last executing test programs: 1m59.254256001s ago: executing program 4 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000140)={{0x1, 0x0, 0x9, 0x0, 0xcef}}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000040)={[{@delalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7bf}}]}, 0x1, 0x56e, &(0x7f0000000640)="$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") mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1m59.134115232s ago: executing program 4 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) wait4(r1, &(0x7f0000000040), 0x2, &(0x7f0000000380)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) socket(0x2c, 0x2, 0x9) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m59.104038185s ago: executing program 4 (id=262): socket$inet(0x2, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e28}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) epoll_create1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2100, 0x0) lseek(r5, 0x4000006, 0x1) getdents(r5, 0x0, 0x58) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000080)="89", 0x1) 1m58.985923086s ago: executing program 4 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) io_uring_setup(0x46ec, &(0x7f0000000080)={0x0, 0x622b, 0x4000, 0x1, 0x1b7}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000a2c5fdefe65250efda0da98e7602c2d2af50bcaca88cb4b07f451b8bbe0c5d108c51a42f6aaa9f7f0065282f024aa47b3b2b25d7051ef628eae42d8a6f5ceb1100485f8900915af4af21a78ee1ed52a2991058dd5af5c229c56da0d44b2fc5bd8b4284483703b52cc640fa13c918db12de80fad01f6c03a63e21d11ae4558031a568c5c5abded2828a404759079d37ee90be8e574faaf105f5f232a99b509dc47520f2e83d1d066a39", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00068008000600ffffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) unshare(0x22020600) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r5 = io_uring_setup(0x5597, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x1, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000d40)=""/4111, 0x1030}], &(0x7f0000000200), 0x1}, 0x20) 1m58.959499469s ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000540)='workqueue_activate_work\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) 1m58.717621112s ago: executing program 4 (id=266): poll(&(0x7f0000000040), 0x55, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0xd, [0x3, 0x20000000000002, 0x0, 0x1003, 0x2, 0x7ff], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=""/13}, &(0x7f0000000100)=0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r3, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 1m44.430679254s ago: executing program 32 (id=266): poll(&(0x7f0000000040), 0x55, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0xd, [0x3, 0x20000000000002, 0x0, 0x1003, 0x2, 0x7ff], 0x8, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000000)=""/13}, &(0x7f0000000100)=0x78) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r3, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001005000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01c21668f6d1d66edb251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) 1m42.211784752s ago: executing program 1 (id=602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a31000000000800"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m42.105384412s ago: executing program 1 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x3e}}}}, ["", "", "", "", ""]}, 0x20}}, 0x8080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1m41.252793486s ago: executing program 1 (id=617): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1m41.01165979s ago: executing program 1 (id=623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) listen(r1, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x0) 1m40.576318973s ago: executing program 1 (id=632): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000080)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m40.557471654s ago: executing program 1 (id=633): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x713, &(0x7f0000001a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m26.205562292s ago: executing program 33 (id=633): signalfd(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x713, &(0x7f0000001a80)="$eJzs3V2P21gZB/D/STJJJmWrClC1qrqd0ykrTcWQOpltqqggYZyTjCGJI9sDMxLSqtAZNGqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBLaFQgZ+djOezLJdKZT2P9v1Nqxn3P8+KU+dcY+BhEREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREREUFYNcMoCTTt9s6unM2quU4r+ZDGxPyothXcjkZuz1vmSrhcQIR/kM/j7Wjy218ehFwN/1rH9ejTdeTDQR69S1ev3P9SJpWUn5PwaWDZCp8+7z160O3uP1kgNo2lq79ISC0Q1FBt23PsltlQ0vYcWa1UjDvbdU/W7aby9jxftaTlqpTvuHLDui1L1eqWVMU9Z6fdqJlNlUy897WyYVTkt3PRjgZQ9Kxtu9m02w0dE84OY+7JD74fBSizJeXBYXd/ayifF9O2cRhUmpJ8ajg4DCqftLplo1wulcrlUuVu9e49w8hMTDBCwujDRMSZH7R0kVLx8bpEkbM7eRO9opRV+7fxJwE0kUcbO9iFnPpjoQYXDloz5seS9v/dO2rucofb/6SVXxnMvgbd/t+IPt2Y1f7PyEVC6gLT5ogZ05f7WdEZSTzFc/TwCA/QRRf7eNKPeCtek1PVv3bC/OyJ9WaNV1k+JPILRTWg0IYNDw5stGCigbcg4ykSVVRQgYH3sY06PEjUYaMJBQ978OBDhUdUNsxUwYQPBy4kNmDhNiRKqKKKLUgoFLEHBztoo4EaTHwaBMEBDvV234rzeTllrZEElWasRA6Z5LjbR3nO2s5q/3/wIiodt/8G2//Pq+g4yEWDj+fFEL0Bgvj6f0lr55MNEREREREREZ0Hob99F/q38u8ACFC3m8oYicldWHZEREREREREdBYEghyuQ0R35eMdiMnrfyIiIiIiIiL63yb0M3YCQEHf1C8Gj0vN/RIgPTIgIiIiIiIiojeZfvL/RhYI9F3+axCLXf9H8uefIBERERERERG9sl8N9bGfScd97AbJr/VTANb+nBMf/S0Hd0Ucd3a/Io7McI55NOsOAL9+TVyOO+rVgywA/clS10W8NAn8M/n2IfTJwfS+/l8GESGEO5ZANj1cwYwERLjkSib+hA9wMypyM/7m4mEvBT0n6lG4ULebqmg5zfslmObllK92/Z89Pvw54PbX8+Cwu1/84Y+7D3Uux+Gk46Ow0hcj6aSmb4xBLs90fwv6mYtpvRuvop4s8tftVkHo5RrJ+qdhHqWGFzRvB1RWgWgtf4H1aJ+tB1Fsodf/DkcAa7rzh1JR77KRtXdXxCCL0viaT9sRM9Y8r7O4FcXc2rgVDZJtEtaTEvmvpoFycXwfhIkOZVEezuLkbSH+Prb952cBkQ+3xVaYxR/Cisa2xfc+igpvdXaT7jEWyWLiKCAiuigHg1ZId2I+0cd+0jwkJ7XF2x1kgPgsN6N1HywliNuPpHV/9tsgaqHSQCb+3cT0pSTtCsIz+obQ9WSjDt0z16ac0Y3iZ0EQmJfzGD6j/ycIkhUylmjdjoMgGD+j/37wDqQ47Yks/hUEwf2Sbkl+M9aqfhgW+HDmcr1mOY08cnh29BN8msze/9H+43J5q2K8Zxh3y1jR/1WIB2mw7SEiogknv2NHR6TmRIj3cDOq4+bDv74bjY20eF+MbynQ7gBdPMRm8gqBtem1FnCAb/wjug1hM7pqBdYL0bDQk1ev3A+vavuxhyKj3/CyOfOqTjeWUay+vaHcj03eOzR+BTiI3TrnvUBERPR6rc9oh4GR9h+j7X9+pP3fxEYUsXFt6nV3YeiWws3k6rh/Sd+7dDw1tnRy8t88441BRET0OaHcT0TB/6VwXbvzfqlaLZn+tpKuY31HunatoaTd9pVrbZvthpId1/Edy2nKjoucvao86e10Oo7ry7rjyo7j2bv6ze8yfvW7p1pm27ctr9NUpqek5bR90/JlzfYs2dn5VtP2tpWrC3sdZdl12zJ922lLz9lxLVWU0lNqKNCuqbZv1+1wtC07rt0y3T35Xae501KypjzLtTu+E1WYLMtu1x23pastIlj6RYdERET/j54+7z160O3uPxkfWQ0vzaMpx5gRMzmSnVIh+wgiIiJ6wwya6yUK8bF/IiIiIiIiIiIiIiIiIiIiIiIiIiIiIqLX6uRH+pYcWZn2sCDQn/LTy/EUvMTgEcOJegReNZ/P3D/qjv1OUzzVnyIALFAqeSSi9+jjOcGr/SnJ5h+OOV4mQ1wBTr19/vIF4JKegmhK5gwPgMnnR09RPOn5ePFSXz+ISsyK0TOnzsr190Xm7P85hCOPfzc5S4RbPgiCYH7x3Og2zC5+PGcAPMnO2QWrJxw/r/U0REQX4L8BAAD//wrpK8g=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x2000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000000306010200000000008000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 22.821672351s ago: executing program 2 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 22.768422126s ago: executing program 2 (id=1791): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r4) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x6, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2004010}, 0x8800) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x16}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x22}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x58}]}, 0x44}, 0x1, 0x0, 0x0, 0x80a0}, 0x44000) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xfc360f56fdff196e}]}, 0x54}, 0x1, 0x0, 0x0, 0x804}, 0x4c0d0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r8) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000c1}, 0x40004000) 22.613792521s ago: executing program 2 (id=1796): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fbffffff0000000000f6ff9400000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='rpcgss_svc_seqno_low\x00', r0, 0x0, 0xfffffffffffffff7}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 22.613276271s ago: executing program 2 (id=1798): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0xc, 0x0, {r0}}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0), 0x77089d59ac2baf51, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x6}}, {@uid={'uid', 0x3d, r1}}], [{@smackfsfloor}, {@audit}, {@fsname={'fsname', 0x3d, '&!#'}}, {@fowner_gt={'fowner>', 0xee01}}]}) 22.487800943s ago: executing program 2 (id=1800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x800700, &(0x7f0000000400)={[{@resuid}, {@bsdgroups}, {@grpjquota}, {@nojournal_checksum}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x7fffffff}}, {@nombcache}]}, 0x3, 0x49e, &(0x7f0000000c80)="$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") 20.876696762s ago: executing program 2 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000400b5ba5761e7cbed247767ca000000b7080000000000007b8af8ff000000bfa247f665b5000007020000f8ffffffb70300005622a214eefaa8810000000085000000030000009500090000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={@empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf139, 0x4, 0x2, 0x400, 0x6, 0x8}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000000)="c8b5", 0x2) sendfile(r4, r3, 0x0, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20900, 0x64, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x40}}, 0x0) 20.858598483s ago: executing program 34 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000400b5ba5761e7cbed247767ca000000b7080000000000007b8af8ff000000bfa247f665b5000007020000f8ffffffb70300005622a214eefaa8810000000085000000030000009500090000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={@empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf139, 0x4, 0x2, 0x400, 0x6, 0x8}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000000)="c8b5", 0x2) sendfile(r4, r3, 0x0, 0x40001) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x20900, 0x64, '\x00', 0x0, @fallback=0x2f, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x40}}, 0x0) 2.884810647s ago: executing program 3 (id=2023): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_io_uring_setup(0x4ea0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x3e}}}}, ["", "", "", "", ""]}, 0x20}}, 0x8080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x2c060000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 2.13967147s ago: executing program 5 (id=2041): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0xfffffff9, 0x4) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x102, 0x0) r1 = dup(r0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'team_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000ac0)={'syztnl1\x00', r5, 0x7, 0x718, 0x4, 0x2, {{0x2d, 0x4, 0x1, 0x8, 0xb4, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xcf, 0x3, 0x1, [{@loopback, 0x401}]}, @ssrr={0x89, 0x0, 0x1, [@broadcast, @multicast2]}, @cipso={0x86, 0x10, 0x3, [{0x7, 0x5, "5769d8"}, {0x6, 0x5, "591a90"}, {0x0, 0x0, "59028d6b3107f87f24d8d983"}]}, @ra, @end, @lsrr={0x83, 0xb, 0xbe, [@private=0xa010102, @multicast2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x6, 0x1, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x10, 0x5, 0x6}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac"], 0x70}, 0x1, 0x0, 0x0, 0x40880}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000a80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x1b8, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0xa4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.608490092s ago: executing program 3 (id=2045): setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) mlockall(0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x6c, 0x12, 0x905, 0x70bd2d, 0x25dfdbfb, {0xa, 0x9, 0x4, 0x0, {0x4e22, 0x4e66, [0xfffffffb, 0x7, 0x1, 0x6], [0x1, 0x5, 0x21, 0x2], 0x0, [0xa, 0x1000]}, 0x6, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x20, 0x1, "0891320c0ac9e7a4c6922f2e1f6c071d4914abfaafc08e7a4f000000"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x26000001}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setresuid(0x0, 0xee00, 0x0) io_setup(0x20, &(0x7f0000001140)) 1.468438666s ago: executing program 3 (id=2047): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='nv', 0x2) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x282000, 0x240) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) 1.443083458s ago: executing program 3 (id=2048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x8, 0x4, 0x4009, 0xa}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb68a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfffe, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = socket(0x2a, 0x800000002, 0x7) ioctl$SIOCPNENABLEPIPE(r2, 0x5411, 0x1000000000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000000000)={0x14, r5, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) fspick(r6, &(0x7f00000001c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$ITER_CREATE(0xb, 0x0, 0x0) 1.308953691s ago: executing program 5 (id=2050): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x40}}, 0x0) 1.233702659s ago: executing program 6 (id=2052): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.233162229s ago: executing program 0 (id=2054): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00') pread64(r1, 0x0, 0x0, 0x1000000300) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100030a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) 1.206661211s ago: executing program 0 (id=2055): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x3, 'veth0_vlan\x00', {0x6}, 0x8001}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r2, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e24, 0xa1e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3d}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)='g', 0x1}], 0x1}}], 0x3, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r4}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}]}]}, 0x28}}, 0x0) 1.154703106s ago: executing program 5 (id=2056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='kfree\x00', r1}, 0xffffffffffffff48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000340)=""/213) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000001d2a0000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000000c0)=ANY=[]) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') lseek(r7, 0x2000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000280)=0x0) sendmsg$kcm(r7, &(0x7f00000008c0)={&(0x7f0000000600)=@nfc={0x27, r9, 0x1, 0x2}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000680)="d7b52518dd4be9314d988b47c52c531ddabaac33d468b39973251276343aec788a1ebd575617567e1447395497769a6e75cf525816ff48c5f42d524c22e4f4973e034a887de6747cf50a2b1c5989736af40cb229713c8bbc867e2064cf7a5cfafd2ac7002ac79d77626d83bc8553412f0d3b628b13196ffa9418", 0x7a}, {&(0x7f0000000500)="fb395c6deb3fbf474beaeed67f74aa2cfb6bb2effb4b17db84", 0x19}, {&(0x7f0000000700)="33739980a633caf93d2a84dd8fea6a370faf6dc30361a219e29b224fd393ab54616e83031f4e763d4d5ce3ddc7bfabdd951a1aaa2f618a9e5b3007836512b65bc2f4dd1f022383aa90925ccf498f54b11504700abfb46cc1c9f5540897a7553611d639783a0f952bcd6a40d9be65c2981bd98b5a6bfe335f20da6ec04c45b876808f3092abc8c159e020ecda74665e0a5e4ac92f142fb37818373efcbeb1a2c60f1cbf5f27528897b5ec1d446d280242f9c339c8", 0xb4}, {&(0x7f00000007c0)="455f192e942b987139ffe11c0cfac9efd312709603ecb6da54a28b9298ee303e68e79e175ee75346732c68311771a92d82e728cae6975470885469de83ae3848e9fc5a3ce815fe3bb743f904128966f01cb09db8348cbcc02cebad4f02d01d960078e3f9b107acb36975578296702bf96adf0e25c5c2c3d590b6ef810f6f449408df4c7cbdf7679ba0bdd43768f53d8f7f2775e54646d7c87b713efb82ff63117696a7be96a242a160c0906fba6fce79", 0xb0}], 0x4, &(0x7f0000000f80)=[{0x10, 0x118, 0x8}, {0xa0, 0x103, 0x40, "938aeb82227dfc2903524ec073fa47e55325ac2e229167e54e5400866dc38bd28b9fff409f3b58ba7a60ef08e4c9bf3a8c2b21a6a68ffca2145fd446516e875e3b0d998ec56b42666a77f67a7d5de50ac546a6485f18a4aa804545ffb68529006718c0cc8467ba5d253ef52fb565688eac8100a8b1e01efcd5403ec92e5d489ddaa08bc27845764c3385d7235d"}, {0x108, 0x0, 0xffff9cbb, "c048433f4c507cc95fcb1ac0c8790ec14f7e0f20ec31dcd5d79f3935cc6a213f34bd57ed5d2d097c48cbb280489e93c8a7e63d1b14670032d4a82c8aca3f5169f6668bfbee0abfa1b6c95d4ea11a844e810d7ab1102e53721c12e75bdbebe1d1d8aff184dc76f3357261d03c33526d38a3db4326a8ad351be4ac1c585a0ad5b4d22a560ada3145ae51a63bf778aa244a16c275a0d7fca9bef50cfc21b0cf6986af3900d010c5a35cb53cbbc90d553892ac1306a238c667048df8ca6240d83843bf36d36699f6d85211207184ca6d20b9661590884a3048d4fc38dfd395643bb4e0572b78ab6be127fa3977d4e9f385acf2309f4261"}, {0xd0, 0x111, 0x80000001, "cecbf326ff6c4e5876c86c6d65dcfbab9a9ce5cbdfe86bfa9d34025fe0d8f51595f23c891e494e7e0522215d9750b993a445ab573bb1b7b591b5afda8486a8c7e39d8114197a8a98c5c4dc288374dd25b79377a93d0d8fbe4ccad6329acc8bfa3576ef0893c4c39e157cc66901b0a494ae40a8745d85637a076ab088b00f659f3f7b00fadf152b59742c44cd3f511b8b9ba6c849d5b34411631cd29e3641c68db723363146b6198d6e4cc5b4ae146d23d3a7f2c026e98eefa51429"}, {0xa0, 0x104, 0x7ff, "828a22cdb48f98ac3e071c278c4524fbe37806bfd9caf48d7df1e71b274971e80f55f25a34846d1f7ea091b8a3cc1288b6f7dc8c33bd3ad61a798fdb50faa22ee8708ef54d5bdc9760a1d8903acd47cc66fc2048b1b2659381d49b04fe8bac6cd2b5fb5940540f8d5b7e239ebd89c6fb2e9d01f8619c607e17dc421f4ce2fe29fd2bdde834b2a8e33abc"}], 0x328}, 0xc1) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1.136729778s ago: executing program 6 (id=2057): r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0xd, 0x8, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x400000000000}, 0x8620, 0x3ff, 0x3, 0x1, 0x0, 0x1, 0x480, 0x0, 0x5, 0x0, 0xf}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000037eea7160c28a89f54d2cde200107b8af8ff00000000bfa2004d0000000008000000b704000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000003440)=@newtaction={0x1158, 0x32, 0x829, 0x0, 0x25dfdbfc, {}, [{0x1144, 0x1, [@m_simple={0x84, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}]}, {0x45, 0x6, "1ddaf1c8b814ac2dbefbb85d953b7459c14f125a5198d2af89d680213e9e5383fa846f8c7a8c2e5dfab78100499e9abd9786618384d700a0e9b341a231fa56b33a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x90, 0x7, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "812806c804e3cd81e856f7168b856317"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_LABELS={0x14, 0x7, "60756cceddcc7d0f4675a4a02ba9030d"}, @TCA_CT_ACTION={0x6, 0x3, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0xb}]}, {0x13, 0x6, "cb46e60fca89b15417249e99298aca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x102c, 0x11, 0x0, 0x0, {{0xa}, {0xf00, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x6, 0x3c, 0x10000000, 0x0, 0x6}, 0x6, 0x8, [{0x1, 0x6, 0x7, 0x4, 0x5, 0x2}]}, [{0xffffff7f, 0xbcf4, 0x6, 0x6, 0x5, 0xa}, {0x3, 0x39e, 0x0, 0x5be, 0x6, 0x1}, {0x5, 0x1, 0x4, 0x1, 0x200, 0xffff}, {0x4, 0x3, 0x7fffffff, 0x3, 0xfffffff9, 0x3b2e}, {0x1ff, 0x100, 0x7, 0x7ff, 0x6, 0x10}, {0x0, 0x83, 0xe, 0xde99, 0xd}, {0x5e49, 0x2, 0x8000, 0x2, 0xfffffffe, 0x200}, {0x9, 0x2, 0xfffffffa, 0x86fd, 0x81, 0x264}, {0x4, 0x6, 0x1ed5ee1c, 0x400, 0x3b, 0x9}, {0x4, 0x5, 0x100, 0x9, 0x3, 0x95f4}, {0x2, 0x0, 0x6, 0xb8, 0xc200000, 0x8}, {0x9, 0x9f7, 0x3ff, 0xf, 0x4, 0x7f}, {0x79, 0x1c, 0xf08, 0x1fffe00, 0x8, 0x8}, {0x7dcf, 0x3, 0x9, 0x4, 0xfffffc01, 0xfffffffe}, {0xfffffff8, 0x3, 0x4, 0x9, 0x3, 0x1}, {0x0, 0x4f4c, 0x380000, 0x1a32, 0x9, 0x9}, {0x1ff, 0x2, 0x3ff, 0xb, 0x2be4, 0x80000000}, {0x22, 0xc649, 0x101, 0x4, 0x804, 0x36345488}, {0x400000, 0x3, 0x800, 0x69, 0xfffffff6, 0x2}, {0x7f, 0x9082, 0x5, 0x35, 0xadd, 0x7}, {0x4, 0x0, 0x6, 0xfd88, 0x6, 0x544b}, {0x6, 0x3, 0x80000001, 0x2, 0x6, 0x2}, {0x3a, 0x0, 0x80000001, 0x7f, 0x2}, {0xa, 0x9, 0x2800, 0x4, 0x5, 0xe78}, {0x0, 0x3, 0x10000, 0x0, 0xe0000, 0xff}, {0x7, 0x8, 0x7, 0x9e53, 0x1ff, 0xff}, {0xffff, 0x25, 0x1, 0x5, 0xfffffffc, 0x100}, {0x3, 0x8000, 0x9, 0x7, 0x8, 0x1}, {0x8, 0x9, 0xe135, 0x7, 0x0, 0x1}, {0x3, 0x9, 0x46, 0x10002, 0x1, 0x2}, {0x3d, 0x7, 0x5, 0x9, 0x4, 0x1}, {0x0, 0x40, 0x6d, 0x8, 0x2, 0x400}, {0x5, 0xfffffff9, 0x9, 0x2, 0x974, 0x10000}, {0x10, 0x6ef313d9, 0x7fffffff, 0x4000, 0x7, 0xf}, {0x7, 0x0, 0xfff, 0x401, 0x0, 0x93}, {0x0, 0xffff2d3b, 0x4, 0x9, 0x4, 0x4}, {0x1, 0x9, 0x8, 0x25fefa88, 0x5, 0x81}, {0x7fff, 0x80000001, 0x200, 0x7, 0x3, 0x200}, {0x0, 0x8, 0x7, 0x0, 0x228d, 0x9}, {0x400, 0x40, 0x2, 0x6, 0x7, 0xb}, {0x10001, 0x9, 0x6, 0x9, 0x4970e3b2, 0x7fffffff}, {0x800, 0x2, 0x9, 0xa98df29, 0x75, 0x10}, {0x1ff, 0xf, 0x7fffffff, 0x4c9096fe, 0x3, 0x7}, {0x8f, 0x6, 0xc, 0x4, 0x9, 0x262}, {0x4, 0x2, 0x9, 0x9, 0x10001, 0x8000}, {0x3ff, 0x0, 0x9, 0x1, 0x5e, 0x40}, {0xfffffffe, 0x800, 0x7, 0x177c, 0x7f, 0xb188}, {0x1, 0x2, 0x9, 0x3ff, 0x7ff, 0x3ff}, {0xfffffffe, 0xc8, 0x7ff, 0x1, 0x2}, {0x2, 0x4a78dfcc, 0x2, 0x2, 0x10, 0x200}, {0x0, 0xffff, 0x9, 0x6, 0x8000, 0x3}, {0x800, 0x7f, 0x6, 0x8000, 0x9, 0x6}, {0x5, 0x1, 0x0, 0x400, 0x3, 0xd9}, {0x1d, 0x19dc, 0x7ff, 0x7, 0x6, 0x7fff}, {0x800, 0xf46, 0x6, 0x5, 0xf}, {0x4, 0x6, 0x1000, 0x7, 0x7, 0x4}, {0x6, 0x8, 0xd11b, 0x7, 0x1ff, 0x9}, {0x52ad502a, 0x0, 0x2, 0x2e93, 0x80000001, 0x44}, {0x0, 0x3, 0x7f, 0x8, 0x1, 0x8}, {0x0, 0x0, 0x7f, 0x3, 0x4, 0x6}, {0x9, 0x8, 0x6, 0x1, 0x6, 0x5189}, {0x2, 0x7668, 0x200, 0x4, 0x8, 0xff}, {0x9, 0x401, 0xf6b, 0xfffffff7, 0x66, 0xd2}, {0x1, 0x5, 0x800, 0x0, 0xfffff800, 0x2}, {0x60592089, 0x6, 0x9, 0xf760, 0x0, 0xeb0}, {0x2, 0xff, 0x8001, 0x40, 0xf1, 0x98}, {0x4, 0xba, 0xffffffff, 0x0, 0xffff, 0x4}, {0x2, 0x4, 0x8, 0x4, 0x6, 0x8}, {0x1ff, 0x0, 0x80000000, 0x80000000, 0xfffffff7, 0xff}, {0x400, 0x0, 0x9, 0x6, 0x2, 0x51}, {0x1, 0x7, 0x8, 0xfe4, 0xfffffff8, 0x7fffffff}, {0x1, 0x80, 0x2, 0x3ff, 0xedae, 0x4}, {0x5, 0x200, 0x80000001, 0x3, 0x5, 0x8}, {0x2, 0xffffff80, 0x6, 0x9, 0x8}, {0xfff, 0x2, 0x0, 0xffffffff, 0x0, 0x6}, {0x2e48, 0x3, 0x0, 0x1, 0x5, 0x6}, {0x5, 0x704, 0xc2d, 0x0, 0x401, 0x6}, {0x7, 0x4, 0x401, 0xc7, 0x9, 0x7}, {0x9, 0x3ff, 0x6168, 0x1, 0x401, 0x2}, {0xd, 0x936, 0x5, 0xd590, 0x5, 0x1}, {0x2, 0x2d, 0x8, 0x4, 0x25ad, 0x9}, {0x1, 0xc6, 0x1, 0x3, 0x0, 0x7f}, {0x7, 0x7, 0x6, 0x4d, 0x57}, {0x9, 0x1ff, 0xd, 0xc, 0x3, 0xe}, {0x4, 0xffffffff, 0x0, 0xfffffffa, 0x9, 0x9}, {0x100, 0xfffffffe, 0xf, 0x5, 0x0, 0x3}, {0x2, 0x7, 0x8, 0x0, 0x3, 0xd}, {0x10001, 0x4, 0x6, 0x2, 0x2, 0x1}, {0x8001, 0x2, 0x9, 0x9, 0x9, 0x4}, {0x3, 0xf83, 0xc000000, 0x5, 0x40, 0x7}, {0x8, 0x44, 0x5, 0xfe5, 0x1, 0x7}, {0x401, 0x80000001, 0x40, 0x4, 0x7, 0x5}, {0x1, 0x8, 0x4, 0x4, 0x9, 0x5}, {0x3, 0x1, 0xf, 0x5, 0x4ec, 0xffffb4f2}, {0xc3, 0xffff, 0x829, 0x0, 0xd}, {0x1, 0x6ad, 0x4, 0x458, 0x3, 0x4}, {0x4, 0x60000000, 0x6, 0x2, 0x2, 0x2}, {0x3, 0x5, 0x4, 0x5, 0x9, 0x8}, {0x0, 0x3, 0xfea9, 0x3, 0x8, 0xffff56c6}, {0xf, 0x80000001, 0xf1, 0x1, 0x10001, 0x7d0e}, {0xffffffff, 0xa, 0x9, 0x3, 0x9, 0x8f2}, {0xe1c, 0xe3ab, 0x3, 0xea, 0x1, 0x3}, {0xfff00, 0x9, 0xf7e5, 0x6842a036, 0xa0, 0x800}, {0x4, 0x80000001, 0xffffff01, 0x3, 0xfff, 0xbd2}, {0x9, 0x8, 0x7ff, 0x4, 0x1000, 0x1}, {0xaa0, 0x8, 0x29, 0xe0, 0x5d7a, 0x632}, {0x1, 0x3, 0x10000, 0x9, 0x4963, 0x800}, {0x4, 0x3, 0xaaa, 0x7, 0x400, 0x7f}, {0x80000001, 0x3e, 0x0, 0x4, 0x7f, 0xb}, {0x0, 0x5, 0x4, 0xaf3, 0x7, 0x319}, {0xdc, 0x7, 0x7ff, 0x2, 0x2, 0x3}, {0x1, 0x3, 0x2, 0x0, 0x91, 0x759f6d0f}, {0x2, 0x7, 0x0, 0x0, 0x1c, 0x7}, {0x81, 0x0, 0x45, 0x8, 0x5, 0x7}, {0xa, 0x7, 0x6, 0xff, 0x2, 0xfffffffc}, {0x6, 0x2, 0xa, 0x7, 0xa46, 0xffff}, {0x1, 0x6, 0xfffffffd, 0x1, 0x8e, 0xfffffff9}, {0x2, 0x80, 0x3, 0x4, 0x1ff, 0x1}, {0x0, 0x3, 0xc, 0x40, 0x0, 0x8}, {0x6, 0x3, 0x7fffffff, 0xd, 0x8001, 0x98}, {0x10001, 0x9, 0x7, 0x8b80, 0x100, 0x2}, {0x7ff, 0x8, 0x200, 0x696, 0x80000001, 0x8}, {0x8000, 0x3, 0x5, 0xf, 0x9, 0x4633}, {0x9, 0x2, 0x1, 0x4d5025b8, 0x6, 0x3f}, {0x6, 0xffffffff, 0x3ff, 0x5, 0x1, 0x9}, {0x4, 0x3000000, 0xac2e, 0x7, 0x3}, {0x8001, 0xffffffff, 0x3, 0x70, 0x101, 0x80}, {0x2, 0x9, 0x401, 0x8, 0x7, 0x8}], [{}, {0x2, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0xa}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x3}, {0x1}, {0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x5}, {0x3}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1a365eaeee25a53f}, {0x5, 0x1}, {0xb29f857f3a2e3c52}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5}, {0x5}, {0x1}, {0x1}, {0x0, 0x347acd5b0ef1ef3e}, {0x2}, {0x4}, {0x1}, {0x3}, {0x5}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0xa81558499ec39c7d, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x102, 0x6, "02c8c37b59dee624b1a40a1e37a37391f022b9b48fa2f75d71e1a37affd635114a4a37531f5ad012298ea3111b8c9ad91b370a91e7a084e07121208a28a421d7a160c4c01c6486c7b5018c69741aee62ef56f1d1643c47834bd98a2c33b6324920421ed1f6babfc00ec72c100995b455a4523d3ebf130162b1e432343d153abfa73c17a117787b73b5cc6b176831880d70ac48b3f92ed33d6b28f9dd90a5af31ce40bc404d9843c3cce3679cdade293af03d5b49e7fcf20d7ea72946c2565f21aa8c7a174057804d99951522e586015a506df8fed2bec89d957908bb59ba4bfa7be997d36d5ede50758886944045c8c7ebb467f4c77a298e4d0a78e74091"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1158}, 0x1, 0x0, 0x0, 0x40016}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) (async) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e1d, @local}, 0x10) (async) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) (async) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f0000000200)={{0xffffffffffffffff, 0x1, 0x2, 0x0, 0xe}, 0x0, 0x9cf5, 'id1\x00', 'timer0\x00', 0x0, 0x8, 0x1000, 0x2, 0x2}) (async) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfe, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80007fff, 0x78c8}, 0x0, 0x0, 0xfffffffc, 0x7}, 0x0, 0x1, r0, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000900)=ANY=[@ANYRES8=r6], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) (async) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, &(0x7f0000002240)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x24004001) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kyber_throttled\x00'}, 0x18) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) 1.045788007s ago: executing program 6 (id=2058): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [0x0, 0x0, 0x2000000], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 1.024975409s ago: executing program 0 (id=2059): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1) (fail_nth: 4) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.01882834s ago: executing program 6 (id=2060): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/59, 0x3b}, {&(0x7f0000000300)=""/69, 0x45}], 0x2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r5 = request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffa) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) keyctl$restrict_keyring(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, r6, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r7 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000b4c401bf3874d14f", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000002c0)=ANY=[], 0x118) ioprio_set$pid(0x2, 0x0, 0xe008) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r8, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000000c0)=ANY=[]) sendfile(r4, r3, 0x0, 0x3ffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r9, 0x2285, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 657.736975ms ago: executing program 0 (id=2062): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f00003c0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3}) setsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c01, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000240)={0x6, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) waitid(0x0, 0x0, 0x0, 0x4, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x29, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) 577.157893ms ago: executing program 0 (id=2064): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100}, 0x18) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 576.335773ms ago: executing program 3 (id=2065): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 547.590736ms ago: executing program 7 (id=2066): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) sched_setaffinity(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x7}}]}, 0x40}}, 0x0) 546.866206ms ago: executing program 0 (id=2067): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209040902001b0081bd7000fbdb9f25"], 0x10}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="faffffff0000000000000000000000070000000000000000e1874c5482097ec263bd477d383a56ad2a4027fa62b552caada17bb85d665dd00ad537d1ca57feb6a62c0fe64647ef29682bb7f177d4448c553ee2afd3e17384b33f088ead16e2ace4bf281e38e450a278b416d58afcacd22875516f0ea12579fe25cbceb5b0058a2307234c19f926c3fc50c9a17d6d6b0db5c2245c2715459e2e38ac11d8d7e47285fb953837ab6551704c03a47d108f01da6a64d129b781ca7c79d8132fffb5296f0599be27ad3ca8915ddeee"], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x8, &(0x7f0000000400)=[{0xffff, 0xd, 0xe, 0x2}, {0xf, 0xb, 0x5, 0x80}, {0x1, 0x8, 0x79, 0x1}, {0x101, 0x0, 0x5, 0xffffff6b}, {0x6, 0xd4, 0x5, 0x4}, {0xfffd, 0xc, 0xd, 0x5}, {0x8, 0x3, 0x0, 0x9}, {0x4, 0x5, 0xf3, 0x6000000}]}) iopl(0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x18) personality(0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r10 = msgget$private(0x0, 0x0) msgrcv(r10, 0x0, 0x0, 0x1, 0x2000) timer_create(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) timer_create(0x3, 0x0, &(0x7f0000000080)) 542.694526ms ago: executing program 3 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 461.620934ms ago: executing program 7 (id=2069): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 393.758591ms ago: executing program 7 (id=2070): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000180)={0x3, 'veth0_vlan\x00', {0x6}, 0x8001}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r2, &(0x7f0000000840)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2e}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='y', 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x400, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x40000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000380)="d2", 0x1}], 0x1}}, {{&(0x7f0000000640)={0xa, 0x4e24, 0xa1e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3d}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000700)='g', 0x1}], 0x1}}], 0x3, 0x20000040) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1, r4}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r4, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r6}]}]}, 0x28}}, 0x0) 375.185713ms ago: executing program 7 (id=2071): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001940), 0x100000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000001980)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 348.229395ms ago: executing program 7 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x3, 0x9, 0x3, 0x1}, {0x1, 0x3, 0x4, 0x80000001}, {0x8, 0x4, 0x9, 0xf}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x36}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40054) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000780)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) close_range(r7, 0xffffffffffffffff, 0x100000000000000) 304.32241ms ago: executing program 5 (id=2073): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) process_mrelease(0xffffffffffffffff, 0x0) 240.041006ms ago: executing program 5 (id=2074): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00000cf000/0x3000)=nil, &(0x7f00003c0000/0x4000)=nil, 0x0, 0x0, 0x0, 0x3}) setsockopt$packet_int(r0, 0x107, 0x18, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c01, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000240)={0x6, 0x4}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x29, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) 187.734831ms ago: executing program 7 (id=2075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r2, r0, 0x0, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800a0001006d617463680000001800028008000240000000000b000100706f6c69637900000900010073797a30000000000900020073797a3200000000140000001100000000000000000000000500000a"], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) read(r4, &(0x7f00000006c0)=""/163, 0xa3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x804400, &(0x7f0000000040)="6246dd2acd", 0x5, &(0x7f0000000180), &(0x7f00000003c0), &(0x7f00000004c0)="8e52b859dd061bea9d2487d490cea41493d96184600b338ffc66c1daf9beabc86b2e849543caeab77c4d18e8fbf702c186b93ccf44ae3cfcbec2db634e9e1e4e924c27302eb8921e3af5ccc39f33750335d276") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r7}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000300), &(0x7f0000000a40)) r8 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) 98.75682ms ago: executing program 6 (id=2076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000140), 0x0}, 0x20) 386.68µs ago: executing program 6 (id=2077): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x100}, 0x18) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200090f000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000002000100000004d20000020300000020050005002f8000000a00000000000000ff0100000000000000000000000000010000000000000000010018"], 0x78}}, 0x0) 0s ago: executing program 5 (id=2078): socket(0x10, 0x3, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) memfd_create(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000009dc61cbd4618530d18f54b468508710000003000000006deffffffffffffff0009037a7d84318cd10bc203000000ff000000000b99a7b89231654b7a7e884470454acb7a07e9273aff5e0b89ad32992ece"], 0x0, 0x4e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x2000002, 0xe, 0x0, &(0x7f00000001c0)="df12c9f7b9a6000f000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 1760322182.797:19625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb670ed710 code=0x7ffc0000 [ 134.337035][ T4984] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.345546][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1650'. [ 134.355318][ T8222] bridge_slave_1: left allmulticast mode [ 134.361177][ T8222] bridge_slave_1: left promiscuous mode [ 134.365123][ T8219] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1648'. [ 134.366963][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.375988][ T29] audit: type=1326 audit(1760322182.829:19626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fcb670edc17 code=0x7ffc0000 [ 134.406307][ T29] audit: type=1326 audit(1760322182.829:19627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb670ed710 code=0x7ffc0000 [ 134.429841][ T29] audit: type=1326 audit(1760322182.829:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.453517][ T29] audit: type=1326 audit(1760322182.829:19629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.477013][ T29] audit: type=1326 audit(1760322182.829:19630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.500571][ T29] audit: type=1326 audit(1760322182.829:19631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.501198][ T8223] loop3: detected capacity change from 0 to 1024 [ 134.524203][ T29] audit: type=1326 audit(1760322182.839:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.539593][ T8227] loop6: detected capacity change from 0 to 1024 [ 134.553865][ T29] audit: type=1326 audit(1760322182.839:19633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.553907][ T29] audit: type=1326 audit(1760322182.839:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8208 comm="syz.5.1644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 134.589928][ T8223] EXT4-fs: Ignoring removed orlov option [ 134.615086][ T8222] bridge_slave_0: left allmulticast mode [ 134.620819][ T8222] bridge_slave_0: left promiscuous mode [ 134.626524][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.649629][ T8227] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.1650: Failed to acquire dquot type 0 [ 134.663439][ T8223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.680855][ T8227] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 134.695874][ T8227] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.1650: corrupted inode contents [ 134.709334][ T8227] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #13: comm syz.6.1650: mark_inode_dirty error [ 134.722793][ T8227] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.1650: corrupted inode contents [ 134.737283][ T8227] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.1650: mark_inode_dirty error [ 134.748896][ T8227] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.1650: corrupted inode contents [ 134.763456][ T8227] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 134.772309][ T8227] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #13: comm syz.6.1650: corrupted inode contents [ 134.794510][ T8236] IPv6: sit1: Disabled Multicast RS [ 134.801565][ T8227] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.1650: mark_inode_dirty error [ 134.813340][ T8227] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 134.824467][ T8227] EXT4-fs (loop6): 1 truncate cleaned up [ 134.830513][ T8227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.839596][ T8236] sit1: entered allmulticast mode [ 134.855484][ T8225] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 134.865268][ T8225] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not valid (left unmapped). [ 135.018934][ T8239] lo speed is unknown, defaulting to 1000 [ 135.356693][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.374483][ T8243] loop2: detected capacity change from 0 to 512 [ 135.385983][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.429174][ T8243] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 135.477969][ T8258] FAULT_INJECTION: forcing a failure. [ 135.477969][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 135.490664][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.0.1657 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.490698][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.490744][ T8258] Call Trace: [ 135.490751][ T8258] [ 135.490760][ T8258] __dump_stack+0x1d/0x30 [ 135.490783][ T8258] dump_stack_lvl+0xe8/0x140 [ 135.490806][ T8258] dump_stack+0x15/0x1b [ 135.490823][ T8258] should_fail_ex+0x265/0x280 [ 135.490913][ T8258] should_failslab+0x8c/0xb0 [ 135.491017][ T8258] kmem_cache_alloc_noprof+0x50/0x480 [ 135.491047][ T8258] ? radix_tree_node_alloc+0x8a/0x1f0 [ 135.491145][ T8258] radix_tree_node_alloc+0x8a/0x1f0 [ 135.491171][ T8258] idr_get_free+0x1fa/0x550 [ 135.491272][ T8258] idr_alloc_u32+0xca/0x180 [ 135.491302][ T8258] idr_alloc_cyclic+0x7b/0x140 [ 135.491331][ T8258] bpf_link_prime+0x69/0x1d0 [ 135.491371][ T8258] tcx_link_attach+0xf9/0x5e0 [ 135.491398][ T8258] link_create+0x546/0x6e0 [ 135.491422][ T8258] __sys_bpf+0x628/0x7c0 [ 135.491478][ T8258] __x64_sys_bpf+0x41/0x50 [ 135.491509][ T8258] x64_sys_call+0x2aee/0x3000 [ 135.491585][ T8258] do_syscall_64+0xd2/0x200 [ 135.491653][ T8258] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.491685][ T8258] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 135.491709][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.491733][ T8258] RIP: 0033:0x7fa69a42eec9 [ 135.491752][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.491806][ T8258] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.491828][ T8258] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 135.491842][ T8258] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 000000000000001c [ 135.491893][ T8258] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 135.491906][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.491920][ T8258] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 135.491941][ T8258] [ 135.831563][ T8264] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 135.847733][ T8260] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1658'. [ 135.862445][ T8264] netlink: 'syz.5.1659': attribute type 12 has an invalid length. [ 135.887681][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1659'. [ 135.896623][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 135.905570][ T8264] netlink: 'syz.5.1659': attribute type 14 has an invalid length. [ 135.913389][ T8264] netlink: 'syz.5.1659': attribute type 11 has an invalid length. [ 135.943945][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 135.994256][ T8272] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 136.002589][ T8272] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 136.026428][ T8271] loop2: detected capacity change from 0 to 128 [ 136.116057][ T8271] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.129782][ T8271] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.232983][ T3315] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.368179][ T8301] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1671'. [ 136.414159][ T8302] loop2: detected capacity change from 0 to 1024 [ 136.426491][ T8302] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 1152921504606846981)! [ 136.438257][ T8302] EXT4-fs (loop2): group descriptors corrupted! [ 136.453452][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'. [ 136.477612][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.485250][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.494146][ T8306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.501824][ T8306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.590012][ T8317] loop3: detected capacity change from 0 to 128 [ 136.602364][ T8317] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.618754][ T8317] ext4 filesystem being mounted at /361/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.799921][ T8322] loop0: detected capacity change from 0 to 512 [ 136.813286][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.828473][ T8322] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 136.872430][ T8324] loop0: detected capacity change from 0 to 128 [ 136.909071][ T8324] syz.0.1681: attempt to access beyond end of device [ 136.909071][ T8324] loop0: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 137.011484][ T8334] syz.0.1681: attempt to access beyond end of device [ 137.011484][ T8334] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 137.059023][ T8334] syz.0.1681: attempt to access beyond end of device [ 137.059023][ T8334] loop0: rw=2049, sector=177, nr_sectors = 24 limit=128 [ 137.084476][ T8334] syz.0.1681: attempt to access beyond end of device [ 137.084476][ T8334] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 137.096377][ T8334] syz.0.1681: attempt to access beyond end of device [ 137.096377][ T8334] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 137.137778][ T3534] kworker/u8:7: attempt to access beyond end of device [ 137.137778][ T3534] loop0: rw=1, sector=161, nr_sectors = 1 limit=128 [ 137.137806][ T3534] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 137.137846][ T3534] kworker/u8:7: attempt to access beyond end of device [ 137.137846][ T3534] loop0: rw=1, sector=569, nr_sectors = 8 limit=128 [ 137.165979][ T8345] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 137.166007][ T8345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 137.166046][ T8345] vhci_hcd vhci_hcd.0: Device attached [ 137.169322][ T8346] vhci_hcd: connection closed [ 137.183223][ T3534] vhci_hcd: stop threads [ 137.183237][ T3534] vhci_hcd: release socket [ 137.183248][ T3534] vhci_hcd: disconnect device [ 137.412527][ T8354] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 137.412561][ T8354] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 137.443172][ T8367] random: crng reseeded on system resumption [ 137.544656][ T8368] hub 2-0:1.0: USB hub found [ 137.544865][ T8368] hub 2-0:1.0: 8 ports detected [ 137.903747][ T8377] netlink: 'syz.2.1697': attribute type 21 has an invalid length. [ 137.980479][ T8385] lo speed is unknown, defaulting to 1000 [ 138.043096][ T8389] lo speed is unknown, defaulting to 1000 [ 138.053128][ T8395] __nla_validate_parse: 3 callbacks suppressed [ 138.053145][ T8395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1701'. [ 138.111559][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1700'. [ 138.120713][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1700'. [ 138.152146][ T8403] FAULT_INJECTION: forcing a failure. [ 138.152146][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 138.165003][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.3.1704 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.165035][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.165114][ T8403] Call Trace: [ 138.165121][ T8403] [ 138.165129][ T8403] __dump_stack+0x1d/0x30 [ 138.165153][ T8403] dump_stack_lvl+0xe8/0x140 [ 138.165175][ T8403] dump_stack+0x15/0x1b [ 138.165258][ T8403] should_fail_ex+0x265/0x280 [ 138.165303][ T8403] ? p9_client_create+0x59/0xbc0 [ 138.165356][ T8403] should_failslab+0x8c/0xb0 [ 138.165391][ T8403] __kmalloc_cache_noprof+0x4c/0x4a0 [ 138.165491][ T8403] p9_client_create+0x59/0xbc0 [ 138.165517][ T8403] ? should_failslab+0x8c/0xb0 [ 138.165551][ T8403] ? __kmalloc_node_track_caller_noprof+0x399/0x580 [ 138.165647][ T8403] ? v9fs_session_init+0x78/0xde0 [ 138.165697][ T8403] v9fs_session_init+0xf7/0xde0 [ 138.165737][ T8403] ? avc_has_perm_noaudit+0x1b1/0x200 [ 138.165848][ T8403] ? should_fail_ex+0xdb/0x280 [ 138.165891][ T8403] ? v9fs_mount+0x51/0x5c0 [ 138.165914][ T8403] ? should_failslab+0x8c/0xb0 [ 138.165948][ T8403] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 138.166062][ T8403] v9fs_mount+0x67/0x5c0 [ 138.166085][ T8403] ? selinux_capable+0x31/0x40 [ 138.166110][ T8403] ? __pfx_v9fs_mount+0x10/0x10 [ 138.166181][ T8403] legacy_get_tree+0x78/0xd0 [ 138.166214][ T8403] vfs_get_tree+0x57/0x1d0 [ 138.166305][ T8403] do_new_mount+0x24d/0x660 [ 138.166333][ T8403] ? security_capable+0x83/0x90 [ 138.166375][ T8403] path_mount+0x4a5/0xb70 [ 138.166403][ T8403] ? user_path_at+0x109/0x130 [ 138.166447][ T8403] __se_sys_mount+0x28c/0x2e0 [ 138.166502][ T8403] ? fput+0x8f/0xc0 [ 138.166654][ T8403] __x64_sys_mount+0x67/0x80 [ 138.166685][ T8403] x64_sys_call+0x2b51/0x3000 [ 138.166713][ T8403] do_syscall_64+0xd2/0x200 [ 138.166744][ T8403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.166782][ T8403] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.166808][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.166835][ T8403] RIP: 0033:0x7fc508e1eec9 [ 138.166872][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.166894][ T8403] RSP: 002b:00007fc507887038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 138.166913][ T8403] RAX: ffffffffffffffda RBX: 00007fc509075fa0 RCX: 00007fc508e1eec9 [ 138.166992][ T8403] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 138.167008][ T8403] RBP: 00007fc507887090 R08: 0000200000000200 R09: 0000000000000000 [ 138.167023][ T8403] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000002 [ 138.167039][ T8403] R13: 00007fc509076038 R14: 00007fc509075fa0 R15: 00007fffdd73ba78 [ 138.167064][ T8403] [ 138.634171][ T8415] FAULT_INJECTION: forcing a failure. [ 138.634171][ T8415] name failslab, interval 1, probability 0, space 0, times 0 [ 138.646983][ T8415] CPU: 1 UID: 0 PID: 8415 Comm: syz.0.1708 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.647023][ T8415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.647095][ T8415] Call Trace: [ 138.647104][ T8415] [ 138.647113][ T8415] __dump_stack+0x1d/0x30 [ 138.647136][ T8415] dump_stack_lvl+0xe8/0x140 [ 138.647156][ T8415] dump_stack+0x15/0x1b [ 138.647172][ T8415] should_fail_ex+0x265/0x280 [ 138.647302][ T8415] should_failslab+0x8c/0xb0 [ 138.647333][ T8415] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 138.647377][ T8415] ? kstrdup_const+0x3e/0x50 [ 138.647409][ T8415] kstrdup+0x3e/0xd0 [ 138.647440][ T8415] kstrdup_const+0x3e/0x50 [ 138.647487][ T8415] alloc_lookup_fw_priv+0x160/0x350 [ 138.647516][ T8415] _request_firmware+0x28b/0xbb0 [ 138.647548][ T8415] ? avc_has_perm_noaudit+0x1b1/0x200 [ 138.647618][ T8415] ? cred_has_capability+0x210/0x280 [ 138.647682][ T8415] ? __rcu_read_unlock+0x4f/0x70 [ 138.647717][ T8415] request_firmware+0x36/0x50 [ 138.647750][ T8415] devlink_compat_flash_update+0xb2/0x1b0 [ 138.647792][ T8415] dev_ethtool+0x14ac/0x1670 [ 138.647831][ T8415] ? full_name_hash+0x92/0xe0 [ 138.647934][ T8415] dev_ioctl+0x2e0/0x960 [ 138.647976][ T8415] sock_do_ioctl+0x197/0x220 [ 138.648072][ T8415] sock_ioctl+0x41b/0x610 [ 138.648116][ T8415] ? __pfx_sock_ioctl+0x10/0x10 [ 138.648207][ T8415] __se_sys_ioctl+0xce/0x140 [ 138.648232][ T8415] __x64_sys_ioctl+0x43/0x50 [ 138.648254][ T8415] x64_sys_call+0x1816/0x3000 [ 138.648282][ T8415] do_syscall_64+0xd2/0x200 [ 138.648343][ T8415] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.648445][ T8415] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.648472][ T8415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.648494][ T8415] RIP: 0033:0x7fa69a42eec9 [ 138.648514][ T8415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.648539][ T8415] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.648642][ T8415] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 138.648656][ T8415] RDX: 0000200000000340 RSI: 0000000000008946 RDI: 0000000000000005 [ 138.648670][ T8415] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.648687][ T8415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.648748][ T8415] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 138.648773][ T8415] [ 138.777066][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1702'. [ 138.869935][ T8418] loop2: detected capacity change from 0 to 256 [ 138.872737][ T8389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1702'. [ 138.898935][ T8417] hub 2-0:1.0: USB hub found [ 138.920197][ T8420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1710'. [ 138.920759][ T8417] hub 2-0:1.0: 8 ports detected [ 138.966547][ T8420] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.070918][ T8420] vlan2: entered allmulticast mode [ 139.076198][ T8420] bond1: entered allmulticast mode [ 139.083107][ T8431] FAULT_INJECTION: forcing a failure. [ 139.083107][ T8431] name failslab, interval 1, probability 0, space 0, times 0 [ 139.095835][ T8431] CPU: 0 UID: 0 PID: 8431 Comm: syz.6.1713 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.095871][ T8431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 139.095893][ T8431] Call Trace: [ 139.095901][ T8431] [ 139.095911][ T8431] __dump_stack+0x1d/0x30 [ 139.095940][ T8431] dump_stack_lvl+0xe8/0x140 [ 139.095963][ T8431] dump_stack+0x15/0x1b [ 139.095980][ T8431] should_fail_ex+0x265/0x280 [ 139.096015][ T8431] should_failslab+0x8c/0xb0 [ 139.096053][ T8431] kmem_cache_alloc_noprof+0x50/0x480 [ 139.096098][ T8431] ? dst_alloc+0xbd/0x100 [ 139.096184][ T8431] dst_alloc+0xbd/0x100 [ 139.096219][ T8431] ? ip_vs_twos_schedule+0x12/0x330 [ 139.096258][ T8431] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 139.096307][ T8431] ip_route_output_flow+0x65/0x110 [ 139.096338][ T8431] udp_sendmsg+0x11b0/0x13c0 [ 139.096369][ T8431] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 139.096400][ T8431] ? css_rstat_updated+0xb7/0x240 [ 139.096490][ T8431] udpv6_sendmsg+0x812/0x15b0 [ 139.096535][ T8431] ? avc_has_perm_noaudit+0x1b1/0x200 [ 139.096649][ T8431] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 139.096725][ T8431] inet6_sendmsg+0xac/0xd0 [ 139.096781][ T8431] __sock_sendmsg+0x8b/0x180 [ 139.096809][ T8431] ____sys_sendmsg+0x31e/0x4e0 [ 139.096852][ T8431] ___sys_sendmsg+0x17b/0x1d0 [ 139.096911][ T8431] __x64_sys_sendmsg+0xd4/0x160 [ 139.096949][ T8431] x64_sys_call+0x191e/0x3000 [ 139.097123][ T8431] do_syscall_64+0xd2/0x200 [ 139.097151][ T8431] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 139.097188][ T8431] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 139.097277][ T8431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.097302][ T8431] RIP: 0033:0x7f58caf8eec9 [ 139.097364][ T8431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.097389][ T8431] RSP: 002b:00007f58c99f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.097441][ T8431] RAX: ffffffffffffffda RBX: 00007f58cb1e5fa0 RCX: 00007f58caf8eec9 [ 139.097521][ T8431] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 139.097604][ T8431] RBP: 00007f58c99f7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.097621][ T8431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.097672][ T8431] R13: 00007f58cb1e6038 R14: 00007f58cb1e5fa0 R15: 00007fffb9235c68 [ 139.097692][ T8431] [ 139.099078][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 139.099100][ T29] audit: type=1400 audit(1760322187.868:19970): avc: denied { mount } for pid=8419 comm="syz.0.1710" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 139.417765][ T29] audit: type=1326 audit(1760322188.193:19971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.441392][ T29] audit: type=1326 audit(1760322188.193:19972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.464946][ T29] audit: type=1326 audit(1760322188.204:19973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.488539][ T29] audit: type=1326 audit(1760322188.204:19974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.512120][ T29] audit: type=1326 audit(1760322188.204:19975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.535768][ T29] audit: type=1326 audit(1760322188.204:19976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.559462][ T29] audit: type=1326 audit(1760322188.204:19977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.583115][ T29] audit: type=1326 audit(1760322188.204:19978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.606853][ T29] audit: type=1326 audit(1760322188.204:19979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8440 comm="syz.5.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fcb670eeec9 code=0x7ffc0000 [ 139.656573][ T8449] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1720'. [ 139.712758][ T8451] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1719'. [ 139.763380][ T8456] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1721'. [ 139.846326][ T8477] random: crng reseeded on system resumption [ 139.852366][ T8466] lo speed is unknown, defaulting to 1000 [ 140.086382][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1724'. [ 140.099906][ T8487] netlink: 'syz.5.1731': attribute type 10 has an invalid length. [ 140.117404][ T8487] team0: Port device dummy0 added [ 140.126554][ T8487] netlink: 'syz.5.1731': attribute type 10 has an invalid length. [ 140.144282][ T8487] team0: Port device dummy0 removed [ 140.152313][ T8487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.580971][ T8517] hub 2-0:1.0: USB hub found [ 140.586127][ T8517] hub 2-0:1.0: 8 ports detected [ 140.691056][ T8518] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 140.699366][ T8518] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 141.303558][ T8529] lo speed is unknown, defaulting to 1000 [ 141.709285][ T8542] FAULT_INJECTION: forcing a failure. [ 141.709285][ T8542] name failslab, interval 1, probability 0, space 0, times 0 [ 141.721973][ T8542] CPU: 0 UID: 0 PID: 8542 Comm: syz.5.1748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.722010][ T8542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.722027][ T8542] Call Trace: [ 141.722036][ T8542] [ 141.722046][ T8542] __dump_stack+0x1d/0x30 [ 141.722070][ T8542] dump_stack_lvl+0xe8/0x140 [ 141.722097][ T8542] dump_stack+0x15/0x1b [ 141.722168][ T8542] should_fail_ex+0x265/0x280 [ 141.722203][ T8542] should_failslab+0x8c/0xb0 [ 141.722232][ T8542] kmem_cache_alloc_noprof+0x50/0x480 [ 141.722314][ T8542] ? getname_flags+0x80/0x3b0 [ 141.722343][ T8542] getname_flags+0x80/0x3b0 [ 141.722424][ T8542] do_sys_openat2+0x60/0x110 [ 141.722543][ T8542] __x64_sys_openat+0xf2/0x120 [ 141.722615][ T8542] x64_sys_call+0x2eab/0x3000 [ 141.722644][ T8542] do_syscall_64+0xd2/0x200 [ 141.722734][ T8542] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.722770][ T8542] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.722825][ T8542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.722902][ T8542] RIP: 0033:0x7fcb670ed710 [ 141.722921][ T8542] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 141.722943][ T8542] RSP: 002b:00007fcb65b56f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 141.723015][ T8542] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcb670ed710 [ 141.723033][ T8542] RDX: 0000000000000000 RSI: 00007fcb65b56fa0 RDI: 00000000ffffff9c [ 141.723050][ T8542] RBP: 00007fcb65b56fa0 R08: 0000000000000000 R09: 00007fcb65b56cd5 [ 141.723133][ T8542] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 141.723147][ T8542] R13: 00007fcb67346038 R14: 00007fcb67345fa0 R15: 00007fff8a0e2818 [ 141.723231][ T8542] [ 141.933960][ T8545] hub 2-0:1.0: USB hub found [ 141.938932][ T8545] hub 2-0:1.0: 8 ports detected [ 142.067928][ T8538] loop6: detected capacity change from 0 to 8192 [ 142.143821][ T8538] vfat: Unknown parameter '' [ 142.622920][ T8557] lo speed is unknown, defaulting to 1000 [ 142.632588][ T8567] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 142.641053][ T8567] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 142.674226][ T8575] loop6: detected capacity change from 0 to 512 [ 142.737756][ T8581] hub 2-0:1.0: USB hub found [ 142.756959][ T8581] hub 2-0:1.0: 8 ports detected [ 142.796806][ T8575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.841544][ T8575] ext4 filesystem being mounted at /165/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.994149][ T8591] __nla_validate_parse: 6 callbacks suppressed [ 142.994189][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 143.022700][ T8561] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1755'. [ 143.118387][ T8589] lo speed is unknown, defaulting to 1000 [ 143.266365][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1753'. [ 143.275419][ T8560] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1753'. [ 143.376276][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.575726][ T8583] can0: slcan on ttyS3. [ 143.581809][ T8598] IPv6: sit1: Disabled Multicast RS [ 143.588179][ T8598] sit1: entered allmulticast mode [ 143.606553][ T8605] loop6: detected capacity change from 0 to 1024 [ 143.613308][ T8605] EXT4-fs: Ignoring removed orlov option [ 143.631579][ T8605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.786921][ T8611] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1767'. [ 143.823616][ T8605] IPv6: sit1: Disabled Multicast RS [ 143.830009][ T8605] sit1: entered allmulticast mode [ 143.869476][ T8579] can0 (unregistered): slcan off ttyS3. [ 143.888464][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 143.888481][ T29] audit: type=1400 audit(1760322192.896:20006): avc: denied { connect } for pid=8615 comm="syz.5.1768" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 143.894783][ T8616] 9pnet_fd: Insufficient options for proto=fd [ 143.921668][ T29] audit: type=1400 audit(1760322192.896:20007): avc: denied { read write } for pid=8615 comm="syz.5.1768" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 144.002521][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.016749][ T8603] lo speed is unknown, defaulting to 1000 [ 144.254851][ T29] audit: type=1400 audit(1760322193.285:20008): avc: denied { connect } for pid=8633 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 144.281128][ T8638] IPv6: sit1: Disabled Multicast RS [ 144.287412][ T8638] sit1: entered allmulticast mode [ 144.810957][ T8654] FAULT_INJECTION: forcing a failure. [ 144.810957][ T8654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.824143][ T8654] CPU: 1 UID: 0 PID: 8654 Comm: syz.2.1780 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.824179][ T8654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.824192][ T8654] Call Trace: [ 144.824199][ T8654] [ 144.824271][ T8654] __dump_stack+0x1d/0x30 [ 144.824318][ T8654] dump_stack_lvl+0xe8/0x140 [ 144.824337][ T8654] dump_stack+0x15/0x1b [ 144.824359][ T8654] should_fail_ex+0x265/0x280 [ 144.824402][ T8654] should_fail+0xb/0x20 [ 144.824481][ T8654] should_fail_usercopy+0x1a/0x20 [ 144.824505][ T8654] _copy_from_user+0x1c/0xb0 [ 144.824537][ T8654] memdup_user+0x5e/0xd0 [ 144.824568][ T8654] autofs_dev_ioctl+0x167/0x6a0 [ 144.824612][ T8654] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 144.824646][ T8654] __se_sys_ioctl+0xce/0x140 [ 144.824665][ T8654] __x64_sys_ioctl+0x43/0x50 [ 144.824690][ T8654] x64_sys_call+0x1816/0x3000 [ 144.824722][ T8654] do_syscall_64+0xd2/0x200 [ 144.824753][ T8654] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.824782][ T8654] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.824811][ T8654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.824853][ T8654] RIP: 0033:0x7f3fc4d3eec9 [ 144.824873][ T8654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.824899][ T8654] RSP: 002b:00007f3fc379f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.824939][ T8654] RAX: ffffffffffffffda RBX: 00007f3fc4f95fa0 RCX: 00007f3fc4d3eec9 [ 144.824951][ T8654] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000003 [ 144.824968][ T8654] RBP: 00007f3fc379f090 R08: 0000000000000000 R09: 0000000000000000 [ 144.824982][ T8654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.824994][ T8654] R13: 00007f3fc4f96038 R14: 00007f3fc4f95fa0 R15: 00007ffc3eb895d8 [ 144.825013][ T8654] [ 145.078215][ T8645] lo speed is unknown, defaulting to 1000 [ 145.193309][ T8648] lo speed is unknown, defaulting to 1000 [ 145.270625][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1778'. [ 145.279708][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1778'. [ 145.380222][ T8662] loop3: detected capacity change from 0 to 1024 [ 145.411409][ T8662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.551034][ T29] audit: type=1326 audit(1760322194.629:20009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.574796][ T29] audit: type=1326 audit(1760322194.629:20010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.598446][ T29] audit: type=1326 audit(1760322194.629:20011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.622025][ T29] audit: type=1326 audit(1760322194.629:20012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.645605][ T29] audit: type=1326 audit(1760322194.629:20013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.669586][ T29] audit: type=1326 audit(1760322194.629:20014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.693129][ T29] audit: type=1326 audit(1760322194.629:20015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8666 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 145.718460][ T8667] loop0: detected capacity change from 0 to 128 [ 145.754855][ T8667] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 145.761332][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.767149][ T8667] ext4 filesystem being mounted at /416/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.841915][ T8670] loop5: detected capacity change from 0 to 1024 [ 145.879795][ T8670] EXT4-fs: Ignoring removed orlov option [ 145.913691][ T8670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.915322][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.985408][ T8670] IPv6: sit1: Disabled Multicast RS [ 145.991493][ T8670] sit1: entered allmulticast mode [ 146.033106][ T8679] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 146.042421][ T8679] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 146.055295][ T8681] IPv6: sit1: Disabled Multicast RS [ 146.061527][ T8681] sit1: entered allmulticast mode [ 146.076370][ T8684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=8684 comm=syz.2.1790 [ 146.088996][ T8679] loop3: detected capacity change from 0 to 164 [ 146.097433][ T8679] iso9660: Unknown parameter 'GPL' [ 146.138431][ T4984] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.166508][ T8693] FAULT_INJECTION: forcing a failure. [ 146.166508][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 146.179271][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.5.1792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.179302][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.179383][ T8693] Call Trace: [ 146.179392][ T8693] [ 146.179401][ T8693] __dump_stack+0x1d/0x30 [ 146.179429][ T8693] dump_stack_lvl+0xe8/0x140 [ 146.179454][ T8693] dump_stack+0x15/0x1b [ 146.179476][ T8693] should_fail_ex+0x265/0x280 [ 146.179585][ T8693] should_failslab+0x8c/0xb0 [ 146.179622][ T8693] __kmalloc_node_noprof+0xaa/0x580 [ 146.179660][ T8693] ? __vmalloc_node_range_noprof+0x410/0xed0 [ 146.179705][ T8693] __vmalloc_node_range_noprof+0x410/0xed0 [ 146.179779][ T8693] ? __rcu_read_unlock+0x4f/0x70 [ 146.179821][ T8693] ? avc_has_perm_noaudit+0x1b1/0x200 [ 146.179912][ T8693] ? do_replace+0x188/0x320 [ 146.179949][ T8693] __vmalloc_noprof+0x83/0xc0 [ 146.179999][ T8693] ? do_replace+0x188/0x320 [ 146.180043][ T8693] do_replace+0x188/0x320 [ 146.180093][ T8693] do_ebt_set_ctl+0x12e/0xac0 [ 146.180127][ T8693] ? _parse_integer_limit+0x170/0x190 [ 146.180177][ T8693] ? __rcu_read_unlock+0x4f/0x70 [ 146.180210][ T8693] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 146.180252][ T8693] ? ip4_datagram_release_cb+0x351/0x380 [ 146.180315][ T8693] ? _parse_integer+0x27/0x40 [ 146.180359][ T8693] ? lock_sock_nested+0x112/0x140 [ 146.180456][ T8693] ? _raw_spin_unlock_bh+0x36/0x40 [ 146.180531][ T8693] ? release_sock+0x116/0x150 [ 146.180612][ T8693] ? sockopt_release_sock+0x42/0x50 [ 146.180707][ T8693] ? do_ip_setsockopt+0x1af3/0x2240 [ 146.180741][ T8693] nf_setsockopt+0x199/0x1b0 [ 146.180788][ T8693] ip_setsockopt+0x102/0x110 [ 146.180834][ T8693] udp_setsockopt+0x99/0xb0 [ 146.180866][ T8693] sock_common_setsockopt+0x69/0x80 [ 146.180894][ T8693] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.180923][ T8693] __sys_setsockopt+0x184/0x200 [ 146.180969][ T8693] __x64_sys_setsockopt+0x64/0x80 [ 146.181005][ T8693] x64_sys_call+0x20ec/0x3000 [ 146.181032][ T8693] do_syscall_64+0xd2/0x200 [ 146.181063][ T8693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.181171][ T8693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.181202][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.181247][ T8693] RIP: 0033:0x7fcb670eeec9 [ 146.181265][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.181286][ T8693] RSP: 002b:00007fcb65b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.181361][ T8693] RAX: ffffffffffffffda RBX: 00007fcb67345fa0 RCX: 00007fcb670eeec9 [ 146.181374][ T8693] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 146.181386][ T8693] RBP: 00007fcb65b57090 R08: 0000000000000108 R09: 0000000000000000 [ 146.181397][ T8693] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 146.181409][ T8693] R13: 00007fcb67346038 R14: 00007fcb67345fa0 R15: 00007fff8a0e2818 [ 146.181429][ T8693] [ 146.181438][ T8693] syz.5.1792: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null) [ 146.202035][ T8691] FAULT_INJECTION: forcing a failure. [ 146.202035][ T8691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.204844][ T8693] ,cpuset= [ 146.207821][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.3.1795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.207912][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.207933][ T8691] Call Trace: [ 146.207943][ T8691] [ 146.207953][ T8691] __dump_stack+0x1d/0x30 [ 146.207985][ T8691] dump_stack_lvl+0xe8/0x140 [ 146.208012][ T8691] dump_stack+0x15/0x1b [ 146.208035][ T8691] should_fail_ex+0x265/0x280 [ 146.208122][ T8691] should_fail+0xb/0x20 [ 146.208178][ T8691] should_fail_usercopy+0x1a/0x20 [ 146.208211][ T8691] strncpy_from_user+0x25/0x230 [ 146.208320][ T8691] strncpy_from_bpfptr+0x43/0x50 [ 146.208354][ T8691] bpf_prog_load+0x883/0x1100 [ 146.208392][ T8691] ? security_bpf+0x2b/0x90 [ 146.208431][ T8691] __sys_bpf+0x469/0x7c0 [ 146.208543][ T8691] __x64_sys_bpf+0x41/0x50 [ 146.208586][ T8691] x64_sys_call+0x2aee/0x3000 [ 146.208616][ T8691] do_syscall_64+0xd2/0x200 [ 146.208661][ T8691] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.208700][ T8691] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.208733][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.208893][ T8691] RIP: 0033:0x7fc508e1eec9 [ 146.208914][ T8691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.208940][ T8691] RSP: 002b:00007fc507887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 146.208967][ T8691] RAX: ffffffffffffffda RBX: 00007fc509075fa0 RCX: 00007fc508e1eec9 [ 146.208985][ T8691] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 146.209003][ T8691] RBP: 00007fc507887090 R08: 0000000000000000 R09: 0000000000000000 [ 146.209021][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.209041][ T8691] R13: 00007fc509076038 R14: 00007fc509075fa0 R15: 00007fffdd73ba78 [ 146.209069][ T8691] [ 146.352510][ T8701] loop0: detected capacity change from 0 to 256 [ 146.358152][ T8693] /,mems_allowed=0 [ 146.358191][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.5.1792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.358304][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.358324][ T8693] Call Trace: [ 146.358335][ T8693] [ 146.358345][ T8693] __dump_stack+0x1d/0x30 [ 146.358376][ T8693] dump_stack_lvl+0xe8/0x140 [ 146.358418][ T8693] dump_stack+0x15/0x1b [ 146.358442][ T8693] warn_alloc+0x12b/0x1a0 [ 146.358515][ T8693] __vmalloc_node_range_noprof+0x4b9/0xed0 [ 146.358570][ T8693] ? __rcu_read_unlock+0x4f/0x70 [ 146.358615][ T8693] ? avc_has_perm_noaudit+0x1b1/0x200 [ 146.358713][ T8693] ? do_replace+0x188/0x320 [ 146.358761][ T8693] __vmalloc_noprof+0x83/0xc0 [ 146.358858][ T8693] ? do_replace+0x188/0x320 [ 146.358905][ T8693] do_replace+0x188/0x320 [ 146.358996][ T8693] do_ebt_set_ctl+0x12e/0xac0 [ 146.359043][ T8693] ? _parse_integer_limit+0x170/0x190 [ 146.359171][ T8693] ? __rcu_read_unlock+0x4f/0x70 [ 146.359402][ T8693] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 146.359447][ T8693] ? ip4_datagram_release_cb+0x351/0x380 [ 146.359501][ T8693] ? _parse_integer+0x27/0x40 [ 146.359549][ T8693] ? lock_sock_nested+0x112/0x140 [ 146.359649][ T8693] ? _raw_spin_unlock_bh+0x36/0x40 [ 146.359695][ T8693] ? release_sock+0x116/0x150 [ 146.359788][ T8693] ? sockopt_release_sock+0x42/0x50 [ 146.359824][ T8693] ? do_ip_setsockopt+0x1af3/0x2240 [ 146.359861][ T8693] nf_setsockopt+0x199/0x1b0 [ 146.359947][ T8693] ip_setsockopt+0x102/0x110 [ 146.359985][ T8693] udp_setsockopt+0x99/0xb0 [ 146.360021][ T8693] sock_common_setsockopt+0x69/0x80 [ 146.360051][ T8693] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.360149][ T8693] __sys_setsockopt+0x184/0x200 [ 146.360253][ T8693] __x64_sys_setsockopt+0x64/0x80 [ 146.360294][ T8693] x64_sys_call+0x20ec/0x3000 [ 146.360463][ T8693] do_syscall_64+0xd2/0x200 [ 146.360508][ T8693] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.360547][ T8693] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.360578][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.360653][ T8693] RIP: 0033:0x7fcb670eeec9 [ 146.360674][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.360701][ T8693] RSP: 002b:00007fcb65b57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.360728][ T8693] RAX: ffffffffffffffda RBX: 00007fcb67345fa0 RCX: 00007fcb670eeec9 [ 146.360746][ T8693] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 146.360764][ T8693] RBP: 00007fcb65b57090 R08: 0000000000000108 R09: 0000000000000000 [ 146.360782][ T8693] R10: 0000200000001d80 R11: 0000000000000246 R12: 0000000000000001 [ 146.360856][ T8693] R13: 00007fcb67346038 R14: 00007fcb67345fa0 R15: 00007fff8a0e2818 [ 146.360884][ T8693] [ 146.360901][ T8693] Mem-Info: [ 146.972062][ T8693] active_anon:10728 inactive_anon:1 isolated_anon:0 [ 146.972062][ T8693] active_file:25892 inactive_file:2289 isolated_file:0 [ 146.972062][ T8693] unevictable:0 dirty:187 writeback:0 [ 146.972062][ T8693] slab_reclaimable:3493 slab_unreclaimable:33975 [ 146.972062][ T8693] mapped:29768 shmem:220 pagetables:1267 [ 146.972062][ T8693] sec_pagetables:0 bounce:0 [ 146.972062][ T8693] kernel_misc_reclaimable:0 [ 146.972062][ T8693] free:1853661 free_pcp:12858 free_cma:0 [ 147.017258][ T8693] Node 0 active_anon:42912kB inactive_anon:4kB active_file:103568kB inactive_file:9156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119072kB dirty:748kB writeback:0kB shmem:880kB kernel_stack:3712kB pagetables:5068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.044603][ T8693] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.074423][ T8693] lowmem_reserve[]: 0 2883 7862 7862 [ 147.079845][ T8693] Node 0 DMA32 free:2949056kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2952688kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 147.111245][ T8693] lowmem_reserve[]: 0 0 4978 4978 [ 147.116375][ T8693] Node 0 Normal free:4450228kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42912kB inactive_anon:4kB active_file:103568kB inactive_file:9156kB unevictable:0kB writepending:748kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:47800kB local_pcp:27700kB free_cma:0kB [ 147.149436][ T8693] lowmem_reserve[]: 0 0 0 0 [ 147.154013][ T8693] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.166861][ T8693] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 4*16kB (M) 1*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949056kB [ 147.182984][ T8693] Node 0 Normal: 1016*4kB (ME) 916*8kB (UME) 694*16kB (ME) 383*32kB (UME) 158*64kB (UME) 113*128kB (UME) 30*256kB (UME) 29*512kB (UM) 34*1024kB (UME) 6*2048kB (UME) 1055*4096kB (UM) = 4450240kB [ 147.202341][ T8693] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 147.211644][ T8693] 28427 total pagecache pages [ 147.216330][ T8693] 1 pages in swap cache [ 147.220571][ T8693] Free swap = 124996kB [ 147.224717][ T8693] Total swap = 124996kB [ 147.228906][ T8693] 2097051 pages RAM [ 147.232753][ T8693] 0 pages HighMem/MovableOnly [ 147.237480][ T8693] 80479 pages reserved [ 147.290795][ T8711] loop5: detected capacity change from 0 to 128 [ 147.353968][ T8711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1802'. [ 147.456056][ T8716] can0: slcan on ttyS3. [ 147.551700][ T8717] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.639403][ T8697] can0 (unregistered): slcan off ttyS3. [ 147.702763][ T8723] loop0: detected capacity change from 0 to 1024 [ 147.736216][ T8723] EXT4-fs: Ignoring removed orlov option [ 147.755653][ T8723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.794897][ T8728] ref_ctr increment failed for inode: 0x5b8 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888103c2e780 [ 147.815492][ T8723] IPv6: sit1: Disabled Multicast RS [ 147.828325][ T8723] sit1: entered allmulticast mode [ 147.875666][ T8732] __nla_validate_parse: 1 callbacks suppressed [ 147.875684][ T8732] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1808'. [ 147.920733][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.963579][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 147.963587][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 147.999204][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.073547][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.195266][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.211829][ T8763] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 148.220095][ T8763] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 148.250020][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 148.258697][ T8764] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1816'. [ 148.278856][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.403965][ T8773] loop0: detected capacity change from 0 to 1024 [ 148.410581][ T8773] EXT4-fs: Ignoring removed orlov option [ 148.427200][ T8773] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.652868][ T3534] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 148.663521][ T3534] bond0 (unregistering): Released all slaves [ 148.675351][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 148.675402][ T29] audit: type=1400 audit(154.069:20232): avc: denied { write } for pid=8781 comm="syz.5.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 148.701588][ T8785] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1820'. [ 148.712448][ T3534] bond1 (unregistering): Released all slaves [ 148.724644][ T29] audit: type=1400 audit(154.122:20233): avc: denied { read } for pid=8781 comm="syz.5.1820" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.748549][ T29] audit: type=1400 audit(154.122:20234): avc: denied { open } for pid=8781 comm="syz.5.1820" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.772695][ T29] audit: type=1400 audit(154.122:20235): avc: denied { ioctl } for pid=8781 comm="syz.5.1820" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 148.831932][ T8773] IPv6: sit1: Disabled Multicast RS [ 148.838054][ T8773] sit1: entered allmulticast mode [ 148.849528][ T8780] can0: slcan on ttyS3. [ 148.853909][ T3534] tipc: Left network mode [ 148.940943][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.962510][ T3534] veth1_macvtap: left promiscuous mode [ 148.971352][ T29] audit: type=1400 audit(154.384:20236): avc: denied { write } for pid=8790 comm="syz.0.1822" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 148.974939][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1821'. [ 149.003350][ T3534] veth0_macvtap: left promiscuous mode [ 149.010358][ T3534] veth1_vlan: left promiscuous mode [ 149.017441][ T3534] veth0_vlan: left promiscuous mode [ 149.059518][ T8796] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1824'. [ 149.072759][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1821'. [ 149.141404][ T8759] lo speed is unknown, defaulting to 1000 [ 149.188069][ T8800] team0 (unregistering): Port device team_slave_0 removed [ 149.212795][ T8769] can0 (unregistered): slcan off ttyS3. [ 149.231862][ T8800] team0 (unregistering): Port device team_slave_1 removed [ 149.330779][ T8789] lo speed is unknown, defaulting to 1000 [ 149.364069][ T8807] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1827'. [ 149.408794][ T29] audit: type=1400 audit(154.836:20237): avc: denied { create } for pid=8806 comm="syz.6.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.428053][ T29] audit: type=1400 audit(154.836:20238): avc: denied { lock } for pid=8806 comm="syz.6.1827" path="socket:[24742]" dev="sockfs" ino=24742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.497386][ T8759] chnl_net:caif_netlink_parms(): no params data found [ 149.727297][ T8759] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.734442][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.754012][ T8759] bridge_slave_0: entered allmulticast mode [ 149.764069][ T8759] bridge_slave_0: entered promiscuous mode [ 149.772018][ T8759] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.779205][ T8759] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.859815][ T8759] bridge_slave_1: entered allmulticast mode [ 149.866545][ T8759] bridge_slave_1: entered promiscuous mode [ 150.067574][ T8803] Set syz1 is full, maxelem 65536 reached [ 150.101526][ T8759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.116572][ T8822] loop6: detected capacity change from 0 to 512 [ 150.123267][ T8822] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.131548][ T8759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.155983][ T29] audit: type=1326 audit(155.623:20239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 150.179223][ T29] audit: type=1326 audit(155.634:20240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 150.202144][ T29] audit: type=1326 audit(155.634:20241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8821 comm="syz.0.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 150.234390][ T8759] team0: Port device team_slave_0 added [ 150.250024][ T8822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.273132][ T8759] team0: Port device team_slave_1 added [ 150.317795][ T8827] lo speed is unknown, defaulting to 1000 [ 150.323887][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.330918][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.356896][ T8759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.442182][ T8759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.445516][ T8822] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 150.449337][ T8759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.449369][ T8759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.477902][ T8822] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 150.512678][ T8822] EXT4-fs (loop6): This should not happen!! Data will be lost [ 150.512678][ T8822] [ 150.522411][ T8822] EXT4-fs (loop6): Total free blocks count 0 [ 150.528498][ T8822] EXT4-fs (loop6): Free/Dirty block details [ 150.534406][ T8822] EXT4-fs (loop6): free_blocks=39626 [ 150.539737][ T8822] EXT4-fs (loop6): dirty_blocks=16 [ 150.544921][ T8822] EXT4-fs (loop6): Block reservation details [ 150.550944][ T8822] EXT4-fs (loop6): i_reserved_data_blocks=16 [ 150.570958][ T8759] hsr_slave_0: entered promiscuous mode [ 150.582129][ T8759] hsr_slave_1: entered promiscuous mode [ 150.600232][ T8759] debugfs: 'hsr0' already exists in 'hsr' [ 150.606035][ T8759] Cannot create hsr debugfs directory [ 150.684535][ T8834] vhci_hcd: invalid port number 255 [ 150.689901][ T8834] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 150.909429][ T8836] FAULT_INJECTION: forcing a failure. [ 150.909429][ T8836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.913553][ T8759] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 150.922548][ T8836] CPU: 1 UID: 0 PID: 8836 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.922582][ T8836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.922669][ T8836] Call Trace: [ 150.922678][ T8836] [ 150.922688][ T8836] __dump_stack+0x1d/0x30 [ 150.922721][ T8836] dump_stack_lvl+0xe8/0x140 [ 150.922749][ T8836] dump_stack+0x15/0x1b [ 150.922841][ T8836] should_fail_ex+0x265/0x280 [ 150.922892][ T8836] should_fail+0xb/0x20 [ 150.922936][ T8836] should_fail_usercopy+0x1a/0x20 [ 150.922966][ T8836] _copy_from_iter+0xd2/0xe80 [ 150.923068][ T8836] ? should_fail_ex+0xdb/0x280 [ 150.923133][ T8836] ? should_failslab+0x8c/0xb0 [ 150.923172][ T8836] ? __kmalloc_noprof+0x2a2/0x570 [ 150.923243][ T8836] ? kernfs_fop_write_iter+0xe2/0x300 [ 150.923293][ T8836] kernfs_fop_write_iter+0x125/0x300 [ 150.923373][ T8836] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 150.923471][ T8836] vfs_write+0x52a/0x960 [ 150.923499][ T8836] ksys_write+0xda/0x1a0 [ 150.923526][ T8836] __x64_sys_write+0x40/0x50 [ 150.923617][ T8836] x64_sys_call+0x2802/0x3000 [ 150.923649][ T8836] do_syscall_64+0xd2/0x200 [ 150.923684][ T8836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.923724][ T8836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.923756][ T8836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.923864][ T8836] RIP: 0033:0x7f58caf8eec9 [ 150.923903][ T8836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.923929][ T8836] RSP: 002b:00007f58c99f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.923956][ T8836] RAX: ffffffffffffffda RBX: 00007f58cb1e5fa0 RCX: 00007f58caf8eec9 [ 150.923975][ T8836] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000009 [ 150.923994][ T8836] RBP: 00007f58c99f7090 R08: 0000000000000000 R09: 0000000000000000 [ 150.924011][ T8836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.924029][ T8836] R13: 00007f58cb1e6038 R14: 00007f58cb1e5fa0 R15: 00007fffb9235c68 [ 150.924066][ T8836] [ 151.379443][ T8842] can0: slcan on ttyS3. [ 151.407712][ T8759] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 151.495898][ T8759] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 151.627988][ T8759] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 151.710063][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.723149][ T8759] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.793439][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.800556][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.810201][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.817498][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.831078][ T8839] can0 (unregistered): slcan off ttyS3. [ 151.836839][ T8859] loop6: detected capacity change from 0 to 1024 [ 151.894960][ T8859] EXT4-fs: Ignoring removed orlov option [ 151.912285][ T8759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.922761][ T8759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.000775][ T8859] IPv6: sit1: Disabled Multicast RS [ 152.008979][ T8859] sit1: entered allmulticast mode [ 152.125668][ T8879] serio: Serial port ptm0 [ 152.250292][ T8759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.266848][ T8873] lo speed is unknown, defaulting to 1000 [ 152.451570][ T8889] hub 2-0:1.0: USB hub found [ 152.459658][ T8889] hub 2-0:1.0: 8 ports detected [ 152.869649][ T8759] veth0_vlan: entered promiscuous mode [ 152.877595][ T8759] veth1_vlan: entered promiscuous mode [ 152.941165][ T8759] veth0_macvtap: entered promiscuous mode [ 152.964904][ T8759] veth1_macvtap: entered promiscuous mode [ 152.976630][ T8908] __nla_validate_parse: 6 callbacks suppressed [ 152.976662][ T8908] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1848'. [ 152.981651][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.019771][ T8759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.032359][ T3534] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.051572][ T3534] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.084848][ T31] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.128592][ T8919] loop6: detected capacity change from 0 to 1024 [ 153.135314][ T8919] EXT4-fs: Ignoring removed orlov option [ 153.141254][ T31] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.179128][ T8919] IPv6: sit1: Disabled Multicast RS [ 153.185305][ T8919] sit1: entered allmulticast mode [ 153.204654][ T8931] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 153.212941][ T8931] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 153.237685][ T8930] loop7: detected capacity change from 0 to 512 [ 153.366941][ T8937] can0: slcan on ttyS3. [ 153.407913][ T8934] loop5: detected capacity change from 0 to 512 [ 153.448886][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 153.448900][ T29] audit: type=1400 audit(159.087:20358): avc: denied { ioctl } for pid=8929 comm="syz.7.1854" path="/1/file0/cpu.stat" dev="loop7" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.692552][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1856'. [ 153.764425][ T8907] can0 (unregistered): slcan off ttyS3. [ 153.860701][ T29] audit: type=1400 audit(159.518:20359): avc: denied { setopt } for pid=8956 comm="syz.0.1860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 154.076818][ T8961] 9pnet: Could not find request transport: f [ 154.110544][ T8970] loop6: detected capacity change from 0 to 1024 [ 154.152315][ T8970] EXT4-fs: Ignoring removed orlov option [ 154.183380][ T29] audit: type=1326 audit(159.854:20360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.206412][ T29] audit: type=1326 audit(159.854:20361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.229358][ T29] audit: type=1326 audit(159.854:20362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.252283][ T29] audit: type=1326 audit(159.854:20363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.275189][ T29] audit: type=1326 audit(159.854:20364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.298084][ T29] audit: type=1326 audit(159.854:20365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.320991][ T29] audit: type=1326 audit(159.854:20366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.343978][ T29] audit: type=1326 audit(159.854:20367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8973 comm="syz.3.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc508e1eec9 code=0x7ffc0000 [ 154.455437][ T8977] loop3: detected capacity change from 0 to 512 [ 154.477347][ T8970] IPv6: sit1: Disabled Multicast RS [ 154.489212][ T8970] sit1: entered allmulticast mode [ 154.538077][ T8979] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1869'. [ 154.669713][ T8994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.740873][ T9000] netlink: 'syz.3.1875': attribute type 13 has an invalid length. [ 155.437884][ T9000] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.445219][ T9000] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.467065][ T9004] loop7: detected capacity change from 0 to 1024 [ 155.490691][ T9010] FAULT_INJECTION: forcing a failure. [ 155.490691][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 155.503505][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.0.1879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.503543][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.503561][ T9010] Call Trace: [ 155.503651][ T9010] [ 155.503661][ T9010] __dump_stack+0x1d/0x30 [ 155.503690][ T9010] dump_stack_lvl+0xe8/0x140 [ 155.503716][ T9010] dump_stack+0x15/0x1b [ 155.503786][ T9010] should_fail_ex+0x265/0x280 [ 155.503889][ T9010] should_failslab+0x8c/0xb0 [ 155.503951][ T9010] __kmalloc_noprof+0xa5/0x570 [ 155.504044][ T9010] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 155.504077][ T9010] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 155.504102][ T9010] genl_family_rcv_msg_doit+0x48/0x1b0 [ 155.504122][ T9010] ? selinux_capable+0x31/0x40 [ 155.504203][ T9010] ? security_capable+0x83/0x90 [ 155.504241][ T9010] ? ns_capable+0x7d/0xb0 [ 155.504273][ T9010] genl_rcv_msg+0x422/0x460 [ 155.504301][ T9010] ? __pfx_mptcp_pm_nl_flush_addrs_doit+0x10/0x10 [ 155.504345][ T9010] netlink_rcv_skb+0x123/0x220 [ 155.504377][ T9010] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.504404][ T9010] genl_rcv+0x28/0x40 [ 155.504422][ T9010] netlink_unicast+0x5c0/0x690 [ 155.504471][ T9010] netlink_sendmsg+0x58b/0x6b0 [ 155.504593][ T9010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.504642][ T9010] __sock_sendmsg+0x145/0x180 [ 155.504671][ T9010] ____sys_sendmsg+0x31e/0x4e0 [ 155.504753][ T9010] ___sys_sendmsg+0x17b/0x1d0 [ 155.504867][ T9010] __x64_sys_sendmsg+0xd4/0x160 [ 155.504913][ T9010] x64_sys_call+0x191e/0x3000 [ 155.504944][ T9010] do_syscall_64+0xd2/0x200 [ 155.505034][ T9010] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.505077][ T9010] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.505108][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.505138][ T9010] RIP: 0033:0x7fa69a42eec9 [ 155.505212][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.505238][ T9010] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.505265][ T9010] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 155.505280][ T9010] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000003 [ 155.505292][ T9010] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.505344][ T9010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.505361][ T9010] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 155.505386][ T9010] [ 155.766599][ T9004] EXT4-fs mount: 13 callbacks suppressed [ 155.766634][ T9004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.838354][ T9004] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1876: bg 0: block 393: padding at end of block bitmap is not set [ 155.855608][ T9014] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 155.883333][ T9004] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 155.895955][ T9004] EXT4-fs (loop7): This should not happen!! Data will be lost [ 155.895955][ T9004] [ 155.948538][ T3534] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.957548][ T3534] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.978150][ T3534] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.987168][ T3534] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.996179][ T8988] lo speed is unknown, defaulting to 1000 [ 155.999239][ T3534] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.010824][ T3534] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.020385][ T3534] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.029591][ T3534] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.073895][ T8759] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.151935][ T9026] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1884'. [ 156.165068][ T9032] FAULT_INJECTION: forcing a failure. [ 156.165068][ T9032] name failslab, interval 1, probability 0, space 0, times 0 [ 156.177757][ T9032] CPU: 0 UID: 0 PID: 9032 Comm: syz.7.1886 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.177792][ T9032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.177810][ T9032] Call Trace: [ 156.177818][ T9032] [ 156.177826][ T9032] __dump_stack+0x1d/0x30 [ 156.177848][ T9032] dump_stack_lvl+0xe8/0x140 [ 156.177941][ T9032] dump_stack+0x15/0x1b [ 156.177958][ T9032] should_fail_ex+0x265/0x280 [ 156.177994][ T9032] should_failslab+0x8c/0xb0 [ 156.178023][ T9032] kmem_cache_alloc_noprof+0x50/0x480 [ 156.178058][ T9032] ? audit_log_start+0x342/0x720 [ 156.178079][ T9032] audit_log_start+0x342/0x720 [ 156.178101][ T9032] audit_seccomp+0x48/0x100 [ 156.178148][ T9032] ? __seccomp_filter+0x82d/0x1250 [ 156.178175][ T9032] __seccomp_filter+0x83e/0x1250 [ 156.178212][ T9032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.178243][ T9032] ? vfs_write+0x7e8/0x960 [ 156.178268][ T9032] ? __rcu_read_unlock+0x4f/0x70 [ 156.178309][ T9032] ? __rcu_read_unlock+0x4f/0x70 [ 156.178347][ T9032] ? up_write+0x18/0x60 [ 156.178374][ T9032] __secure_computing+0x82/0x150 [ 156.178401][ T9032] syscall_trace_enter+0xcf/0x1e0 [ 156.178489][ T9032] do_syscall_64+0xac/0x200 [ 156.178558][ T9032] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.178593][ T9032] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.178615][ T9032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.178637][ T9032] RIP: 0033:0x7f75992fd8dc [ 156.178723][ T9032] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.178741][ T9032] RSP: 002b:00007f7597d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.178761][ T9032] RAX: ffffffffffffffda RBX: 00007f7599555fa0 RCX: 00007f75992fd8dc [ 156.178774][ T9032] RDX: 000000000000000f RSI: 00007f7597d5f0a0 RDI: 0000000000000005 [ 156.178786][ T9032] RBP: 00007f7597d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.178798][ T9032] R10: 0000200000ff9000 R11: 0000000000000246 R12: 0000000000000001 [ 156.178810][ T9032] R13: 00007f7599556038 R14: 00007f7599555fa0 R15: 00007ffcb0e97548 [ 156.178931][ T9032] [ 156.433997][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1889'. [ 156.520524][ T9041] FAULT_INJECTION: forcing a failure. [ 156.520524][ T9041] name failslab, interval 1, probability 0, space 0, times 0 [ 156.533366][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.3.1890 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.533403][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.533419][ T9041] Call Trace: [ 156.533428][ T9041] [ 156.533479][ T9041] __dump_stack+0x1d/0x30 [ 156.533531][ T9041] dump_stack_lvl+0xe8/0x140 [ 156.533554][ T9041] dump_stack+0x15/0x1b [ 156.533576][ T9041] should_fail_ex+0x265/0x280 [ 156.533742][ T9041] should_failslab+0x8c/0xb0 [ 156.533769][ T9041] kmem_cache_alloc_noprof+0x50/0x480 [ 156.533851][ T9041] ? audit_log_start+0x342/0x720 [ 156.533877][ T9041] audit_log_start+0x342/0x720 [ 156.533906][ T9041] audit_seccomp+0x48/0x100 [ 156.534054][ T9041] ? __seccomp_filter+0x82d/0x1250 [ 156.534088][ T9041] __seccomp_filter+0x83e/0x1250 [ 156.534131][ T9041] __secure_computing+0x82/0x150 [ 156.534236][ T9041] syscall_trace_enter+0xcf/0x1e0 [ 156.534272][ T9041] do_syscall_64+0xac/0x200 [ 156.534298][ T9041] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.534341][ T9041] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.534371][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.534399][ T9041] RIP: 0033:0x7fc508e1d8dc [ 156.534457][ T9041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 156.534475][ T9041] RSP: 002b:00007fc507887030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.534535][ T9041] RAX: ffffffffffffffda RBX: 00007fc509075fa0 RCX: 00007fc508e1d8dc [ 156.534551][ T9041] RDX: 000000000000000f RSI: 00007fc5078870a0 RDI: 0000000000000006 [ 156.534564][ T9041] RBP: 00007fc507887090 R08: 0000000000000000 R09: 0000000000000000 [ 156.534577][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.534593][ T9041] R13: 00007fc509076038 R14: 00007fc509075fa0 R15: 00007fffdd73ba78 [ 156.534620][ T9041] [ 156.736522][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1887'. [ 156.772799][ T9049] FAULT_INJECTION: forcing a failure. [ 156.772799][ T9049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.785953][ T9049] CPU: 1 UID: 0 PID: 9049 Comm: syz.7.1894 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.785982][ T9049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.786053][ T9049] Call Trace: [ 156.786059][ T9049] [ 156.786068][ T9049] __dump_stack+0x1d/0x30 [ 156.786090][ T9049] dump_stack_lvl+0xe8/0x140 [ 156.786110][ T9049] dump_stack+0x15/0x1b [ 156.786127][ T9049] should_fail_ex+0x265/0x280 [ 156.786179][ T9049] should_fail+0xb/0x20 [ 156.786218][ T9049] should_fail_usercopy+0x1a/0x20 [ 156.786309][ T9049] strncpy_from_user+0x25/0x230 [ 156.786337][ T9049] ? audit_log_end+0x23d/0x250 [ 156.786436][ T9049] path_setxattrat+0xeb/0x310 [ 156.786549][ T9049] __x64_sys_fsetxattr+0x6b/0x80 [ 156.786617][ T9049] x64_sys_call+0x1ced/0x3000 [ 156.786639][ T9049] do_syscall_64+0xd2/0x200 [ 156.786665][ T9049] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.786694][ T9049] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.786762][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.786785][ T9049] RIP: 0033:0x7f75992feec9 [ 156.786801][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.786887][ T9049] RSP: 002b:00007f7597d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 156.786907][ T9049] RAX: ffffffffffffffda RBX: 00007f7599555fa0 RCX: 00007f75992feec9 [ 156.786920][ T9049] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 156.786933][ T9049] RBP: 00007f7597d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.786946][ T9049] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 156.786959][ T9049] R13: 00007f7599556038 R14: 00007f7599555fa0 R15: 00007ffcb0e97548 [ 156.786979][ T9049] [ 156.997309][ T9054] mmap: +}[@ (9054) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.041140][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1898'. [ 157.243264][ T9070] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1902'. [ 157.624194][ T9072] macvtap1: entered allmulticast mode [ 157.629653][ T9072] veth0_macvtap: entered allmulticast mode [ 157.636898][ T9083] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 157.645124][ T9083] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 157.894678][ T9102] FAULT_INJECTION: forcing a failure. [ 157.894678][ T9102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.901824][ T9098] loop7: detected capacity change from 0 to 1024 [ 157.907823][ T9102] CPU: 0 UID: 0 PID: 9102 Comm: syz.5.1910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.907896][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.907912][ T9102] Call Trace: [ 157.907919][ T9102] [ 157.907962][ T9102] __dump_stack+0x1d/0x30 [ 157.907987][ T9102] dump_stack_lvl+0xe8/0x140 [ 157.908052][ T9102] dump_stack+0x15/0x1b [ 157.908075][ T9102] should_fail_ex+0x265/0x280 [ 157.908182][ T9102] should_fail+0xb/0x20 [ 157.908228][ T9102] should_fail_usercopy+0x1a/0x20 [ 157.908266][ T9102] _copy_from_user+0x1c/0xb0 [ 157.908303][ T9102] __sys_sendto+0x19e/0x330 [ 157.908356][ T9102] __x64_sys_sendto+0x76/0x90 [ 157.908466][ T9102] x64_sys_call+0x2d14/0x3000 [ 157.908552][ T9102] do_syscall_64+0xd2/0x200 [ 157.908597][ T9102] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.908638][ T9102] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.908669][ T9102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.908736][ T9102] RIP: 0033:0x7fcb670eeec9 [ 157.908781][ T9102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.908885][ T9102] RSP: 002b:00007fcb65b57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 157.908913][ T9102] RAX: ffffffffffffffda RBX: 00007fcb67345fa0 RCX: 00007fcb670eeec9 [ 157.908931][ T9102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 157.908948][ T9102] RBP: 00007fcb65b57090 R08: 0000200000000000 R09: 0000000000000010 [ 157.908966][ T9102] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 157.908984][ T9102] R13: 00007fcb67346038 R14: 00007fcb67345fa0 R15: 00007fff8a0e2818 [ 157.909064][ T9102] [ 158.086384][ T9098] EXT4-fs: Ignoring removed bh option [ 158.092076][ T9098] EXT4-fs: inline encryption not supported [ 158.098782][ T9098] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.124179][ T9098] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1909: lblock 2 mapped to illegal pblock 2 (length 1) [ 158.142128][ T9098] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1909: lblock 0 mapped to illegal pblock 48 (length 1) [ 158.184490][ T9098] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1909: Failed to acquire dquot type 0 [ 158.198007][ T9098] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 158.208314][ T9098] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1909: mark_inode_dirty error [ 158.219921][ T9098] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 158.230568][ T9098] EXT4-fs (loop7): 1 orphan inode deleted [ 158.236938][ T9098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.249541][ T3534] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 158.263926][ T3534] __quota_error: 160 callbacks suppressed [ 158.263944][ T3534] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 158.278185][ T3534] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 158.292599][ T9098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.302027][ T9098] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.1909: Invalid inode table block 1 in block_group 0 [ 158.315167][ T9098] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 158.346342][ T9098] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz.7.1909: mark_inode_dirty error [ 158.492846][ T9141] FAULT_INJECTION: forcing a failure. [ 158.492846][ T9141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.506118][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.0.1923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.506155][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.506217][ T9141] Call Trace: [ 158.506225][ T9141] [ 158.506234][ T9141] __dump_stack+0x1d/0x30 [ 158.506280][ T9141] dump_stack_lvl+0xe8/0x140 [ 158.506300][ T9141] dump_stack+0x15/0x1b [ 158.506316][ T9141] should_fail_ex+0x265/0x280 [ 158.506419][ T9141] should_fail+0xb/0x20 [ 158.506475][ T9141] should_fail_usercopy+0x1a/0x20 [ 158.506502][ T9141] _copy_from_user+0x1c/0xb0 [ 158.506593][ T9141] ___sys_sendmsg+0xc1/0x1d0 [ 158.506638][ T9141] __x64_sys_sendmsg+0xd4/0x160 [ 158.506738][ T9141] x64_sys_call+0x191e/0x3000 [ 158.506768][ T9141] do_syscall_64+0xd2/0x200 [ 158.506800][ T9141] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.506832][ T9141] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.506915][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.506944][ T9141] RIP: 0033:0x7fa69a42eec9 [ 158.506964][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.506989][ T9141] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.507015][ T9141] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 158.507033][ T9141] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 158.507116][ T9141] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.507128][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.507140][ T9141] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 158.507160][ T9141] [ 158.773941][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1926'. [ 158.861158][ T29] audit: type=1326 audit(164.777:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 158.888014][ T9151] FAULT_INJECTION: forcing a failure. [ 158.888014][ T9151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.901185][ T9151] CPU: 1 UID: 0 PID: 9151 Comm: syz.0.1928 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.901253][ T9151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.901265][ T9151] Call Trace: [ 158.901279][ T9151] [ 158.901304][ T9151] __dump_stack+0x1d/0x30 [ 158.901326][ T9151] dump_stack_lvl+0xe8/0x140 [ 158.901352][ T9151] dump_stack+0x15/0x1b [ 158.901372][ T9151] should_fail_ex+0x265/0x280 [ 158.901407][ T9151] should_fail+0xb/0x20 [ 158.901523][ T9151] should_fail_usercopy+0x1a/0x20 [ 158.901581][ T9151] strncpy_from_user+0x25/0x230 [ 158.901618][ T9151] ? audit_log_end+0x23d/0x250 [ 158.901661][ T9151] path_setxattrat+0xeb/0x310 [ 158.901716][ T9151] __x64_sys_fsetxattr+0x6b/0x80 [ 158.901751][ T9151] x64_sys_call+0x1ced/0x3000 [ 158.901774][ T9151] do_syscall_64+0xd2/0x200 [ 158.901823][ T9151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.901922][ T9151] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.901952][ T9151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.902032][ T9151] RIP: 0033:0x7fa69a42eec9 [ 158.902100][ T9151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.902154][ T9151] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 158.902178][ T9151] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 158.902190][ T9151] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000006 [ 158.902206][ T9151] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 158.902223][ T9151] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 158.902285][ T9151] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 158.902304][ T9151] [ 159.083423][ T29] audit: type=1326 audit(164.798:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.7.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 159.106689][ T29] audit: type=1326 audit(164.798:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.7.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 159.129767][ T29] audit: type=1326 audit(164.798:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 159.142399][ T9154] lo speed is unknown, defaulting to 1000 [ 159.152703][ T29] audit: type=1326 audit(164.798:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 159.181227][ T29] audit: type=1326 audit(164.798:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa69a42d710 code=0x7ffc0000 [ 159.204268][ T29] audit: type=1326 audit(164.798:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa69a42d97f code=0x7ffc0000 [ 159.227062][ T29] audit: type=1326 audit(164.798:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9150 comm="syz.0.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fa69a42eec9 code=0x7ffc0000 [ 159.250036][ T29] audit: type=1326 audit(164.809:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9149 comm="syz.7.1929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 159.280254][ T9158] FAULT_INJECTION: forcing a failure. [ 159.280254][ T9158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.293365][ T9158] CPU: 0 UID: 0 PID: 9158 Comm: syz.7.1930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.293403][ T9158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.293418][ T9158] Call Trace: [ 159.293460][ T9158] [ 159.293470][ T9158] __dump_stack+0x1d/0x30 [ 159.293499][ T9158] dump_stack_lvl+0xe8/0x140 [ 159.293526][ T9158] dump_stack+0x15/0x1b [ 159.293543][ T9158] should_fail_ex+0x265/0x280 [ 159.293590][ T9158] should_fail+0xb/0x20 [ 159.293638][ T9158] should_fail_usercopy+0x1a/0x20 [ 159.293690][ T9158] _copy_to_user+0x20/0xa0 [ 159.293716][ T9158] simple_read_from_buffer+0xb5/0x130 [ 159.293749][ T9158] proc_fail_nth_read+0x10e/0x150 [ 159.293858][ T9158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.293898][ T9158] vfs_read+0x1a8/0x770 [ 159.293926][ T9158] ? __rcu_read_unlock+0x4f/0x70 [ 159.294031][ T9158] ? __fget_files+0x184/0x1c0 [ 159.294132][ T9158] ksys_read+0xda/0x1a0 [ 159.294162][ T9158] __x64_sys_read+0x40/0x50 [ 159.294185][ T9158] x64_sys_call+0x27c0/0x3000 [ 159.294212][ T9158] do_syscall_64+0xd2/0x200 [ 159.294270][ T9158] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 159.294309][ T9158] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 159.294338][ T9158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.294368][ T9158] RIP: 0033:0x7f75992fd8dc [ 159.294390][ T9158] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 159.294415][ T9158] RSP: 002b:00007f7597d5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.294481][ T9158] RAX: ffffffffffffffda RBX: 00007f7599555fa0 RCX: 00007f75992fd8dc [ 159.294498][ T9158] RDX: 000000000000000f RSI: 00007f7597d5f0a0 RDI: 0000000000000005 [ 159.294515][ T9158] RBP: 00007f7597d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 159.294577][ T9158] R10: 000000000000001e R11: 0000000000000246 R12: 0000000000000001 [ 159.294595][ T9158] R13: 00007f7599556038 R14: 00007f7599555fa0 R15: 00007ffcb0e97548 [ 159.294620][ T9158] [ 159.696610][ T9167] hub 2-0:1.0: USB hub found [ 159.710635][ T9167] hub 2-0:1.0: 8 ports detected [ 159.881746][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1939'. [ 160.065885][ T9197] loop6: detected capacity change from 0 to 512 [ 160.147892][ T9197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.327357][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.390391][ T9204] loop5: detected capacity change from 0 to 8192 [ 160.416611][ T9206] hub 2-0:1.0: USB hub found [ 160.421365][ T9206] FAULT_INJECTION: forcing a failure. [ 160.421365][ T9206] name failslab, interval 1, probability 0, space 0, times 0 [ 160.434035][ T9206] CPU: 1 UID: 0 PID: 9206 Comm: syz.6.1945 Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.434071][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.434089][ T9206] Call Trace: [ 160.434097][ T9206] [ 160.434107][ T9206] __dump_stack+0x1d/0x30 [ 160.434195][ T9206] dump_stack_lvl+0xe8/0x140 [ 160.434221][ T9206] dump_stack+0x15/0x1b [ 160.434239][ T9206] should_fail_ex+0x265/0x280 [ 160.434274][ T9206] ? hub_probe+0x796/0x1700 [ 160.434383][ T9206] should_failslab+0x8c/0xb0 [ 160.434419][ T9206] __kmalloc_cache_noprof+0x4c/0x4a0 [ 160.434470][ T9206] hub_probe+0x796/0x1700 [ 160.434506][ T9206] ? read_tsc+0x9/0x20 [ 160.434523][ T9206] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 160.434565][ T9206] usb_probe_interface+0x47c/0x700 [ 160.434619][ T9206] ? __pfx_usb_probe_interface+0x10/0x10 [ 160.434647][ T9206] really_probe+0x1bf/0x5c0 [ 160.434670][ T9206] __driver_probe_device+0x121/0x190 [ 160.434695][ T9206] driver_probe_device+0x37/0x2f0 [ 160.434742][ T9206] __device_attach_driver+0x205/0x310 [ 160.434763][ T9206] ? __pfx___device_attach_driver+0x10/0x10 [ 160.434823][ T9206] bus_for_each_drv+0x1c0/0x230 [ 160.434943][ T9206] __device_attach+0x1c7/0x290 [ 160.435029][ T9206] device_attach+0x17/0x20 [ 160.435053][ T9206] proc_ioctl+0x2f7/0x400 [ 160.435087][ T9206] proc_ioctl_default+0x71/0xa0 [ 160.435118][ T9206] usbdev_ioctl+0xe8b/0x1700 [ 160.435157][ T9206] ? __pfx_usbdev_ioctl+0x10/0x10 [ 160.435187][ T9206] __se_sys_ioctl+0xce/0x140 [ 160.435258][ T9206] __x64_sys_ioctl+0x43/0x50 [ 160.435336][ T9206] x64_sys_call+0x1816/0x3000 [ 160.435365][ T9206] do_syscall_64+0xd2/0x200 [ 160.435392][ T9206] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.435491][ T9206] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.435521][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.435549][ T9206] RIP: 0033:0x7f58caf8eec9 [ 160.435565][ T9206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.435591][ T9206] RSP: 002b:00007f58c99f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.435617][ T9206] RAX: ffffffffffffffda RBX: 00007f58cb1e5fa0 RCX: 00007f58caf8eec9 [ 160.435629][ T9206] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 160.435642][ T9206] RBP: 00007f58c99f7090 R08: 0000000000000000 R09: 0000000000000000 [ 160.435654][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.435684][ T9206] R13: 00007f58cb1e6038 R14: 00007f58cb1e5fa0 R15: 00007fffb9235c68 [ 160.435753][ T9206] [ 160.435764][ T9206] hub 2-0:1.0: config failed, out of memory (err -12) [ 160.782230][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1949'. [ 160.796931][ T9218] gre1: entered promiscuous mode [ 160.860165][ T9230] FAULT_INJECTION: forcing a failure. [ 160.860165][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 160.872937][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 160.872964][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.872980][ T9230] Call Trace: [ 160.872988][ T9230] [ 160.872997][ T9230] __dump_stack+0x1d/0x30 [ 160.873028][ T9230] dump_stack_lvl+0xe8/0x140 [ 160.873048][ T9230] dump_stack+0x15/0x1b [ 160.873064][ T9230] should_fail_ex+0x265/0x280 [ 160.873108][ T9230] should_failslab+0x8c/0xb0 [ 160.873145][ T9230] kmem_cache_alloc_noprof+0x50/0x480 [ 160.873237][ T9230] ? audit_log_start+0x342/0x720 [ 160.873264][ T9230] audit_log_start+0x342/0x720 [ 160.873288][ T9230] ? kstrtouint+0x76/0xc0 [ 160.873327][ T9230] audit_seccomp+0x48/0x100 [ 160.873417][ T9230] ? __seccomp_filter+0x82d/0x1250 [ 160.873447][ T9230] __seccomp_filter+0x83e/0x1250 [ 160.873483][ T9230] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 160.873530][ T9230] ? vfs_write+0x7e8/0x960 [ 160.873637][ T9230] __secure_computing+0x82/0x150 [ 160.873672][ T9230] syscall_trace_enter+0xcf/0x1e0 [ 160.873742][ T9230] do_syscall_64+0xac/0x200 [ 160.873847][ T9230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 160.873887][ T9230] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 160.873923][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.873952][ T9230] RIP: 0033:0x7fc508e1eec9 [ 160.873967][ T9230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.873985][ T9230] RSP: 002b:00007fc507887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 160.874005][ T9230] RAX: ffffffffffffffda RBX: 00007fc509075fa0 RCX: 00007fc508e1eec9 [ 160.874020][ T9230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.874111][ T9230] RBP: 00007fc507887090 R08: 0000000000000000 R09: 0000000000000000 [ 160.874128][ T9230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.874144][ T9230] R13: 00007fc509076038 R14: 00007fc509075fa0 R15: 00007fffdd73ba78 [ 160.874206][ T9230] [ 161.147883][ T9241] loop6: detected capacity change from 0 to 512 [ 161.157283][ T9241] EXT4-fs (loop6): orphan cleanup on readonly fs [ 161.164294][ T9241] EXT4-fs error (device loop6): ext4_quota_enable:7136: comm syz.6.1956: inode #218103808: comm syz.6.1956: iget: illegal inode # [ 161.181280][ T9241] EXT4-fs error (device loop6): ext4_quota_enable:7139: comm syz.6.1956: Bad quota inode: 218103808, type: 2 [ 161.194598][ T9241] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 161.228020][ T9241] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 161.240546][ T9241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.426254][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.595353][ T9255] hub 2-0:1.0: USB hub found [ 161.600070][ T9255] hub 2-0:1.0: 8 ports detected [ 162.009684][ T9267] pimreg: entered allmulticast mode [ 162.015172][ T9266] pimreg: left allmulticast mode [ 162.073087][ T9269] FAULT_INJECTION: forcing a failure. [ 162.073087][ T9269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.086305][ T9269] CPU: 1 UID: 0 PID: 9269 Comm: syz.3.1965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.086335][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.086348][ T9269] Call Trace: [ 162.086406][ T9269] [ 162.086413][ T9269] __dump_stack+0x1d/0x30 [ 162.086436][ T9269] dump_stack_lvl+0xe8/0x140 [ 162.086460][ T9269] dump_stack+0x15/0x1b [ 162.086477][ T9269] should_fail_ex+0x265/0x280 [ 162.086568][ T9269] should_fail+0xb/0x20 [ 162.086599][ T9269] should_fail_usercopy+0x1a/0x20 [ 162.086620][ T9269] _copy_from_user+0x1c/0xb0 [ 162.086711][ T9269] do_ipt_set_ctl+0x3a0/0x820 [ 162.086769][ T9269] ? _raw_spin_unlock_bh+0x36/0x40 [ 162.086800][ T9269] ? tcp_release_cb+0xf1/0x370 [ 162.086836][ T9269] nf_setsockopt+0x199/0x1b0 [ 162.086912][ T9269] ip_setsockopt+0x102/0x110 [ 162.086947][ T9269] tcp_setsockopt+0x98/0xb0 [ 162.087045][ T9269] sock_common_setsockopt+0x69/0x80 [ 162.087080][ T9269] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 162.087102][ T9269] __sys_setsockopt+0x184/0x200 [ 162.087205][ T9269] __x64_sys_setsockopt+0x64/0x80 [ 162.087240][ T9269] x64_sys_call+0x20ec/0x3000 [ 162.087309][ T9269] do_syscall_64+0xd2/0x200 [ 162.087358][ T9269] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.087388][ T9269] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.087414][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.087523][ T9269] RIP: 0033:0x7fc508e1eec9 [ 162.087538][ T9269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.087556][ T9269] RSP: 002b:00007fc507887038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.087581][ T9269] RAX: ffffffffffffffda RBX: 00007fc509075fa0 RCX: 00007fc508e1eec9 [ 162.087597][ T9269] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 162.087609][ T9269] RBP: 00007fc507887090 R08: 0000000000000500 R09: 0000000000000000 [ 162.087622][ T9269] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 162.087634][ T9269] R13: 00007fc509076038 R14: 00007fc509075fa0 R15: 00007fffdd73ba78 [ 162.087692][ T9269] [ 162.369474][ T9274] loop3: detected capacity change from 0 to 512 [ 162.412858][ T9274] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.436521][ T9274] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 162.451464][ T9274] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 162.463771][ T9274] EXT4-fs (loop3): This should not happen!! Data will be lost [ 162.463771][ T9274] [ 162.473547][ T9274] EXT4-fs (loop3): Total free blocks count 0 [ 162.479619][ T9274] EXT4-fs (loop3): Free/Dirty block details [ 162.485559][ T9274] EXT4-fs (loop3): free_blocks=65280 [ 162.491015][ T9274] EXT4-fs (loop3): dirty_blocks=33 [ 162.496139][ T9274] EXT4-fs (loop3): Block reservation details [ 162.502158][ T9274] EXT4-fs (loop3): i_reserved_data_blocks=33 [ 162.526370][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1969'. [ 162.569522][ T9282] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1969'. [ 162.594510][ T9293] netlink: 'syz.3.1967': attribute type 4 has an invalid length. [ 162.604463][ T9293] netlink: 'syz.3.1967': attribute type 4 has an invalid length. [ 162.734583][ T9303] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 162.742840][ T9303] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 162.760304][ T9304] loop6: detected capacity change from 0 to 1024 [ 162.767141][ T9304] EXT4-fs: Ignoring removed orlov option [ 162.778063][ T9304] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 162.809152][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.830177][ T9312] sd 0:0:1:0: device reset [ 162.902158][ T9313] can0: slcan on ttyS3. [ 163.187762][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.302124][ T9327] loop6: detected capacity change from 0 to 1024 [ 163.309135][ T9327] EXT4-fs: Ignoring removed bh option [ 163.315192][ T9327] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 163.348869][ T9327] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.431407][ T9335] FAULT_INJECTION: forcing a failure. [ 163.431407][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.444790][ T9335] CPU: 0 UID: 0 PID: 9335 Comm: syz.0.1986 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.444841][ T9335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.444859][ T9335] Call Trace: [ 163.444879][ T9335] [ 163.444889][ T9335] __dump_stack+0x1d/0x30 [ 163.444917][ T9335] dump_stack_lvl+0xe8/0x140 [ 163.444985][ T9335] dump_stack+0x15/0x1b [ 163.445006][ T9335] should_fail_ex+0x265/0x280 [ 163.445091][ T9335] should_fail+0xb/0x20 [ 163.445171][ T9335] should_fail_usercopy+0x1a/0x20 [ 163.445198][ T9335] _copy_to_user+0x20/0xa0 [ 163.445232][ T9335] simple_read_from_buffer+0xb5/0x130 [ 163.445331][ T9335] proc_fail_nth_read+0x10e/0x150 [ 163.445371][ T9335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.445410][ T9335] vfs_read+0x1a8/0x770 [ 163.445456][ T9335] ? __rcu_read_unlock+0x4f/0x70 [ 163.445490][ T9335] ? __fget_files+0x184/0x1c0 [ 163.445593][ T9335] ksys_read+0xda/0x1a0 [ 163.445624][ T9335] __x64_sys_read+0x40/0x50 [ 163.445662][ T9335] x64_sys_call+0x27c0/0x3000 [ 163.445692][ T9335] do_syscall_64+0xd2/0x200 [ 163.445768][ T9335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.445797][ T9335] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.445820][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.445843][ T9335] RIP: 0033:0x7fa69a42d8dc [ 163.445935][ T9335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.445996][ T9335] RSP: 002b:00007fa698e8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.446073][ T9335] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42d8dc [ 163.446086][ T9335] RDX: 000000000000000f RSI: 00007fa698e8f0a0 RDI: 0000000000000006 [ 163.446099][ T9335] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.446111][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.446124][ T9335] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 163.446144][ T9335] [ 163.665063][ T9338] 9pnet_fd: Insufficient options for proto=fd [ 163.688056][ T9341] loop7: detected capacity change from 0 to 256 [ 163.707760][ T9341] FAT-fs (loop7): codepage cp862 not found [ 163.713822][ T9300] can0 (unregistered): slcan off ttyS3. [ 163.717419][ T9341] loop7: detected capacity change from 0 to 128 [ 163.797543][ T9349] FAULT_INJECTION: forcing a failure. [ 163.797543][ T9349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.810718][ T9349] CPU: 0 UID: 0 PID: 9349 Comm: syz.0.1990 Not tainted syzkaller #0 PREEMPT(voluntary) [ 163.810824][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.810838][ T9349] Call Trace: [ 163.810846][ T9349] [ 163.810854][ T9349] __dump_stack+0x1d/0x30 [ 163.810874][ T9349] dump_stack_lvl+0xe8/0x140 [ 163.810893][ T9349] dump_stack+0x15/0x1b [ 163.810909][ T9349] should_fail_ex+0x265/0x280 [ 163.811027][ T9349] should_fail+0xb/0x20 [ 163.811058][ T9349] should_fail_usercopy+0x1a/0x20 [ 163.811145][ T9349] _copy_to_user+0x20/0xa0 [ 163.811180][ T9349] simple_read_from_buffer+0xb5/0x130 [ 163.811276][ T9349] proc_fail_nth_read+0x10e/0x150 [ 163.811316][ T9349] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.811353][ T9349] vfs_read+0x1a8/0x770 [ 163.811374][ T9349] ? __rcu_read_unlock+0x4f/0x70 [ 163.811451][ T9349] ? __fget_files+0x184/0x1c0 [ 163.811483][ T9349] ksys_read+0xda/0x1a0 [ 163.811510][ T9349] __x64_sys_read+0x40/0x50 [ 163.811533][ T9349] x64_sys_call+0x27c0/0x3000 [ 163.811616][ T9349] do_syscall_64+0xd2/0x200 [ 163.811648][ T9349] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.811685][ T9349] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.811707][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.811762][ T9349] RIP: 0033:0x7fa69a42d8dc [ 163.811849][ T9349] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 163.811867][ T9349] RSP: 002b:00007fa698e8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.811887][ T9349] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42d8dc [ 163.811904][ T9349] RDX: 000000000000000f RSI: 00007fa698e8f0a0 RDI: 0000000000000004 [ 163.811922][ T9349] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.812010][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.812024][ T9349] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 163.812051][ T9349] [ 163.813531][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1991'. [ 163.933062][ T9352] bond0: Removing last ns target with arp_interval on [ 163.945833][ T3534] bond0: (slave bond_slave_0): interface is now down [ 164.034871][ T3534] bond0: (slave bond_slave_1): interface is now down [ 164.055641][ T3534] bond0: now running without any active interface! [ 164.118941][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 164.118960][ T29] audit: type=1400 audit(170.278:20636): avc: denied { firmware_load } for pid=9353 comm="syz.0.1992" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 164.215542][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.228811][ T9365] sd 0:0:1:0: device reset [ 164.267667][ T29] audit: type=1400 audit(170.446:20637): avc: denied { accept } for pid=9367 comm="syz.6.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 164.317363][ T9370] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1998'. [ 164.556420][ T9378] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2001'. [ 164.634885][ T9360] Set syz1 is full, maxelem 65536 reached [ 164.668477][ T29] audit: type=1400 audit(170.866:20638): avc: denied { getopt } for pid=9386 comm="syz.7.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.719283][ T9393] FAULT_INJECTION: forcing a failure. [ 164.719283][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 164.732035][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.7.2007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.732064][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.732077][ T9393] Call Trace: [ 164.732084][ T9393] [ 164.732143][ T9393] __dump_stack+0x1d/0x30 [ 164.732164][ T9393] dump_stack_lvl+0xe8/0x140 [ 164.732183][ T9393] dump_stack+0x15/0x1b [ 164.732199][ T9393] should_fail_ex+0x265/0x280 [ 164.732308][ T9393] ? assoc_array_delete+0x58/0x950 [ 164.732332][ T9393] should_failslab+0x8c/0xb0 [ 164.732415][ T9393] __kmalloc_cache_noprof+0x4c/0x4a0 [ 164.732533][ T9393] assoc_array_delete+0x58/0x950 [ 164.732565][ T9393] ? security_key_permission+0x27/0x80 [ 164.732618][ T9393] ? key_task_permission+0x2ac/0x2c0 [ 164.732724][ T9393] ? key_validate+0xad/0xd0 [ 164.732776][ T9393] key_move+0x11a/0x550 [ 164.732853][ T9393] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 164.732875][ T9393] ? __pfx_keyring_search_iterator+0x10/0x10 [ 164.732909][ T9393] keyctl_keyring_move+0xd6/0x110 [ 164.733014][ T9393] __se_sys_keyctl+0x5f7/0xb80 [ 164.733126][ T9393] ? __rcu_read_unlock+0x4f/0x70 [ 164.733160][ T9393] ? bpf_trace_run2+0x124/0x1c0 [ 164.733201][ T9393] ? __bpf_trace_sys_enter+0x10/0x30 [ 164.733266][ T9393] __x64_sys_keyctl+0x67/0x80 [ 164.733322][ T9393] x64_sys_call+0x2f7c/0x3000 [ 164.733351][ T9393] do_syscall_64+0xd2/0x200 [ 164.733376][ T9393] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.733456][ T9393] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.733526][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.733573][ T9393] RIP: 0033:0x7f75992feec9 [ 164.733594][ T9393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.733618][ T9393] RSP: 002b:00007f7597d5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 164.733700][ T9393] RAX: ffffffffffffffda RBX: 00007f7599555fa0 RCX: 00007f75992feec9 [ 164.733713][ T9393] RDX: 000000001f910bdd RSI: 0000000022a23d78 RDI: 000000000000001e [ 164.733725][ T9393] RBP: 00007f7597d5f090 R08: 0000000000000001 R09: 0000000000000000 [ 164.733828][ T9393] R10: 0000000001d4e142 R11: 0000000000000246 R12: 0000000000000001 [ 164.733841][ T9393] R13: 00007f7599556038 R14: 00007f7599555fa0 R15: 00007ffcb0e97548 [ 164.733866][ T9393] [ 164.808987][ T9394] loop6: detected capacity change from 0 to 512 [ 164.894981][ T9398] hub 2-0:1.0: USB hub found [ 164.923333][ T9394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.938412][ T9398] hub 2-0:1.0: 8 ports detected [ 165.006391][ T9394] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.6.2006: corrupted xattr block 95: invalid header [ 165.030384][ T9394] EXT4-fs (loop6): Remounting filesystem read-only [ 165.036992][ T9394] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 165.042035][ T29] audit: type=1400 audit(171.223:20639): avc: denied { setopt } for pid=9402 comm="syz.7.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 165.048682][ T9394] EXT4-fs (loop6): 1 orphan inode deleted [ 165.072646][ T9394] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.132170][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.156107][ T29] audit: type=1326 audit(171.370:20640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 165.159924][ T9409] FAULT_INJECTION: forcing a failure. [ 165.159924][ T9409] name failslab, interval 1, probability 0, space 0, times 0 [ 165.179052][ T29] audit: type=1326 audit(171.370:20641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 165.191654][ T9409] CPU: 0 UID: 0 PID: 9409 Comm: syz.7.2012 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.191685][ T9409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.191701][ T9409] Call Trace: [ 165.191709][ T9409] [ 165.191718][ T9409] __dump_stack+0x1d/0x30 [ 165.191785][ T9409] dump_stack_lvl+0xe8/0x140 [ 165.191811][ T9409] dump_stack+0x15/0x1b [ 165.191866][ T9409] should_fail_ex+0x265/0x280 [ 165.191922][ T9409] should_failslab+0x8c/0xb0 [ 165.192036][ T9409] kmem_cache_alloc_noprof+0x50/0x480 [ 165.192074][ T9409] ? audit_log_start+0x342/0x720 [ 165.192103][ T9409] audit_log_start+0x342/0x720 [ 165.192130][ T9409] ? kstrtouint+0x76/0xc0 [ 165.192209][ T9409] audit_seccomp+0x48/0x100 [ 165.192258][ T9409] ? __seccomp_filter+0x82d/0x1250 [ 165.192323][ T9409] __seccomp_filter+0x83e/0x1250 [ 165.192362][ T9409] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 165.192405][ T9409] ? vfs_write+0x7e8/0x960 [ 165.192438][ T9409] ? __rcu_read_unlock+0x4f/0x70 [ 165.192482][ T9409] ? __fget_files+0x184/0x1c0 [ 165.192563][ T9409] __secure_computing+0x82/0x150 [ 165.192600][ T9409] syscall_trace_enter+0xcf/0x1e0 [ 165.192737][ T9409] do_syscall_64+0xac/0x200 [ 165.192773][ T9409] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.192811][ T9409] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.192844][ T9409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.192900][ T9409] RIP: 0033:0x7f75992feec9 [ 165.192922][ T9409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.192950][ T9409] RSP: 002b:00007f7597d5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 165.192977][ T9409] RAX: ffffffffffffffda RBX: 00007f7599555fa0 RCX: 00007f75992feec9 [ 165.192996][ T9409] RDX: ffffffffffffff94 RSI: 0000200000000000 RDI: 0000000000000004 [ 165.193093][ T9409] RBP: 00007f7597d5f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.193111][ T9409] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 165.193129][ T9409] R13: 00007f7599556038 R14: 00007f7599555fa0 R15: 00007ffcb0e97548 [ 165.193157][ T9409] [ 165.193167][ T9409] audit: audit_lost=8 audit_rate_limit=0 audit_backlog_limit=64 [ 165.214771][ T29] audit: type=1326 audit(171.370:20642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 165.224503][ T9409] audit: out of memory in audit_log_start [ 165.238606][ T9407] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2010'. [ 165.241017][ T29] audit: type=1326 audit(171.370:20643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9408 comm="syz.7.2012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75992feec9 code=0x7ffc0000 [ 165.540427][ T9424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2015'. [ 165.560128][ T9424] loop6: detected capacity change from 0 to 512 [ 165.621565][ T9433] loop3: detected capacity change from 0 to 1024 [ 165.628579][ T9433] EXT4-fs: Ignoring removed orlov option [ 165.636398][ T9433] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.658271][ T9433] IPv6: sit1: Disabled Multicast RS [ 165.666438][ T9433] sit1: entered allmulticast mode [ 165.727085][ T9440] FAULT_INJECTION: forcing a failure. [ 165.727085][ T9440] name failslab, interval 1, probability 0, space 0, times 0 [ 165.739778][ T9440] CPU: 0 UID: 0 PID: 9440 Comm: syz.0.2020 Not tainted syzkaller #0 PREEMPT(voluntary) [ 165.739805][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 165.739845][ T9440] Call Trace: [ 165.739851][ T9440] [ 165.739858][ T9440] __dump_stack+0x1d/0x30 [ 165.739877][ T9440] dump_stack_lvl+0xe8/0x140 [ 165.739895][ T9440] dump_stack+0x15/0x1b [ 165.739919][ T9440] should_fail_ex+0x265/0x280 [ 165.739950][ T9440] ? __pfx_addr_handler+0x10/0x10 [ 165.739988][ T9440] ? rdma_resolve_ip+0x4d/0x4b0 [ 165.740004][ T9440] should_failslab+0x8c/0xb0 [ 165.740029][ T9440] __kmalloc_cache_noprof+0x4c/0x4a0 [ 165.740095][ T9440] ? __pfx_addr_handler+0x10/0x10 [ 165.740123][ T9440] rdma_resolve_ip+0x4d/0x4b0 [ 165.740200][ T9440] ? mntput_no_expire+0x6f/0x440 [ 165.740257][ T9440] rdma_resolve_addr+0x52e/0x1340 [ 165.740354][ T9440] ? terminate_walk+0x27f/0x2a0 [ 165.740438][ T9440] ucma_resolve_ip+0x212/0x2e0 [ 165.740462][ T9440] ucma_write+0x1b3/0x250 [ 165.740481][ T9440] vfs_writev+0x406/0x8b0 [ 165.740538][ T9440] ? __pfx_ucma_write+0x10/0x10 [ 165.740564][ T9440] do_writev+0xe7/0x210 [ 165.740591][ T9440] __x64_sys_writev+0x45/0x50 [ 165.740614][ T9440] x64_sys_call+0x1e9a/0x3000 [ 165.740687][ T9440] do_syscall_64+0xd2/0x200 [ 165.740709][ T9440] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 165.740741][ T9440] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 165.740799][ T9440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.740818][ T9440] RIP: 0033:0x7fa69a42eec9 [ 165.740867][ T9440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.740883][ T9440] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 165.740901][ T9440] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 165.740912][ T9440] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000004 [ 165.740923][ T9440] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.740968][ T9440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.740978][ T9440] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 165.740995][ T9440] [ 165.982902][ T9442] netlink: 'syz.0.2021': attribute type 13 has an invalid length. [ 166.003866][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.156045][ T3406] lo speed is unknown, defaulting to 1000 [ 166.161889][ T3406] syz2: Port: 1 Link DOWN [ 166.166889][ T3534] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.185253][ T3534] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.196345][ T3534] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.208409][ T3534] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.231822][ T9451] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2025'. [ 166.516353][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2032'. [ 166.547414][ T9469] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 166.715904][ T9488] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2040'. [ 166.781911][ T9479] lo speed is unknown, defaulting to 1000 [ 166.990127][ T9503] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2041'. [ 167.015442][ T9501] hub 2-0:1.0: USB hub found [ 167.020335][ T9501] hub 2-0:1.0: 8 ports detected [ 167.263928][ T9508] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2044'. [ 167.324653][ T9508] hsr_slave_0: left promiscuous mode [ 167.378278][ T9508] hsr_slave_1: left promiscuous mode [ 167.490576][ T9518] loop0: detected capacity change from 0 to 1024 [ 167.497538][ T9518] EXT4-fs: Ignoring removed oldalloc option [ 167.504799][ T9518] EXT4-fs: dax option not supported [ 167.642166][ T9527] loop7: detected capacity change from 0 to 512 [ 167.673794][ T9527] EXT4-fs: inline encryption not supported [ 167.686131][ T9527] EXT4-fs (loop7): Number of reserved GDT blocks insanely large: 935 [ 167.697764][ T9530] hub 2-0:1.0: USB hub found [ 167.702549][ T9530] hub 2-0:1.0: 8 ports detected [ 167.815413][ T9541] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 167.883446][ T9543] program syz.5.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.894111][ T9545] serio: Serial port ptm0 [ 167.948563][ T9545] FAULT_INJECTION: forcing a failure. [ 167.948563][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 167.961441][ T9545] CPU: 0 UID: 0 PID: 9545 Comm: syz.0.2059 Not tainted syzkaller #0 PREEMPT(voluntary) [ 167.961477][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.961493][ T9545] Call Trace: [ 167.961502][ T9545] [ 167.961511][ T9545] __dump_stack+0x1d/0x30 [ 167.961549][ T9545] dump_stack_lvl+0xe8/0x140 [ 167.961574][ T9545] dump_stack+0x15/0x1b [ 167.961595][ T9545] should_fail_ex+0x265/0x280 [ 167.961689][ T9545] ? kobject_uevent_env+0x1c0/0x570 [ 167.961730][ T9545] should_failslab+0x8c/0xb0 [ 167.961796][ T9545] __kmalloc_cache_noprof+0x4c/0x4a0 [ 167.961847][ T9545] ? kobject_put+0x10b/0x190 [ 167.961884][ T9545] kobject_uevent_env+0x1c0/0x570 [ 167.961924][ T9545] ? device_pm_check_callbacks+0x683/0x6a0 [ 167.961973][ T9545] kobject_uevent+0x1d/0x30 [ 167.962014][ T9545] device_del+0x710/0x790 [ 167.962040][ T9545] serio_destroy_port+0x293/0x340 [ 167.962207][ T9545] ? device_release_driver_internal+0x4b9/0x4e0 [ 167.962238][ T9545] serio_unregister_port+0xe1/0x130 [ 167.962276][ T9545] serport_ldisc_read+0x2cd/0x300 [ 167.962307][ T9545] ? __pfx_autoremove_wake_function+0x10/0x10 [ 167.962359][ T9545] tty_read+0x154/0x4a0 [ 167.962392][ T9545] ? __import_iovec+0x428/0x540 [ 167.962422][ T9545] do_iter_readv_writev+0x4a1/0x540 [ 167.962524][ T9545] vfs_readv+0x1ea/0x690 [ 167.962620][ T9545] do_readv+0xe7/0x210 [ 167.962733][ T9545] __x64_sys_readv+0x45/0x50 [ 167.962763][ T9545] x64_sys_call+0x29fc/0x3000 [ 167.962788][ T9545] do_syscall_64+0xd2/0x200 [ 167.962875][ T9545] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 167.962906][ T9545] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 167.962932][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.963086][ T9545] RIP: 0033:0x7fa69a42eec9 [ 167.963105][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.963150][ T9545] RSP: 002b:00007fa698e8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 167.963173][ T9545] RAX: ffffffffffffffda RBX: 00007fa69a685fa0 RCX: 00007fa69a42eec9 [ 167.963187][ T9545] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 167.963223][ T9545] RBP: 00007fa698e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 167.963238][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.963252][ T9545] R13: 00007fa69a686038 R14: 00007fa69a685fa0 R15: 00007ffd02e5dcd8 [ 167.963274][ T9545] [ 168.207729][ T9552] loop6: detected capacity change from 0 to 1024 [ 168.214463][ T9552] EXT4-fs: Ignoring removed orlov option [ 168.237167][ T9552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.288458][ T9547] program syz.6.2060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.573474][ T9583] random: crng reseeded on system resumption [ 168.789825][ T6050] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.893627][ T31] ================================================================== [ 168.901753][ T31] BUG: KCSAN: data-race in alloc_pid / copy_process [ 168.908362][ T31] [ 168.910688][ T31] read-write to 0xffffffff8685feb8 of 4 bytes by task 4984 on cpu 1: [ 168.918753][ T31] alloc_pid+0x539/0x720 [ 168.923002][ T31] copy_process+0xe25/0x2000 [ 168.927609][ T31] kernel_clone+0x16c/0x5c0 [ 168.932126][ T31] __x64_sys_clone+0xe6/0x120 [ 168.936822][ T31] x64_sys_call+0x119c/0x3000 [ 168.941511][ T31] do_syscall_64+0xd2/0x200 [ 168.946030][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.951931][ T31] [ 168.954260][ T31] read to 0xffffffff8685feb8 of 4 bytes by task 31 on cpu 0: [ 168.961633][ T31] copy_process+0x17fc/0x2000 [ 168.966321][ T31] kernel_clone+0x16c/0x5c0 [ 168.970838][ T31] user_mode_thread+0x7d/0xb0 [ 168.975581][ T31] call_usermodehelper_exec_work+0x7a/0x160 [ 168.981503][ T31] process_scheduled_works+0x4ce/0x9d0 [ 168.986980][ T31] worker_thread+0x582/0x770 [ 168.991572][ T31] kthread+0x489/0x510 [ 168.995651][ T31] ret_from_fork+0x122/0x1b0 [ 169.000247][ T31] ret_from_fork_asm+0x1a/0x30 [ 169.005023][ T31] [ 169.007345][ T31] value changed: 0x8000010d -> 0x8000010e [ 169.013161][ T31] [ 169.015482][ T31] Reported by Kernel Concurrency Sanitizer on: [ 169.021718][ T31] CPU: 0 UID: 0 PID: 31 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.031458][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.041532][ T31] Workqueue: events_unbound call_usermodehelper_exec_work [ 169.048669][ T31] ==================================================================