.6.2102': attribute type 10 has an invalid length. [ 161.866220][ T9275] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 161.880676][ T9271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 161.881348][ T9273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.902439][ T9271] team0: Failed to send options change via netlink (err -105) [ 161.917956][ T9275] loop3: detected capacity change from 0 to 512 [ 161.926710][ T9271] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 161.956524][ T9275] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.971625][ T9271] team0: Port device dummy0 removed [ 161.978859][ T9275] EXT4-fs (loop3): mount failed [ 162.002984][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2108'. [ 162.013324][ T9271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 162.153952][ T9293] loop6: detected capacity change from 0 to 128 [ 162.317716][ T29] kauditd_printk_skb: 1621 callbacks suppressed [ 162.317734][ T29] audit: type=1326 audit(1766524872.840:52417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923df4f749 code=0x7ffc0000 [ 162.352785][ T9296] qrtr: Invalid version 0 [ 162.388206][ T29] audit: type=1326 audit(1766524872.840:52418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f923df4f749 code=0x7ffc0000 [ 162.411712][ T29] audit: type=1326 audit(1766524872.840:52419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923df4f749 code=0x7ffc0000 [ 162.435424][ T29] audit: type=1326 audit(1766524872.840:52420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.7.2109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f923df4f749 code=0x7ffc0000 [ 162.459160][ T29] audit: type=1326 audit(1766524872.870:52421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.482688][ T29] audit: type=1326 audit(1766524872.870:52422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.506179][ T29] audit: type=1326 audit(1766524872.870:52423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.529786][ T29] audit: type=1326 audit(1766524872.870:52424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.553378][ T29] audit: type=1326 audit(1766524872.870:52425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.576959][ T29] audit: type=1326 audit(1766524872.870:52426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9290 comm="syz.6.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dd61ff749 code=0x7ffc0000 [ 162.629401][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.751329][ T9301] loop2: detected capacity change from 0 to 128 [ 162.758816][ T9301] EXT4-fs: Ignoring removed nobh option [ 162.766687][ T9301] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.779252][ T9301] ext4 filesystem being mounted at /396/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 162.948474][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.959124][ T9313] FAULT_INJECTION: forcing a failure. [ 162.959124][ T9313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.972319][ T9313] CPU: 1 UID: 0 PID: 9313 Comm: syz.3.2117 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.972422][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.972434][ T9313] Call Trace: [ 162.972440][ T9313] [ 162.972448][ T9313] __dump_stack+0x1d/0x30 [ 162.972477][ T9313] dump_stack_lvl+0x95/0xd0 [ 162.972505][ T9313] dump_stack+0x15/0x1b [ 162.972582][ T9313] should_fail_ex+0x265/0x280 [ 162.972606][ T9313] should_fail+0xb/0x20 [ 162.972625][ T9313] should_fail_usercopy+0x1a/0x20 [ 162.972648][ T9313] _copy_to_user+0x20/0xa0 [ 162.972723][ T9313] simple_read_from_buffer+0xb5/0x130 [ 162.972751][ T9313] proc_fail_nth_read+0x10e/0x150 [ 162.972785][ T9313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.972840][ T9313] vfs_read+0x1a8/0x770 [ 162.972857][ T9313] ? __rcu_read_unlock+0x4f/0x70 [ 162.972876][ T9313] ? __fget_files+0x184/0x1c0 [ 162.972924][ T9313] ? mutex_lock+0x58/0x90 [ 162.972960][ T9313] ksys_read+0xda/0x1a0 [ 162.972986][ T9313] __x64_sys_read+0x40/0x50 [ 162.973010][ T9313] x64_sys_call+0x2889/0x3000 [ 162.973042][ T9313] do_syscall_64+0xca/0x2b0 [ 162.973164][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.973185][ T9313] RIP: 0033:0x7f5c2919e15c [ 162.973199][ T9313] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.973218][ T9313] RSP: 002b:00007f5c27bff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.973277][ T9313] RAX: ffffffffffffffda RBX: 00007f5c293f5fa0 RCX: 00007f5c2919e15c [ 162.973289][ T9313] RDX: 000000000000000f RSI: 00007f5c27bff0a0 RDI: 0000000000000006 [ 162.973300][ T9313] RBP: 00007f5c27bff090 R08: 0000000000000000 R09: 0000000000000000 [ 162.973317][ T9313] R10: 0000000000000180 R11: 0000000000000246 R12: 0000000000000001 [ 162.973332][ T9313] R13: 00007f5c293f6038 R14: 00007f5c293f5fa0 R15: 00007fff69361898 [ 162.973363][ T9313] [ 163.318665][ T9330] loop3: detected capacity change from 0 to 1024 [ 163.336975][ T9333] pim6reg1: entered promiscuous mode [ 163.342508][ T9333] pim6reg1: entered allmulticast mode [ 163.376573][ T9330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.404900][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.499890][ T9354] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2135'. [ 163.566824][ T9361] loop2: detected capacity change from 0 to 512 [ 163.575799][ T7456] ================================================================== [ 163.584028][ T7456] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 163.586666][ T9361] EXT4-fs: Ignoring removed i_version option [ 163.590652][ T7456] [ 163.590658][ T7456] write to 0xffff888149e10010 of 152 bytes by interrupt on cpu 1: [ 163.596929][ T9361] EXT4-fs: Ignoring removed bh option [ 163.599084][ T7456] __bpf_get_stackid+0x737/0x7d0 [ 163.617219][ T7456] bpf_get_stackid+0xf3/0x130 [ 163.621933][ T7456] bpf_get_stackid_raw_tp+0xf6/0x120 [ 163.627286][ T7456] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 163.632768][ T7456] bpf_trace_run3+0x10f/0x1e0 [ 163.637480][ T7456] kmem_cache_free+0x327/0x3a0 [ 163.642278][ T7456] skb_free_head+0x87/0x150 [ 163.646815][ T7456] skb_release_data+0x33b/0x370 [ 163.651690][ T7456] __kfree_skb+0x44/0x150 [ 163.656046][ T7456] sk_skb_reason_drop+0xbd/0x270 [ 163.661018][ T7456] inet_sock_destruct+0x18d/0x440 [ 163.666072][ T7456] inet6_sock_destruct+0x1d/0x30 [ 163.671052][ T7456] udpv6_destruct_sock+0x1d/0x30 [ 163.676020][ T7456] __sk_destruct+0x58/0x500 [ 163.680553][ T7456] rcu_core+0x544/0xc40 [ 163.684727][ T7456] rcu_core_si+0xd/0x20 [ 163.688914][ T7456] handle_softirqs+0xba/0x290 [ 163.693623][ T7456] run_ksoftirqd+0x1c/0x30 [ 163.698108][ T7456] smpboot_thread_fn+0x32b/0x530 [ 163.703082][ T7456] kthread+0x489/0x510 [ 163.707188][ T7456] ret_from_fork+0x149/0x290 [ 163.711803][ T7456] ret_from_fork_asm+0x1a/0x30 [ 163.716596][ T7456] [ 163.718935][ T7456] read to 0xffff888149e10028 of 8 bytes by task 7456 on cpu 0: [ 163.726580][ T7456] bcmp+0x23/0x90 [ 163.730237][ T7456] __bpf_get_stackid+0x382/0x7d0 [ 163.735198][ T7456] bpf_get_stackid+0xf3/0x130 [ 163.739934][ T7456] bpf_get_stackid_raw_tp+0xf6/0x120 [ 163.745246][ T7456] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 163.750728][ T7456] bpf_trace_run3+0x10f/0x1e0 [ 163.755441][ T7456] kmem_cache_free+0x327/0x3a0 [ 163.760229][ T7456] __io_req_caches_free+0xfe/0x210 [ 163.765369][ T7456] io_req_caches_free+0x1f/0x60 [ 163.770264][ T7456] io_ring_exit_work+0x23b/0x520 [ 163.775225][ T7456] process_scheduled_works+0x4ce/0x9d0 [ 163.780710][ T7456] worker_thread+0x582/0x770 [ 163.785326][ T7456] kthread+0x489/0x510 [ 163.789428][ T7456] ret_from_fork+0x149/0x290 [ 163.794059][ T7456] ret_from_fork_asm+0x1a/0x30 [ 163.798844][ T7456] [ 163.801184][ T7456] value changed: 0xffffffff81224fbe -> 0xffffffff84554e47 [ 163.808298][ T7456] [ 163.810635][ T7456] Reported by Kernel Concurrency Sanitizer on: [ 163.816796][ T7456] CPU: 0 UID: 0 PID: 7456 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.826794][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 163.836864][ T7456] Workqueue: iou_exit io_ring_exit_work [ 163.842530][ T7456] ================================================================== [ 163.913046][ T9361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.930406][ T9361] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.967480][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.