last executing test programs: 2.276546648s ago: executing program 4 (id=2214): ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r4 = socket(0x29, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r4, &(0x7f0000000180)={0x28, 0x0, 0xffffffff}, 0x7) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r6 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r10 = syz_io_uring_setup(0x70da, &(0x7f00000003c0)={0x0, 0x133d, 0x40, 0x5, 0x2e8}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r10, 0x4873, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r10, 0x18, &(0x7f00000001c0)={0x79c, r9, 0x32, {0xb, 0x100004000}, 0x2}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.847207443s ago: executing program 4 (id=2219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000240)="e3008067", 0x0, 0x80407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x8, 0x8000, 0x8, 0xa5, {{0x9, 0x4, 0x3, 0x1e, 0x24, 0x65, 0x0, 0x7, 0x4, 0x0, @empty, @remote, {[@rr={0x7, 0xf, 0xe7, [@multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x2, 0x0, r0, 0x8, '\x00', r2, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x85) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000400)={[{@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000400)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000240)=ANY=[], 0x9, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x2) 1.642786749s ago: executing program 4 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee00) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) syz_emit_ethernet(0xfcf0, &(0x7f0000000340)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0x8, 0x1, @empty}}}}}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private0}}, &(0x7f0000000400)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) r8 = fcntl$getown(r1, 0x9) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000700)={{0x3, r4, r5, r6, r7, 0x2, 0x4}, 0xb, 0x6, 0x0, 0x1ff, r8, r9, 0x1}) r10 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_UNLOCK(r10, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="0203000313"], 0x98}, 0x1, 0x7}, 0x4000000) 1.353557057s ago: executing program 4 (id=2229): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 1.317177121s ago: executing program 4 (id=2232): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="00c7e373edba09f9fe56b141d20440c1786e14f5d6a9ea5a8b678fe740f48276dad6e4ea27fa4751214cc5bc73f56857211d0591e36df78dfd28f68016bafe5774499033c13a55eb085c792746bf3300d889324b0f7374de3e64a584ff5c56c80aefe392f77d150e26abdaa4aa1826d678f12f1b4cd9e61708f5b468dc250c43d0ad09c0c75363dad308fa14f87432c143f842047868be8033a5766631e26d482ae372ff8e2babb0e75d6ee63bcc65d860bcdee63f55f4b5009a55bcf45cf8b319a614", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffbfb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRESHEX=0x0], 0x0, 0x10000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd7040010000000f00000008000300", @ANYRESOCT=r7, @ANYBLOB="05002f", @ANYRES8=r5, @ANYRES16=r8], 0x24}}, 0x49dd) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r10, 0xee4e96d2d501ec38, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r3, 0x0, 0x9}, 0x18) socket(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) 1.241321851s ago: executing program 1 (id=2234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003e80)=@newtfilter={0x1714, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x16e4, 0x2, [@TCA_FLOW_POLICE={0xc10, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7227, 0x6, 0x9, 0x0, 0x1000, 0x0, 0x7, 0x3, 0x81, 0xd4, 0x4, 0x7, 0x0, 0xc, 0x4, 0x3, 0x3ff, 0x60d, 0xe, 0x2, 0x3, 0x8001, 0x4, 0xffffffff, 0xac, 0x5, 0x8001, 0x5, 0x0, 0x2, 0x1, 0xf5c, 0x4, 0x3, 0x7, 0x9, 0x10, 0x400, 0x5, 0x8, 0x81, 0x9, 0x74a, 0x3, 0x7, 0x10, 0xfffffff3, 0x493, 0x6, 0x8000, 0xc40b, 0x8, 0x7, 0x80000000, 0x3e70, 0x6, 0x960e, 0x3, 0x2, 0x7, 0x2, 0xb4d5, 0xdabc, 0x1a66000, 0x800, 0x8, 0x1, 0x1ff, 0x2, 0x3ff, 0x1, 0x827, 0x3, 0x1000, 0x8, 0x7fffffff, 0x3, 0x2, 0x1000, 0xf543, 0x8000000, 0x8, 0x6, 0x7, 0x3, 0x8, 0x9, 0x6, 0x0, 0xeab, 0x1, 0x0, 0x6, 0xffff, 0x400, 0x6, 0x6, 0x8, 0x8, 0x21, 0x2, 0x80, 0x7fffffff, 0x6, 0x2f4, 0x7ff, 0x10, 0x53b17d41, 0xa8, 0x6, 0x1, 0x0, 0x2, 0x3e, 0x81, 0x2, 0x2, 0x4, 0xfffffff7, 0x8, 0x100, 0x7f, 0x1, 0x50a, 0x7, 0x9, 0x0, 0x8, 0x4, 0x4, 0x7fff, 0x1, 0x8, 0x9, 0xed, 0x7fffffff, 0x7fff, 0x3, 0xdd, 0x7d09d226, 0x5, 0x8, 0xa, 0x3, 0x6, 0x7ff, 0x8000, 0x1ff, 0x5, 0x8001, 0x8, 0x0, 0x9, 0x200, 0xf, 0x9, 0x7, 0x1, 0x4, 0x3, 0x8, 0x8, 0x0, 0xe, 0x1, 0x6, 0xe4b4, 0x3748, 0x5, 0x6ec, 0x200000, 0x2, 0x4, 0x1ff, 0xb, 0x4, 0x684, 0x6, 0x3, 0x3e3, 0x3, 0x3, 0x9a, 0x9, 0x8, 0x5, 0xf, 0x3, 0x4, 0x4, 0x6, 0x3, 0x100, 0x4, 0xfffffffe, 0x9, 0x4, 0x9, 0x40, 0x7c71, 0x3, 0xfffffffa, 0x0, 0x7, 0x948, 0x7, 0x22b, 0x1, 0x81, 0x6, 0x4, 0x7, 0x7, 0xffffffff, 0x4ca7dc31, 0x200, 0x2, 0xfffffe00, 0x9ea, 0x8, 0x5, 0xb9, 0x7662, 0x6, 0xe1, 0x9, 0x8, 0x1, 0x101, 0x80000001, 0x4, 0x9, 0xc5a, 0x0, 0x8, 0x8, 0x76, 0x3, 0xe11, 0x4, 0xc, 0x400, 0xe08d, 0x9, 0x200e, 0x7, 0x4, 0x8, 0x6, 0x440, 0x5, 0x2, 0x7, 0x3, 0x9, 0x2da1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xc, 0x2, 0x8, 0x4, 0x3, 0x69b1, 0x4, 0x8, 0xf9, 0x10000, 0x100, 0x3, 0xb, 0x618c, 0x2, 0xb, 0x4, 0x2, 0x1, 0x9, 0x2, 0x1, 0x0, 0x9, 0xfffffffa, 0x9, 0x9, 0x5b, 0x10, 0x8, 0x5, 0x2, 0x2, 0xfffffffc, 0x81, 0xffff0001, 0x5ee, 0x7, 0x9, 0x5, 0x4, 0xffffffff, 0x7, 0x4, 0x4, 0x1, 0x7, 0x6, 0x1, 0x5, 0x200, 0x65, 0x6, 0x3, 0x48c0, 0xfffffff7, 0x8, 0x6, 0x1, 0x5, 0xb7d5, 0xf, 0x7, 0x6, 0x1, 0x1, 0x100, 0xfffff82e, 0x200, 0x3, 0x5, 0x1, 0x9, 0x3ff, 0xc, 0x100, 0x0, 0x8, 0x578, 0x3ff, 0xdbc, 0x2, 0x8, 0x7f, 0xe, 0xfffffffe, 0x6, 0xe657, 0xc, 0x3, 0x2, 0x2, 0x0, 0x4, 0x1, 0x114e, 0xfa, 0x6, 0x7fffffff, 0x200, 0x9, 0x5, 0x7, 0xfffffff7, 0x3, 0x7, 0x1, 0x3, 0xcef, 0xd62, 0x7, 0x8, 0x279, 0x1, 0xa16, 0x3, 0x7, 0x1ff, 0x800, 0x3, 0x6, 0x7, 0xfe5, 0x4, 0x6, 0xfffffffc, 0x1, 0x400, 0x2, 0x2, 0x7, 0x6c7, 0x35e8, 0x9, 0x5e, 0x1, 0x5, 0x75d5, 0x1000, 0x6, 0xe11, 0x5, 0x6, 0xc, 0x1dc, 0x9, 0x40, 0x3, 0x2, 0x8, 0x3, 0x0, 0xd3400000, 0x2, 0x3, 0x8, 0x1, 0x5, 0xa80, 0x6, 0x7, 0x80000000, 0xffff9e06, 0x8, 0x78, 0x9, 0x0, 0x4, 0x6, 0x67, 0xfffffff9, 0x2, 0x5, 0x1, 0xdfaf, 0x6, 0x1, 0xf2, 0x200, 0x8cec, 0x2, 0x1, 0x1000, 0x0, 0x6, 0x0, 0xffff, 0x76, 0x4000005, 0x8000, 0x8, 0xfffffae9, 0xfffffff4, 0x80000001, 0x5, 0x2, 0x4, 0x7, 0x9, 0xe903, 0xf, 0x8f4, 0x3, 0x8, 0x5, 0x2, 0x6, 0x6, 0x7, 0x2, 0xa8e, 0x7ff, 0x5, 0x8, 0x4, 0x7fffffff, 0x8, 0xd9a, 0x3, 0x5, 0x9f7, 0x7, 0xfffffffa, 0x95fc12aa, 0x8a8, 0x6, 0x1, 0xf3b4, 0x7, 0x2, 0x2, 0x0, 0x9b, 0xc0, 0x8, 0x448f, 0x4, 0x2, 0x2, 0x0, 0x2, 0x9, 0x422, 0x9, 0x1, 0x0, 0x0, 0x8001, 0x4, 0x5, 0x1, 0x3, 0x40, 0x7fffffff, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x10, 0xfffffff9, 0x200, 0xfffff800, 0x4, 0x80, 0x0, 0x4, 0x4, 0x5d7, 0x6, 0xa, 0x8, 0x99a1, 0x1, 0xa9, 0xf, 0xffff, 0x7, 0x6, 0x7, 0x3, 0x5, 0x2, 0x1, 0x2, 0xb0, 0x10000, 0x24, 0x20ed, 0x8, 0x7f, 0x733d, 0x8, 0x2, 0x80000001, 0x1000, 0x9, 0xb303, 0x855, 0x39b, 0xb, 0x9, 0x7f, 0xaa, 0x2, 0x132, 0x8, 0xfffffffe, 0x1ff, 0x2, 0x1d2b, 0x6, 0x9, 0x3, 0xfffffffb, 0x4, 0xfff, 0x0, 0xe, 0xfa, 0x3, 0x3, 0x4, 0x10, 0x7f, 0x9, 0x4, 0x6, 0x2, 0xb, 0x0, 0xfffffffa, 0x7fffffff, 0x8, 0x8000, 0xfff, 0x401, 0x5533, 0x3, 0x0, 0x8, 0x0, 0x3, 0x1, 0x8a, 0xfff, 0x100, 0x7, 0x1, 0x3, 0x100, 0x7, 0x4, 0x9, 0xd, 0x9, 0x1, 0x55, 0x9, 0x6, 0x8, 0x7, 0xffff7fff, 0x1, 0x7f, 0x0, 0x8000, 0xe7e, 0xff, 0x4, 0x2, 0x1, 0x0, 0x8, 0x8, 0x0, 0x1, 0x1ff, 0x80000000, 0x5, 0x1, 0xb, 0x20, 0x1, 0x8000, 0x7f, 0x7, 0x9, 0x3, 0x3, 0x7, 0x10000, 0xffffffff, 0x5, 0x6, 0x1, 0x9, 0x0, 0x7, 0x80000001, 0x2, 0xe2b, 0xfff, 0x8001, 0x9, 0x1, 0xe9, 0xb, 0x6, 0x4, 0xbc8a, 0x8, 0x9, 0x9, 0x100, 0x8, 0x1, 0x800, 0x5895, 0x7, 0xfffff001, 0x5d, 0x8, 0x2, 0x17, 0x6, 0x9, 0x6, 0xff, 0x1000, 0xfff, 0x3ff, 0x9, 0xfff, 0x6, 0x1, 0x7fffffff, 0x3, 0x5, 0xff, 0x8, 0x6, 0x6, 0x81, 0x7566ddc3, 0x8, 0x9, 0x4, 0x0, 0x4, 0x7, 0x8, 0x7, 0x7, 0x8eb, 0x28ce, 0xffffff00, 0x4, 0x8000, 0x7ff, 0x8, 0x7, 0x9, 0xa119, 0x7c000000, 0x1ff, 0x8, 0x113b, 0x99e, 0xcb7, 0x1, 0x9, 0xe2, 0x4, 0x5, 0x7, 0x3, 0x337c, 0x33ea, 0x7, 0x7fff, 0x9, 0x7, 0x0, 0x7fff, 0x10000008, 0x4, 0x8, 0x200, 0x3, 0x8, 0x1ff, 0xf, 0x1, 0xee5, 0x1, 0x140000, 0x0, 0x889, 0x5d9, 0x800, 0x80, 0x5, 0x20da, 0x7, 0x4, 0x7e2b, 0x8, 0x3, 0x8, 0x7, 0x9, 0x1, 0x8]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0xd319}, @TCA_FLOW_POLICE={0x8a4, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff6c2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x73, 0x2, 0xfffffff7, {0x80, 0x2, 0x8934, 0x8, 0x2, 0x3}, {0x1, 0x0, 0x43, 0x8, 0xfffb, 0x79}, 0x3, 0x4, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8001}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x1, 0x8, 0x7, {0xdd, 0x2, 0x2, 0x9, 0x1, 0x9be1}, {0xe, 0x0, 0x5, 0x1ce6, 0x8001, 0x9}, 0x8, 0x7f, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa0, 0xe898, 0x8, 0x5, 0xca, 0x3, 0x10, 0x6, 0x0, 0xfffffff9, 0x7, 0x2, 0x5, 0x3ff, 0x3, 0x1, 0x1000, 0x6, 0x35de, 0x7ff, 0x5, 0xfffff001, 0xff, 0x6, 0x4, 0x0, 0xfffffffd, 0x5, 0x3, 0x7f, 0x5, 0x3, 0x9a, 0x5, 0xfffff000, 0x8, 0x2, 0x9, 0x57, 0xd, 0x3, 0x5, 0x7, 0xb7c, 0x800, 0x8, 0x4, 0x5, 0x9, 0x61, 0x1, 0xff, 0xfffffffa, 0x7, 0x1, 0x7fff, 0x7, 0x4, 0x10000, 0xa, 0x2, 0x80000001, 0x5, 0x4, 0x3, 0x7ff, 0x1, 0x8, 0x0, 0x10001, 0x50, 0x4, 0x1, 0x6, 0x3ff, 0x1, 0x1, 0x6, 0xd8b, 0x6, 0x3, 0x2, 0x1000, 0xffffffff, 0x3ff, 0x1, 0x1ff, 0xd, 0x4, 0xfffffff8, 0x3, 0x70000000, 0xb, 0x4, 0x4, 0x4, 0x73, 0x5, 0xfffffff9, 0xa, 0xe4, 0x33f, 0xfffff801, 0x0, 0xf925, 0x1000, 0xb7, 0x7, 0x2, 0x8, 0x9, 0x5, 0x400, 0x5, 0x7fffffff, 0x5, 0x0, 0x5, 0x400, 0xb, 0x2, 0x6, 0x0, 0x8, 0xfffffff9, 0x9, 0x9, 0xfffffff9, 0x8, 0x1, 0x5, 0x5, 0x5, 0x5, 0x9, 0x80000000, 0xe1, 0x8, 0x2, 0x6, 0x5, 0x4, 0x200, 0x3, 0x9, 0x9, 0x0, 0x6, 0x7ff, 0x7ff, 0x4, 0x2, 0xd, 0x5, 0x1, 0x7, 0x60, 0x3, 0x3, 0x0, 0x8001, 0x7, 0xffffffff, 0x6000000, 0xd785, 0x0, 0xfffffff8, 0x6, 0xffffffff, 0xffffcdb2, 0xc58000, 0x1, 0x3ff, 0x1, 0x4, 0x20001, 0xd, 0xffff, 0x7, 0x9, 0xa7b, 0x80, 0x3296, 0x5, 0x800, 0x1, 0x1, 0x1, 0x90a, 0x9, 0x800, 0x1, 0x200, 0x0, 0x1, 0x4, 0x6f7, 0xd, 0x9, 0x1e2, 0x3, 0x3, 0x800, 0xe, 0x9, 0x5d56, 0x4, 0xfbf, 0x2, 0x1000, 0x37, 0x1, 0x100, 0x9, 0x1, 0x1, 0x3, 0xffffffff, 0x6ec5, 0xff, 0x7, 0x4, 0x101, 0x9, 0x6, 0x1, 0x6, 0xfb2, 0x4be, 0xc0000, 0xe9, 0x6, 0x6, 0xfffffff9, 0x1, 0x2, 0x8, 0x8001, 0x3ac8, 0x0, 0x5, 0x401, 0x1, 0x9, 0x1, 0x9, 0x9, 0xb3, 0xfffffffa, 0x7, 0x7, 0x425a5382, 0xfffffffb, 0xffff, 0x8001, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x9, 0x7fffffff, 0x4eca, 0x8000, 0x2, 0xfffffff7, 0x40, 0x1, 0x0, 0x199, 0xfff, 0x2, 0xfffffffd, 0x9, 0x7, 0x1e629b12, 0x6, 0x9, 0x3, 0x3, 0x1, 0x9, 0x3, 0xf, 0x40, 0x1c, 0x5, 0xfff, 0x3, 0xce, 0xffffffbb, 0x8001, 0x1, 0x7, 0x2b, 0x7, 0x800, 0xc72, 0xf, 0x20, 0x8, 0x400, 0x4, 0x2, 0x9, 0x2, 0x8, 0x6fd, 0x7000000, 0x437c, 0x6, 0x1, 0x0, 0x3, 0x80000000, 0x0, 0x8, 0x1, 0x4, 0x9, 0x8, 0x5, 0x6, 0x5, 0x7, 0x9, 0x3, 0x9, 0x6, 0x3, 0x19, 0xc3, 0x10001000, 0xd, 0x4, 0x800, 0x1, 0x9, 0x5, 0x3d5, 0x80000000, 0x5, 0x5, 0x80000001, 0x7f, 0x1000, 0x9, 0x10, 0xfffffffd, 0xc, 0x3, 0x4, 0x19c9, 0x0, 0x828, 0xffff, 0x80000001, 0x68, 0x1, 0xaabb, 0x8, 0x1, 0xd5b, 0x4, 0x8, 0x3, 0x40, 0x6, 0x2, 0x1000, 0x5, 0x4, 0x1, 0x392, 0x3, 0x3, 0x7, 0xa6, 0x4, 0x3, 0x200, 0x687, 0xd, 0x6, 0x19, 0x7fffffff, 0x9, 0x0, 0x6, 0x3, 0x3, 0x1, 0x1, 0x7ff, 0xc1d7, 0x7fffffff, 0x328, 0x3, 0x2, 0xfff, 0x5fc, 0x40f, 0x3, 0x7f, 0x9, 0x5, 0x2, 0x80, 0x2, 0x8001, 0x2, 0x83c, 0x7, 0x8, 0x9, 0x5, 0x5, 0x9, 0x2, 0x0, 0x6, 0x8, 0x2, 0x0, 0xc02b, 0x4, 0xefc, 0x7, 0x7, 0x40, 0x370, 0x7, 0x10001, 0x2, 0x0, 0x4, 0x4, 0x3, 0xf, 0x7, 0x9, 0x8001, 0x4, 0x1, 0x9d15, 0x80000001, 0x3db20, 0x8000, 0xe34d, 0xa169, 0x6, 0x20000000, 0x7f, 0x1, 0xcc2d, 0x3, 0x4, 0xd146, 0x7, 0x4, 0xb45f, 0x3, 0x0, 0x4b, 0x3, 0x4, 0x5, 0x8, 0xce, 0x7, 0x4, 0x2, 0x6, 0x1, 0x200, 0x4, 0x9, 0x81, 0xbf5, 0xfffff8ea, 0x7fffffff, 0x792, 0x2000007, 0x0, 0xe3, 0x8000000, 0xfffffffe, 0x7, 0x4, 0xfff, 0x3, 0x9, 0x9, 0x7, 0x9, 0x8000, 0x8, 0x0, 0x37c, 0x7, 0x2, 0x8, 0x2, 0x1, 0x1, 0xa, 0xffff, 0xdd, 0x3, 0x2, 0x64, 0x8, 0x0, 0x1d26800, 0x80]}]}, @TCA_FLOW_EMATCHES={0x21c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x909}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0x3, 0x1, 0x4}}}]}, @TCA_EMATCH_TREE_LIST={0x148, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10c, 0x1, 0x0, 0x0, {{0xfff8, 0x0, 0x800}, "bba8fa051bfeb9a9e16cfd84b8ad67790e94925e42bf6e9eb2e17a265af6deab70af49b9931faafadcd65e3910851aa114393163400ae7651a30f0011c3ea26ebec42174c878b9f58b1694462b162ff7302888f59582ce238881d7760a26d98764ac316eefc3fc263e71ab188143559a03f4130e77e0a7c0acfdc5f2abdbb216d45e6e861179a1898690a0cafcead6e43e78d08566f5e106f7c490d4858eb590aad3efd90f1ce5c7d54822b91df4c732be02dd773f431a15567164a0335b48d47f054b609b64f3ee772eec7c58ef0c43efb074f5b871f89229f456fccdc3f720825e923fe084b661e0de59c14ea3ad14baf7dc45722802db6f71f9e6dc54"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x9}, {{0x1, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x8, 0x4, 0xd}, [@TCA_EM_META_LVALUE={0x18, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="2f9ad679", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="93516b718b072ff7"]}]}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0xfff7}, {0x9, 0x40, 0xffffffff, 0x872}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x6, 0x2, 0xfffa}, {0xff00, 0x6, 0x2, "4aa13385422a"}}}, @TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0x10, 0x0, 0x98b9}, "52ed8692d58a214b1ebd8cb835dc14ce5197d72d51c7674652c2502c5fc6fbe584c7508ea2c6e7"}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0x6}, {0x4, 0x5, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xec2, 0x7, 0x7}, {{0x3, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x6}, {{0x4, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x893e}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x9}]}}]}, 0x1714}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x300}], 0x2}, 0x5) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r10, @ANYRES16=0x0, @ANYRESOCT=r10], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x80, &(0x7f0000000300)={[{@journal_async_commit}, {@i_version}, {@quota}, {@test_dummy_encryption_v1}]}, 0x1, 0x533, &(0x7f0000000b00)="$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") r12 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r12, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r11, {0x0, 0xee00}}, './file0\x00'}) quotactl_fd$Q_GETQUOTA(r11, 0xffffffff80000702, r13, &(0x7f0000000280)) ioctl$FS_IOC_GETFSMAP(r12, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=rdma']) 1.178037369s ago: executing program 2 (id=2236): r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) setuid(0x0) getgid() mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0xd414fd3e2abb9182, &(0x7f0000ffb000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendto$inet(r4, &(0x7f0000000540)="0b09207965b0b9f1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 1.023313559s ago: executing program 2 (id=2238): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0x6fb9, 0x40, 0x2, 0x396}, &(0x7f0000010080), &(0x7f0000000180)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0xfffffffffffffffe, 0x0) 1.022760529s ago: executing program 2 (id=2239): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="18000200000000001d000010000000001811000047f0b0fdacaedef73362a99672fd1e9574115dd6ea6ac7c917839d30b884366e320c1fe024735c00b1f25567769b5dae521bf318efafaa6a41e5090c9dff612c359484d2089137d337d7076f0a6bc7af19a83df795fb63aebb3225240bdc2d7b1cc11c9dec527ade971392c441237b51", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x100) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0]) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7ff0000080000007b8af8ff00000000bfa2000000ef000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x1000) r7 = socket$netlink(0x10, 0x3, 0x9) sendmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) sendmmsg$inet6(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) shutdown(r8, 0x2) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 966.428566ms ago: executing program 1 (id=2241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000002"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f00000002c0), &(0x7f0000000140)='%pS \x00'}, 0x20) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0x2, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x406, 0x1, 0xd, 0x800080, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x2, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x8000, 0x3, 0x0, 0x40, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xa, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) sync() 965.302306ms ago: executing program 2 (id=2242): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socketpair(0xa, 0x1, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r5, 0x0, 0x1034}, 0x18) r6 = socket(0x1e, 0x2, 0x0) sendmsg$tipc(r6, &(0x7f00000001c0)={&(0x7f0000000140)=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x800) sendmmsg(r1, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="7e013277d74b9be02a27796754e1572f8c80620227063d116b6f41efa43197cb12545aefc305be6bf4249134396adc10a660d286f921606070ce5677", 0x3c}], 0x1, &(0x7f0000000140)=[{0x50, 0xb1dad1268f2e17f4, 0x7, "0e8f10a69369fa943badc47b76ea4afd6b2078d2afafd6c2676f4bf692cead1038bf24bbc29c3924478f0e48c11eca92cda8e5db34c7eaf2c12e455a"}, {0x58, 0x29, 0x7, "78e1a68d83ec7fe9c2ff49181b0833694fec3ed482c3cb29bbf3c047b367a3a9fd56b50f7df41b3abf223b422fbbe10f91965a288d0130681889da9126e98ccd658c2b343cf4fd"}, {0x40, 0x88, 0x9, "343b2a7af9686b17ebdc7dcb15bb11e4013485885cc3cb0974fe97e7192b274fdc415ddfe1953be9bbb0"}, {0x60, 0x115, 0xffff7fff, "e3383b2534fbe997e20a36b71e28325d8d9a8c5f831ee651bc700e6fa4b439f20582ffeaf299fe1577050ada38f909f4b485e58a0000811cd54663ef1d2926c62cd019e2a5ff9502758a8e5a51bf"}], 0x148}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)="59acd195a8397dff0c9194b141294766a820922e51fa64ec7784ec1b4d0df83f5bc84965349e7d4afde0e8910a29e2647aaf775d04cba0c195d53a3c91ceeb1738934447eb943654261c6afc2475386bd11a1b26fb27277b106c030f6df14db9d13198a610cf861ab7edd84b1dfda08cf87bd4e3ade58ff3a5434f305d4ff9ca7c59b0314da5780f91cfbacb6fae140b593c2c1eda347f71a14bf0698da2c765a3140e4aab51776e2843f8272b7a12a4a885", 0xb2}, {&(0x7f00000003c0)="490812a2964f8d8a90549ee2bba3c84c532ad05f2808a2a4ca0412fd419d2fba0c2fae9307f41793125fbb122388f91d91cafbf134e8ce4ad1160537888fb25853489667f574c1a656f79249fae1ec31020af15d79c6f97835d51aa2fdde6961bb8ed8eecf96531d364ed99ae18b6e3ef75a367270a64c7cbddb4eb6c18d76965bc15861aa5903cd18b9f20b0d1872f14079643c0bc0853afcee63eae7431a095204814bb9eb180c5d355c", 0xab}, {&(0x7f0000000480)="544a42b735c3d28bcda13b9a339505f88399d2fecc7566c878ef450d36e8f0c34dc4537312df242c122fa66814d2b0c3ff1d8b7afbd35cf875bf2ff5c873fce52a758f43fc66bd85b08cc9e5f72084239fe1067a056f59ab11b0060c388d345321dad67e4506a0aeba3a3a6ef4c7355ccdfc887da4cac893208e8147d028b8528131ee91b80b57d3fd8b91a947d43e4ad7d55eefa9dc866fd28afabfb4d4fc782640e8d5ae8bf54358fae17c2c8e3391c3f668b929198f", 0xb7}, {&(0x7f0000000540)="04955839884e9bda6f2a338d27c29cd61c21417299f7027449d2932f7c655ad16148db4e38dd62bdfa4bdf82877085d4e6fa5ef2a10f8efd7f9acb24f8728bea13af4710bc7dec5487521012e06b2c4254c3dd7db9c3084eae2e2ebaafeed8db9a7af5fbdf6b2d21161cfbac5ef8d2a2d2a987e6604dc819651408e81a61bde01abea0a816f8af9454e0a1183e591deaf89ac7e2", 0x94}, {&(0x7f0000000600)="519c0a546869ccf3a1da82b628b92b346e682131f248a5c90e519304b4621700066ac9238856d00b093304eb4e7767aa7275970f74849403cfa28da00d54d72cb5b0603304fcc161a053f64c5be388f6294dcd17edd5ad9b4c9c9f683a904a237049fa7744db82cee84e805ee731fbdd162138195122317b1e9817929ad7b809a70a1ebe3b813f55ae36d83364fb9214933f44c3c7184aaf2be8667f63deea36b50590b2d4f74917dbcc794458d38d41900870f844eaf1ebc1c02e5145ef25dea7e26040e0a9348862912d5dbe08280100a9e5a19f60fc6a96b6e831b788550288e36f7ea60562c6eb5bc5b594ffd23f0893c95113a89f9bbacf7ea988eb31020198d52b5a0356667b1f55c25b9ae36d2308d2ce27f3366e2f3c0e18bc213cc4066c349798bbc1940e1b887bf578b0dc53797ca948b468ffb27248d79b11768536ed706b6c6df95332c46b019df27e4cbcf9acc6f18aac4d2a854a17d17f826afca3523d7199e65ea159d52c9c8db125faef8f0117f295bd085743479444fff76694c502e1e543bffc6569404aec58e9f739c22a150e7fcae6577dad71aed3687382e9214a36ebd4aaeb9d3b7bdc052b1f8ab31ca7184f43f957f80778ea9784a94a318a871a3e85f0561867da948aff4ed116ed68a2450aa583d2a0f7b60b9c4bd23c151e04bbcdccde92376995eb13fcd3c2f106168b37ade6bab756a48ecfbfa35eee4985348aaf6a178f6505d7858954a9e80bc52f99ba3efcd37b1ea2311c52368d7d15cc1108a9320af7284e5edb2368e1f5918e6366b8a26fdc4340c941688264c3a972481a7113f0ee93c00bd9168e89a9c68ae44ccd8c4d8fc0d4d0e8c74e152fbd7e4e28ad3c72d1fcb3f1d21dd545851662f4b0345d8a8eb48db88fc3121757e8fe9ff10d4391befbef716dfea4398775e812628a06769521190e9a576dc726d66f1f1ddda3d890faa5fcb5409ad6f6f7d138714953d7ccc5ff76751a02f8f72ae6389279b6e03973c8aea5e26383acb9965c1e07e8b33e929d31096d8f516ea7f7f3407db6369c89cb9edc9095042e68b4e7b6325df61654cca1198c8697e84f2d6603262b138be3e51ed8309ba3d83b70f54addbb5c7e8ae47f68e99489913f4e912ae89cbbdba420a2db02f4d5ed798062c8f1dbe9934c2ad6414aa10ee7585779be2b6d376faf82495d0bb9950d63452d18981a9bdc1f95c2a3af42e98c002c0604a18fe8e7732ef7d9bb957509662cad8a36c5f9930dc1ba5d07b46e0046ab700f38b052023f90e1320b6d5accc0e7b01139e4dea33581255fde6910a680c91bd7cd8ba469136ed608461e5e51d32499a568f575571264a1a0077d0c6fdc5673914775ef657debf965041b1aeb8ce8ef8fd6c04a25386b2e436be54569f07892c28748339f977b956acc97a55fee72de4bbd2a28e56ff23e21c5b1df3b193d5ed2536ed9d21b7feb2bcca92eaf389327befc2ea3fd23688e6909ba23be17c1604c634596f0088a33517ed7fc2cd74af314fc899372e6416c74171712daa8474c405a28457f7e6026aa043ca825728f046079e3c3dbfd7f42edbcf9021a42eef4972f277fa0b3a41f164d984daebb99e64401740b078aa54a4a0f48128bd5783557bd40bc21e26c9cdec6e8aaff8fa91129b1a88c954309d149b47031043f090122242ad27263405a3ced6712d6316515e8641b1b643de4579d565c4d1bd0214d47e2dac6710b0337bf764d0223d1d006a7eed104a4f2367abd771c7302e92bd9fcd2677f4614aad92ce7a56cbb5202db1cc9fedd55b9a615edd793bd7cce0d90bcef96ba228a6ca77ebb9ba8d70d52afa7262a3a9fd191f4052ec5a058967026a075dd6717c5d20e70cd8d67dc5474e068351683288e3a94a0e1cf46a424cb8a71cb33251d3d851dfc0a1c467b8e8ffd7f9e503e994b1f79b3309b25f753d9932a8b8c6fa7c01c5772895fd23e8b3839d2538ba60a85330d09abd6298dfd4cc3cfe1bc50af282c804c3ee5368c0b37402633a6d3094cb9ade780d5cf035609683d96e9173c188d66dd02497e954a6c219a3cc006f10826e40a7fd6f312033769b7784c038e9235bd1233cb65b3487dac830cdb6ed332c6613e74e44e48ce42e03f5841d44334d469862bd2e933e99a3d13e0b10ab5c73a09b796f84ced846ddaa8a86d67f1c38fae5c0b36e591a168b3f8b164edcd872c0caffbc70b842d80e4f61d168fb88acbf6f92148b02d408500fc61bf02a083f415795612f65754e73667b069b61ba423a56037862e34160216489bf418940f7ba6e2aee95760b8ec6250ed77225a18374b465d5e4b5d8b7a9790592f8a92104f85612cac1deaffeb849c17e97cae94b8848be0a80300d7f061c058742f37f094a1986450bfded358789b4e7826526a7363b22328fa42935b69e1215ac414bb5a7a22d60564c0833e0450c2bc61ba96283c31a2cd85aeacea7c6a2c84548d33dd7fcd5a46573b2c7dd569c4c9fd5140cfa427261fe4ddf2e06b92e7e5d7184d061d1df65cd6293cebbc623eb2246ef62277f71ea8cf7e529a563ec3c3d2a5d51b2c04b95952b5b3eeaf95d377d6f9d1beec82fcfeebdc553428d2c822ba82ee04896e16954b99591a81d264e005174a5c21fc1ec2ce485a300400668dbe6fc1ba107df4f502fd42a7be05de5617a301b7fa617e56c164b26794887b2816f4eb0d3d790bfdb7e1cdb11a0c6dc1464f641ec053ee9488715edf54bab39b110be82958655a274c27cb62622df37e926cbc0e91abb4abcb4e6ed0d816ec8d117171e326944d48204e1b2786f56e9002843012cc0382a943eff9bc1157dc68c6e6eda432e708cc5a82fb6fb95d277c337cbab32abeb390d262736ca3081098d3490aedb625fcf6233ae65a1e027bff21efa5b3e3206775f120965d86f92244a42d94da2cf6ce12bbd2b6bb51cf8bc75165da932d60d01f0c9a335f72bc70424b09bf32fc61674a46ba1f357480149c66ee56578ab440ffc83534962d62846f95cd515413b7f46aaf52b635d8ac6ecd7e82ff6f171bb3da86a465f59f706acc249ecf0d66f52989dbeee5965eb29f0be0a0c0e1075ec2bb2bf767ceae7bcc6f61c94479971665e4ebdd599447052369b7b62e8d8990ec895b6329e2abfd210c13a2e862f03f940b0b843bd121c58e0fe72aa9bc2a84f398a6abc8b3b7df24f82312d3b673f9b09f9342db7d59294059165b9f712f138f0bcd32735d3012d256b324115b4c8f0f726fa5bbeb07f28036ea3dbc6da0d94df739b696503c3f5c3f13dc4a20d6ba25cb36755f9aae48b584ff3b55d10ccfc353c067bc32257e53df5485435a6088a6275a381708c937866d938bd8645a23804b28389a8ac75c65ebb5b3f57475811017280521f0f96c15a8dd8befc94c325fc3e801ed0c739c6f4172549d2c73d07405903992158b72e741c6f55cbc9063f3156630230d6926d5598dcfa5494f1df40d558412e9a0125cd286ac256576b6d9332d460d5d95ad92e2d978703f0b7e85ee869d0ae8e8895438af1459e2c46e965570bdeccf5a9ceea403d338e6363681aa7a745de3c024a06a4888309409618d3811f12230370cc45264ff84f7d78a3adc339894d58b249065c37032a206003adac1de769302f48092a85c21e302ed226e4554de1c45aacf5ec444ef1624586369bb2f3271f18ab07c6aecdf87b9159b1ed6bcd776904cfa875c0e386e181319788acda5bb10d9cf59b79d798f89561aa4860e93b88c435b86db5b67d994dcf70238be63a7ea1cb0b9d572661cc01a441b969ebd3fdbff63c0a74de7cb8c44ef819fc39904d1fbb4334a8527591df8ad3acf8566978d7ec33b48e4272ffd901cbd43891b404b2581f1a0d801391c6b218886e37be609037b1165d8e7875bbe590c93eb93aa58525678d77f22bfd8eef8714455544b82f9a8ce45c3b43f45f8f1ada2e1420b5f8d9402348c02c8aa6f4679156a8669355b767b08938d0e88c313953f5c7b40d3ac30a407abd223e29b0c455ffcb09859900367bc51194b67f586c8190e0895fb69a3f37098fb620fd4f7f7ab97ad8b9a32e4c7d8095e0f9a492168504a1a078863a3aeab6d6a85fd2886891e45b9adae9110ba96730a1969d74e535a1c5fd0f8e9826f63257b3d93b9a82d78985811ef9fa0b0f52b4373eb836e058252d1e2bd2fdeb846eaa74854326b4abab7cc623b586948be23ea817d9e43d57369102ef3f36978ef3d589cb10ea745c2647a14ac60ce5f7d8fa14d6b7c2f0a8a73f0ef827844ed6503045b58cfc3e94625011e1d40931c6e343bb223cc035ea26863be715753359eea0d045c39064731b4cbe31dbb5f1baf59f1787e83a374bf23c71b16c73d50f479d2988c0db29a334a4563c928e5dfb8608d979279f17d034ccc0a354735063af4384f81e9a0003c77f1c8b99cd4eb7ba12c05c49d0d09e9cdc7e4985f8448c75c013599d4255401e520a52b19c8661ede0f70853702476794d9bca12e23b916b7570d068b4594a83839a47bc84746b4523ba095f722635caa094a9ca01c0a9cd4b2fc8987a244c159c8622fb8b63bc77f58c05b6daaf5186073dd3b0bb121e538b273d89742cae407229d714f7944d45617ec79a811e004260b64315d1aa3d2e4ab6267af97c5a947b2cbefe639eb3b4dce919f475163addf2ad31ad173dea2958d59aad006d2e30900f13c34939b1ac51a0b9579f74ad14df516089fadfff3b0930ee39f0c2a573b09d11e91d9a328dc012d56e61a4586c6f49eb61fa1bc5fda2066858aeb36d358974e04dd167acaef347e48739643e27f8251554e9f08777d69d6740b1622736f37fc400fdb8ddb546b89f8ac6a65b17c25f3525cbdd011f102f20c927d6244182d334ca496df0b3003be028d545fa2b0ce350e1ebbb8dfafb54b758defcefa0935a47c8067f414fae34d46aaeff38edc6151c5d26662a8310455e9e2f6c83bd10d216e4cc64895f0511b4a26ea9de744d71b86f3bedc6a4f93aaa621d689785c38fa04d10d0fcf155797e5d5b41a187a2a70fbce9f7fd5e39523c30b920c1b7942662b841932018c170af8eea6793cf337f4e4a6ad82d97262cb193cbeb9ae4b62a177d6ff2b8f95fdfe8a12aa969e472b8c4a627f3fa62d3759fd1acf606a87e411de493c0ff19b8d433288e88d9e361608a65713b464d8f490b74fbac8f8ad62a00cb5694e6269f5e85a187fd6463b8b4ec37e5fcf06aeedf897aa479db0f6e0ef1c373b75319f88946bfe0f80ae1022627b81abd0d4437f84a8a38e91d6947988d1e30936590bb579e98296d89cc1eece0301c92e5116307d226bfff1d8af818d6a8e388541b7a2898dec2a5e5d158daf4f9105dd00ecfd58a78fba92d620e952e3ce3a722fa5f029a2c985323382a7d49a21dca9e48212e01e881a7673e0dc5a28b10966ff2ea4f1906e01aa6c8e567e71dda5ff6ab400efa23ab88b805f91a8435eea81d8f05fdb742b1cc2e0b9b093fe917ad10f3bf765ae22d753de50131a73844eba8c75bed7a14f7e7c40945affe35228dea57ef43814385acb979f27523d39f32d797ee3890aae998c15edc46a40bab55dfef577d9886642d7124f0ca9df9d2188ab07db44deb1efcd63a495960fbdf49b5052050d1e5634e2d8465f264091fb76c008c1c8f73ee6701058e5ced671ec81b3c3e22985ffa50a47d3bd2fdddf8ea483bc9f282a8cd1b06efea2d3e9275e4a7743aaae1c0a4e6e768b48da53e571100d03ab00e5fcee5d43a455f8709e861a22e4f165b6", 0x1000}, {&(0x7f0000001600)="3c692623550215f1a4c8cf588b0e7ba952d532a22c8e14b19703848dd387363d7b7ab0c4ca37253aefbccf4a168dd8a0cf587a179c023b54d16c9b05fd4ab4951f18b4b5640ca149e766d2dd3b633cf0cd09c10ee91204249e229881e3335b99f682fb8583fd85296abc89ec26bbb296bfce930cf8ebbccc9fdb4afdc6c96847", 0x80}], 0x6, &(0x7f0000001700)=[{0x108, 0x0, 0x1, "02eb32fde01f3edc560c5fdcc8b5e360d85fad125a5448b674e04bcde536dd96379506e4d319ef4e057d5345604eb5997917b207df1e72f9f28440bf4feaa9ab3c4205d6eb46d22181ad3caf945271b437d2712981a74eeebf0b259d8feaffd715ac2b8bfd7e99edc35bffb645538c8853a3738ec5f1bc2c27db7ad5e025d75ddae74d6934422b372a251e316607d445f2c48a005358d4639c3065145569398d1179fde6945209290056cf142626ec1477dad11faec0b9aa5de5d7746afac2953dce827de817c7ec4ed641b585cbfa47f16556d9b0d1aa63e9c0f2780352421329efe4ddc8284c006c6228fcf0dd6aac2b27df47"}, {0xd0, 0x116, 0x5, "feb7bf28e38b4801880b8dcdbb11f580eb62a224c385dc3132594fda5b1a693e74bb0227dd2a53efaf479ac6082972642b15ab70f0d27b7240418c3e7080bfdf313ea428b13e1dcce3dd3aac3a9dbe45628234a384dce83b537c011fcfc45a9b2eb692e9c23e8d263ce5fd7d00c0eee2ef0df56be10e6443ddbf2d555775774e15557f928ae49e1ed68b0398c8fb89a30801e3da8c58b108005a1509b3c2b522a7fd6f7e953a6e52fba84cc48eb08b9813e7a91cc76c5d1f9be37de5c7"}, {0x78, 0x108, 0x7, "5315b11bfc6cf1974eec274ccf6602ba513deb4150eb325a4d9b53d2ffe0ff2c86034c8f78d4a30f06d6cfe7b126225943d911cba48863ecacadb5c3b8ff7f178b706813d9a5383e015804b40adc78ab60b53e70996e04f95c52c89e0561b353e5f241"}, {0x88, 0x110, 0x9, "20d6ea34ca974c32942eee183c6622869249054c3a77fa3d209b292e056d91f817955b1f1e7a927f90bb39646e66a065fb2717a98961fb987a3efc07153ffc1c93d5ddb0c5494ae5f6cb7827a3fc50b4275392e33d819bb7c32ce88f6d329969031117c90f435817e5324f4543e8b1789e842a820751b8"}], 0x2d8}}, {{&(0x7f0000001a00)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001a80)="6e028e201f803d8c95d24d166facc70f9a399b45e58968105f8252392f928d175cff345801e99f7cf58c290c4893e849e597bb74626dd9689ab9ae8ad8c1259095d8ae40d036ce4eea4e0f33019696d33688c590724d0314b14ff3d0f3a3442ef4df1184fd48db0234d9e2d1fb9f00e684134ba06dd75797f3943c10ffdb193f1cad557ce3c0dcb71ee58ffa1f52e956", 0x90}, {&(0x7f0000001b40)="f9a0a0e9ecd98b87ff7c1edc8931ec7d962e806684e47b65d6eefaff2ff36a4f0b421d7777ce72bc4a21e1239793cecb2768951e21ae025a96f56b8cb71e71b636e6ef51754ae1175c48b584e8c8c599b3f1012ba1d71613e344dc69c7921e363d1fa23d38b33250008998659475e30c08c8b73bb496f2145c490431b71b53a1acf7aa83d655905bf01f708fa29bf2eaa3453f9e71c3223775e02c010cad976e8753a935640ba517c11f303c041151f5db1046eabf2f7adbd85cc5bc9959c43c02558152cbbbdce55e1f28e3663a394217cd5e8f5400e4aa41", 0xd9}], 0x2, &(0x7f0000001c40)=[{0xe0, 0x29, 0x2, "86b20ca66d8f797ea2fc205780e8bdb49ed23f9cc5e1ec4bd4b65d562490532406f33361a43aafde10835ade85e35245bce2ebe53f628970c2c7636334f0ade49935b26a8a25f576e80fc40007eb38391e8aba1a61152cb5d0961cec23f6c02470fa4817884c91050dcb08c971d295ad23ea892dc0c1ca9b8a8d9d6f9052e04bf2a9c3aeb10c1ad067878299291c78b03b61e52a0a5f9aacf4bc4f4eb64145d87164508556b3c4c0bac72e6c768e4064b4785313916ecec747f02a0b385d4cbffce2b5c47a2bc70f5da8"}, {0x50, 0x109, 0xfffffff7, "ece86f85675b3dae8a8a81562a9ce8e45b82930ee79d08f2540ae7377d9fd57e27a1366eefd6521dd9d4fa5ed343444c0d8027c6cde000e4317b9013"}, {0xc0, 0x114, 0x2933d871, "e34433abeedc9518ba9abf046d892527eaf73d7bf9f11788b2f3c2d24eaf79879673b0c2fc6a3caa6572f6a046352f90aeca1d48fe0af7fc4d0edba4001006c652793a380f9744d6096cee7bace64248aa7b59f3221028ec7af2e6578fc9edf0723655d706c4ef4130206f0902457f4ddf7ae51313baf429924836f93fe34afe9c48cf30b05172f4b9cea3bfa9e5abacd18f8fd507bb3da2163604a845c9be43c44c7d3dedc7826ffa68"}, {0x18, 0x104, 0xff, "99cd"}, {0x88, 0x107, 0x40, "7d3d95dc0606696378f9f912c59a89d36f8979c4673fa831110ec8fe06d5060b6bb2cca0b7b68cd173f8c20462b89525bc3fa32b16e71116b791a73e1f667d9ef7e7f032166a85559be9cba94d0b503177be10bf751707f3a67d901bc0fdda83a4ce94f28683b848ce892eddfa1661d7c4b6"}, {0xe0, 0x108, 0x2, "bb6525b9d7fdf18390aabfc945a03d3a674f9eafba975dbf07fdfe4dc4dd731c32ad54223a16684d5f03f784d23df3f364e6152d509e39b06b11a10c36012a1b841c2602e991c67e27c450ea8fe29fa5d01dcbd8a65e534d42afe23ece1a185f6b66afd5aafeae911efa87058d9790cfc82d5f4a3db3f71c6a358cc9aa0334a27a77f8c266ff187ab198e1726a10b1decf002089f7d4f15a9cc0cd97d0ee8739767912dce700f8478bae30d23d4a6b14bd03b8bcd0e5dd93af145e53fab29bf34c27c942fbf82c8c9a9b4e6d5366"}, {0x1010, 0x103, 0xba, "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"}, {0x30, 0x10d, 0xf, "c1eabb9a0c2f4e3c0cfbca4116e418476b483a590d6a0500ee"}], 0x13b0}}, {{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000003000)="ec4494260c2d8c8434fe8f37f16e316483", 0x11}, {&(0x7f0000003040)="19124aa7d98946690ccd029b2a29242bc99554bbccaaf955ca59df8e7176fc31f3180acc8112233ce58c4d5833db253e93cec53a7ee75ad1db71b63ff84fb8eb8019caf38f9c412eff7f6bf1ba45c288f1e70ecb9667a77e2a6b1bcfd699a36e94e54ef85aef10dfeca53271e9a62e65c4f276cd09c65d8172e1e79fa108b5003312eb3ca72ded5195cecf11ac7400b07885e3b4defc0e9a9658075691eb2a7a12bdf299734224e857606518e918c25cb4fe5de86e80754570118a9fcc13cccbba1b3104", 0xc4}, {&(0x7f0000003140)="41c1712eb7f5dec8584d52da8bfbdb9419d938b4320b9742d9f373fef209386cb0abe8795d96c2e134eede7a35af", 0x2e}], 0x3}}], 0x4, 0x8010) 857.49792ms ago: executing program 4 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40084010}, 0x4080010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a08010000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000d4000480200001800b0001006c6f6f6b75700000100002800900010073797a3000000000100001800a0001006d61746368"], 0x130}}, 0x8810) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0xb8, &(0x7f0000000180)="0727c37248c18eb71fe2bb5bc0384965b7951c89688bf13aeff269f5b327fb8f79c655aeff3a53532a31382ea309ac0c474fb8ac3d14b53d81b1bb82e107e8232726f3a8a97547a4ad15fb12a048828512ef9ece8bed4b46cfc0736fbeb338f1a263bd53d44cd63eb7f60e27a4871bd5eb1e8f56e25070b5cac214c423cf6abc0dcc587e255d7b28b68d0d5dadaf21da2b5a023c8d71d12a08088a92a7e8360db5a1454a057b789e36ad49803cc40c058c4cb10f32a84a4f"}) 857.25116ms ago: executing program 32 (id=2244): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40084010}, 0x4080010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a08010000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000d4000480200001800b0001006c6f6f6b75700000100002800900010073797a3000000000100001800a0001006d61746368"], 0x130}}, 0x8810) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000000c0)=@buf={0xb8, &(0x7f0000000180)="0727c37248c18eb71fe2bb5bc0384965b7951c89688bf13aeff269f5b327fb8f79c655aeff3a53532a31382ea309ac0c474fb8ac3d14b53d81b1bb82e107e8232726f3a8a97547a4ad15fb12a048828512ef9ece8bed4b46cfc0736fbeb338f1a263bd53d44cd63eb7f60e27a4871bd5eb1e8f56e25070b5cac214c423cf6abc0dcc587e255d7b28b68d0d5dadaf21da2b5a023c8d71d12a08088a92a7e8360db5a1454a057b789e36ad49803cc40c058c4cb10f32a84a4f"}) 852.404771ms ago: executing program 2 (id=2246): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") pipe2$9p(&(0x7f00000000c0), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00008a0004000000138be0cafd0f0000070000e3cdac8927d0e385e809eaadbb62950372e86a27f5e8c785cf929e813b62d8d477516622380f75dcbdc0e31eaa3e8ecfbe100bdddd953dadfc3c19a365a0b25b8536b2b4f547625968c79774d62fb5373cf9e9b1a6", @ANYBLOB='\x00'/17], 0x50) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r4}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086dd"], 0x24}}, 0x0) 631.335649ms ago: executing program 3 (id=2247): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140), 0x14) 576.615506ms ago: executing program 3 (id=2250): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000004}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095", @ANYRES16=r2, @ANYRES64=r1, @ANYBLOB="4e97a46a4cece41d3e45e94cdf691360acee2db3beee278fffae26f68c7358602bad2cb3ff0d825c84c88a182b814aa28a135fde4065def90c399d181b4d3c4c7485ee43f493bdc9e5a22b7e9951"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000035c0)=[{0x3, 0x1, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/216, 0xd8}, {&(0x7f00000004c0)=""/63, 0x3f}, {&(0x7f00000005c0)=""/176, 0xb0}], &(0x7f0000000540)=[0xfffffffffffffc00, 0x8, 0xb, 0x6]}, {0x3, 0x1, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/166, 0xa6}, {&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)=""/131, 0x83}], &(0x7f0000000b40)=[0x6]}, {0x8, 0x1, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000b80)=""/203, 0xcb}, {&(0x7f0000000c80)=""/24, 0x18}, {&(0x7f0000000cc0)=""/217, 0xd9}, {&(0x7f0000000dc0)=""/156, 0x9c}, {&(0x7f0000000e80)=""/249, 0xf9}, {&(0x7f0000000f80)=""/177, 0xb1}, {&(0x7f0000003700)=""/249, 0xf9}, {&(0x7f0000001140)=""/85, 0x55}], &(0x7f0000001240)=[0x0, 0xfffffffffffffff9]}, {0x9, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001280)=""/225, 0xe1}, {&(0x7f0000001380)=""/231, 0xe7}, {&(0x7f0000001480)=""/60, 0x3c}, {&(0x7f00000014c0)=""/48, 0x30}, {&(0x7f0000001500)=""/87, 0x57}, {&(0x7f0000001580)=""/182, 0xb6}, {&(0x7f0000001640)=""/123, 0x7b}, {&(0x7f00000016c0)=""/81, 0x51}, {&(0x7f0000001740)=""/14, 0xe}], &(0x7f0000001840)}, {0x5, 0x1, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001880)=""/148, 0x94}, {&(0x7f0000001940)=""/109, 0x6d}, {&(0x7f00000019c0)=""/84, 0x54}, {&(0x7f0000001a40)=""/122, 0x7a}, {&(0x7f0000001ac0)=""/129, 0x81}], &(0x7f0000001c00)=[0x69c8b879, 0x10001, 0x101, 0x8000000000000001, 0xe]}, {0x0, 0x0, 0x0, &(0x7f0000001c40), &(0x7f0000001c80)=[0x1, 0x2, 0x6db83353, 0x2, 0x1, 0x400, 0x9cc]}, {0x8, 0x1, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001cc0)=""/51, 0x33}, {&(0x7f0000001d00)=""/182, 0xb6}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/112, 0x70}, {&(0x7f0000002e40)=""/35, 0x23}, {&(0x7f0000002e80)=""/43, 0x2b}, {&(0x7f0000002ec0)=""/54, 0x36}, {&(0x7f0000002f00)}], &(0x7f0000002fc0)=[0x3]}, {0x3, 0x1, 0x0, &(0x7f0000003280)=[{&(0x7f0000003000)=""/230, 0xe6}, {&(0x7f0000003100)=""/246, 0xf6}, {&(0x7f0000003200)=""/102, 0x66}], &(0x7f00000032c0)=[0xff, 0x0, 0xfffffffffffffff1, 0x9269f06, 0x4]}, {0x2, 0x1, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003300)=""/219, 0xdb}, {&(0x7f0000003400)=""/144, 0x90}], &(0x7f0000003500)=[0x7, 0x7, 0xf8]}, {0x0, 0x1, 0x0, &(0x7f0000003540), &(0x7f0000003580)=[0x7, 0x100000000, 0xa396, 0x80000000]}], 0xa) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r4, 0x5) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) flock(r5, 0x1) flock(r5, 0x2) r6 = dup3(r5, r4, 0x0) r7 = gettid() epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r0, &(0x7f00000003c0)={0x300c}) get_robust_list(r7, &(0x7f0000000100)=&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f0000000140)=0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r8, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/16], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180018110000", @ANYRESOCT=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r8}, 0x94) sendto$llc(r8, &(0x7f0000000400)="b23f826d328b89dd0dfabec6b04c4fd26761ad305e022f", 0x17, 0x40000, 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000380)={0x3, 0x5, 0xffff}) close(r0) 523.011553ms ago: executing program 0 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 463.242991ms ago: executing program 3 (id=2252): lsm_get_self_attr(0x66, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) syz_open_procfs(0x0, 0x0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x18) (async, rerun: 32) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 398.844899ms ago: executing program 0 (id=2254): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) io_uring_enter(r0, 0x29ab, 0xd480, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000600)) 350.229535ms ago: executing program 0 (id=2256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xb, 0x0) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r4}, &(0x7f0000000280), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="2a0000792fcca1d0c80001010000ff7f008a8e00000000000000612f1b6f16d743bf08e70729eafa642292846ec410827612b3bed1c03fedb10e845390a149e55d9e559011dbce0cd587518fb0529d26550a7a1cf1a6d8304ec4fccdbbc9c58d99a9b28a0d4aa080a201b66cd5aa589617722a9e3af95e45149a69dab12dbff07f5e5a45dbfdbbff020e44add9640c65d660f3c1de1cb3bdca6c4f731438a139828fa2cdf6bc4835c41b8447703996789b8baad733d8bde1b6f9bc3f1581e6c69cd3c5f1933c33b9a1665d5e05a9e01a9e0ec14ff883dcef1d0317efe9504ac85dd97fe03afe312aa8b3d815674809b726f7549fbfdd436d90578977b34d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) r6 = socket(0x200000000000011, 0x2, 0xd) syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='status\x00') bind$packet(r6, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004554a9e300fde1"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x20040889}, 0x20000850) r7 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r7, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) 283.304294ms ago: executing program 0 (id=2257): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xe8a}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000003000000080000000200000000000000", @ANYRES32, @ANYBLOB="3b7f81510e266beb047d1c21efaeae43037f0d4fef74bf1c47387e81ae338b9aaab012307f361b6807d55cb8197b39c8cc79d6d5e1877c5eceacd4290983a3720fd41325132bed8d3f6f", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, &(0x7f0000000500), &(0x7f0000000540)=r5}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) setpriority(0x2, 0x0, 0x9) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 282.834384ms ago: executing program 3 (id=2258): r0 = syz_open_dev$sg(0x0, 0x5, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x42, 0x81, 0x6d, "5346f6a06108ee453f1ac56853059871f1198c75f3eb52b19c65bb4d120e3b0e3af6be3e6027cdea3ce62a9d2b6f591197d156b92cf3784fa3bc36187382e243067d"}) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x4804}, 0x18) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x151625, 0xd, 0x2, 0x20107, 0x6, 0x5, 0x0, 0x4, 0x3}) close(r1) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x478, &(0x7f0000000300)="$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") chdir(&(0x7f0000000400)='./file0\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 267.302586ms ago: executing program 0 (id=2259): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$NL80211_CMD_JOIN_OCB(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 4) 203.616494ms ago: executing program 0 (id=2260): write$cgroup_int(0xffffffffffffffff, &(0x7f00000008c0)=0x5, 0xffffffffffffff25) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, 0x0}}], 0x1, 0x931766f6319eed44) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d42cfffe800000000000000000000000000010ff02000000000000000000"], 0x340a) 159.18116ms ago: executing program 1 (id=2261): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fa, 0x1411c2) dup(r0) open(&(0x7f0000000280)='.\x00', 0x40000, 0x101) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') unshare(0x2a020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@loopback, @loopback, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@local, @initdev={0xac, 0x1e, 0xff, 0x0}, r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4a, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', r6, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) lremovexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x0, 0x6}, &(0x7f00000005c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000680)={r12, 0x4, 0x6, [0xd, 0x1, 0x0, 0x2, 0x4, 0x2]}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) 139.479182ms ago: executing program 3 (id=2262): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000880)='sched_kthread_work_queue_work\x00', r1}, 0x18) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x8, @remote, 0xf}], 0x1c) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r2, 0x84, 0x4, &(0x7f00000006c0)="020000000980ffff007809d20d0fd3b45820fcb00dd6189a7952c9243ef73258ea5eb8f0f54c9c80729dc891c122e4e4fac124f91ae470bfdbd50f00000000000000a2c20cdaf01155d1c3a0ec9339daf2a90a89e520389cf527e0452a96c508cf3bb7a57b7e2fdaaabf8a16862431e57b9e3b95d3fd16db714d2dd7719c755edd0df873f33ffc411d39889e610cd22c8ed0872ed09e48dc8f688b1a72e077863022661b697ee6ba9e282233b104e93e08278a5ce8360f69638cf4a90f49980745291022dd51172ddbe87a46e5d781ac3548f3ccdb", 0xd5) r4 = socket(0x28, 0x5, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000200)={0x2a, 0x0, 0xfffffffe}, 0xc) r6 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x10) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) 120.316155ms ago: executing program 1 (id=2263): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x7, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) 88.793399ms ago: executing program 1 (id=2264): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2301091, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) 60.112032ms ago: executing program 1 (id=2265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r1 = syz_open_dev$loop(&(0x7f0000001ac0), 0x48000000000, 0x4102) io_setup(0x7d, &(0x7f0000000600)=0x0) r3 = eventfd2(0x4, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0xd40, 0x0) io_submit(r2, 0x5, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x401, r4, &(0x7f0000000000)="ab8ec0e3920deea657946b51d59a8b0fb0050b294fe87df0365ab45d93cef8bed436258f60fd21df62eedfa696d210a658ce41865244c47ac7916b9522089ba30e3b75e82390ae2750e5b8bdc0e0d17b701fce87ae20840a68e37e19f0cb02da2e06e4e45886a4", 0x67, 0xfffffffffffffffb, 0x0, 0x3, r3}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f00000000c0)="729b49933a3f56620dcf6faa4800", 0xe, 0x5, 0x0, 0x2, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x7f, r0, &(0x7f0000000180)="98eb1a07565aed95a6c97b664a1a8d8035e449cff34d392e932b008ef94ab5b23ce660fcc314f296f37827f99351c5065eb1678ef39e563f454ef7556237f75d5e189afd404059290a91e510d5", 0x4d, 0x0, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x40, r0, &(0x7f0000000240)="599a4621a795e919f922b643d28b91213009777e519cb1d60ec48f454e55425d764db52f2fc07074ebb6b1c65a6fceebaba7e27e17d413a60856fe868c7cc17c6f9b4d1264aac7a636b17abe1198bc7e8854b20d", 0x54, 0x56, 0x0, 0x2, r4}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000300)="3ad2b06dbb523c7191290fba7d61a2fc4545bb2c8c0b0fee2d814e73db0db25ab4e00c9d9969805b07dbd6918b7f1cd9cfd241de3a86c2cb5ff3bfdb5c3328db185235ef56a56427deed8744d400de71ba9ddbfed9035f12f8796ff52d7e40b3c5cb3421fa952c40f6ac64f0d8168b4709fbbeda42dcf2bb272dde787039ee9d9cc7a73bf44b41674f43153d2d53104eed7d854bf851cfe13b962c5a5960fc41d30b8b6c575d3e0d29788305adb3510e225f5492", 0xb4, 0xffffffffffffffc0, 0x0, 0x6, r3}]) 0s ago: executing program 2 (id=2266): r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 [ 90.306215][ T8049] __dump_stack+0x1d/0x30 [ 90.306240][ T8049] dump_stack_lvl+0x95/0xd0 [ 90.306304][ T8049] dump_stack+0x15/0x1b [ 90.306347][ T8049] should_fail_ex+0x265/0x280 [ 90.306369][ T8049] should_fail+0xb/0x20 [ 90.306386][ T8049] should_fail_usercopy+0x1a/0x20 [ 90.306433][ T8049] _copy_from_user+0x1c/0xb0 [ 90.306458][ T8049] ___sys_sendmsg+0xc1/0x1d0 [ 90.306497][ T8049] __x64_sys_sendmsg+0xd4/0x160 [ 90.306527][ T8049] x64_sys_call+0x17ba/0x3000 [ 90.306588][ T8049] do_syscall_64+0xca/0x2b0 [ 90.306619][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.306639][ T8049] RIP: 0033:0x7fc1255ff749 [ 90.306652][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.306721][ T8049] RSP: 002b:00007fc12405f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.306739][ T8049] RAX: ffffffffffffffda RBX: 00007fc125855fa0 RCX: 00007fc1255ff749 [ 90.306751][ T8049] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 90.306763][ T8049] RBP: 00007fc12405f090 R08: 0000000000000000 R09: 0000000000000000 [ 90.306774][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.306787][ T8049] R13: 00007fc125856038 R14: 00007fc125855fa0 R15: 00007ffda6a85828 [ 90.306805][ T8049] [ 90.544786][ T8039] set_capacity_and_notify: 14 callbacks suppressed [ 90.544807][ T8039] loop4: detected capacity change from 0 to 256 [ 90.560292][ T8055] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 90.574098][ T8055] bond1: entered promiscuous mode [ 90.591546][ T8055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.703139][ T8055] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 90.711023][ T8055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1531'. [ 90.758084][ T8062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8062 comm=syz.3.1531 [ 90.808853][ T8055] bond1: (slave bridge1): making interface the new active one [ 90.816519][ T8055] bridge1: entered promiscuous mode [ 90.835715][ T8055] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 90.975747][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1530'. [ 91.176164][ T8069] netlink: 'syz.4.1534': attribute type 1 has an invalid length. [ 91.275850][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1534'. [ 91.515056][ T8069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.542353][ T8072] bond1 (unregistering): Released all slaves [ 91.657285][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1537'. [ 91.683740][ T8089] FAULT_INJECTION: forcing a failure. [ 91.683740][ T8089] name failslab, interval 1, probability 0, space 0, times 0 [ 91.696528][ T8089] CPU: 1 UID: 0 PID: 8089 Comm: syz.3.1540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.696561][ T8089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.696578][ T8089] Call Trace: [ 91.696586][ T8089] [ 91.696595][ T8089] __dump_stack+0x1d/0x30 [ 91.696665][ T8089] dump_stack_lvl+0x95/0xd0 [ 91.696694][ T8089] dump_stack+0x15/0x1b [ 91.696750][ T8089] should_fail_ex+0x265/0x280 [ 91.696782][ T8089] should_failslab+0x8c/0xb0 [ 91.696812][ T8089] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 91.696903][ T8089] ? v9fs_init_fs_context+0xae/0x220 [ 91.697040][ T8089] kstrdup+0x3e/0xd0 [ 91.697073][ T8089] v9fs_init_fs_context+0xae/0x220 [ 91.697130][ T8089] alloc_fs_context+0x4a4/0x590 [ 91.697162][ T8089] fs_context_for_mount+0x22/0x30 [ 91.697186][ T8089] do_new_mount+0xea/0x6a0 [ 91.697270][ T8089] ? security_capable+0x83/0x90 [ 91.697336][ T8089] path_mount+0x4ab/0xb80 [ 91.697360][ T8089] ? user_path_at+0xbf/0x130 [ 91.697479][ T8089] __se_sys_mount+0x28c/0x2e0 [ 91.697507][ T8089] ? fput+0x8f/0xc0 [ 91.697544][ T8089] __x64_sys_mount+0x67/0x80 [ 91.697572][ T8089] x64_sys_call+0x2cca/0x3000 [ 91.697605][ T8089] do_syscall_64+0xca/0x2b0 [ 91.697651][ T8089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.697677][ T8089] RIP: 0033:0x7fe8d698f749 [ 91.697716][ T8089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.697787][ T8089] RSP: 002b:00007fe8d53f7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.697815][ T8089] RAX: ffffffffffffffda RBX: 00007fe8d6be5fa0 RCX: 00007fe8d698f749 [ 91.697832][ T8089] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 91.697848][ T8089] RBP: 00007fe8d53f7090 R08: 0000200000000580 R09: 0000000000000000 [ 91.697864][ T8089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 91.697878][ T8089] R13: 00007fe8d6be6038 R14: 00007fe8d6be5fa0 R15: 00007ffceef8f108 [ 91.697898][ T8089] [ 91.965996][ T8091] loop4: detected capacity change from 0 to 512 [ 92.027301][ T8095] loop1: detected capacity change from 0 to 2048 [ 92.058589][ T8091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1541: Parent and EA inode have the same ino 15 [ 92.081672][ T8091] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.1541: Parent and EA inode have the same ino 15 [ 92.094878][ T8096] loop3: detected capacity change from 0 to 4096 [ 92.103089][ T8091] EXT4-fs (loop4): 1 orphan inode deleted [ 92.210947][ T8107] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1548'. [ 92.221494][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1548'. [ 92.304099][ T8115] loop4: detected capacity change from 0 to 128 [ 92.316742][ T8115] tipc: Started in network mode [ 92.321658][ T8115] tipc: Node identity 4, cluster identity 4711 [ 92.327926][ T8115] tipc: Node number set to 4 [ 92.360345][ T8117] netlink: 'syz.0.1551': attribute type 1 has an invalid length. [ 92.369194][ T8119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26353 sclass=netlink_route_socket pid=8119 comm=syz.2.1552 [ 92.389015][ T8117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.401366][ T8117] bond1 (unregistering): Released all slaves [ 92.441514][ T8127] loop4: detected capacity change from 0 to 512 [ 92.448281][ T8127] EXT4-fs: Ignoring removed oldalloc option [ 92.455962][ T8127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 92.467352][ T8127] EXT4-fs (loop4): 1 truncate cleaned up [ 92.478247][ T8127] EXT4-fs: Ignoring removed i_version option [ 92.484351][ T8127] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 92.534318][ T8114] syz.1.1545 (8114) used greatest stack depth: 8672 bytes left [ 92.570094][ T8142] loop4: detected capacity change from 0 to 1024 [ 92.577188][ T8142] EXT4-fs: Ignoring removed nobh option [ 92.582941][ T8142] EXT4-fs: Ignoring removed bh option [ 92.658041][ T8149] bridge0: entered promiscuous mode [ 92.664867][ T8149] bridge0: port 3(macsec1) entered blocking state [ 92.671371][ T8149] bridge0: port 3(macsec1) entered disabled state [ 92.678746][ T8149] macsec1: entered allmulticast mode [ 92.684104][ T8149] bridge0: entered allmulticast mode [ 92.690928][ T8149] macsec1: left allmulticast mode [ 92.696145][ T8149] bridge0: left allmulticast mode [ 92.701797][ T8149] bridge0: left promiscuous mode [ 92.715689][ T8151] loop4: detected capacity change from 0 to 1024 [ 92.722785][ T8151] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 92.801040][ T8154] bridge_slave_0: left allmulticast mode [ 92.806811][ T8154] bridge_slave_0: left promiscuous mode [ 92.812494][ T8154] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.823724][ T8154] bridge_slave_1: left allmulticast mode [ 92.829492][ T8154] bridge_slave_1: left promiscuous mode [ 92.835361][ T8154] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.849332][ T8154] bond0: (slave bond_slave_0): Releasing backup interface [ 92.860650][ T8154] bond0: (slave bond_slave_1): Releasing backup interface [ 92.873645][ T8154] team0: Port device team_slave_0 removed [ 92.882698][ T8154] team0: Port device team_slave_1 removed [ 92.893221][ T8154] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.910297][ T8159] tipc: Enabled bearer , priority 0 [ 92.924330][ T347] tipc: Resetting bearer [ 92.944850][ T8164] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 92.951430][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 92.959200][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 92.998154][ T8164] SELinux: failed to load policy [ 93.004236][ T8164] 9p: Bad value for 'source' [ 93.016076][ T8165] vhci_hcd: connection closed [ 93.016508][ T2586] vhci_hcd vhci_hcd.3: stop threads [ 93.026495][ T2586] vhci_hcd vhci_hcd.3: release socket [ 93.031894][ T2586] vhci_hcd vhci_hcd.3: disconnect device [ 93.161704][ T8177] loop4: detected capacity change from 0 to 512 [ 93.175982][ T8177] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.230430][ T8177] FAULT_INJECTION: forcing a failure. [ 93.230430][ T8177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.243718][ T8177] CPU: 1 UID: 0 PID: 8177 Comm: syz.4.1571 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.243748][ T8177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.243760][ T8177] Call Trace: [ 93.243785][ T8177] [ 93.243796][ T8177] __dump_stack+0x1d/0x30 [ 93.243882][ T8177] dump_stack_lvl+0x95/0xd0 [ 93.243908][ T8177] dump_stack+0x15/0x1b [ 93.244007][ T8177] should_fail_ex+0x265/0x280 [ 93.244035][ T8177] should_fail+0xb/0x20 [ 93.244059][ T8177] should_fail_usercopy+0x1a/0x20 [ 93.244089][ T8177] strncpy_from_user+0x27/0x260 [ 93.244182][ T8177] getname_flags+0xae/0x3b0 [ 93.244213][ T8177] __x64_sys_rename+0x33/0x70 [ 93.244308][ T8177] x64_sys_call+0x24e/0x3000 [ 93.244340][ T8177] do_syscall_64+0xca/0x2b0 [ 93.244383][ T8177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.244410][ T8177] RIP: 0033:0x7f0bb07df749 [ 93.244508][ T8177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.244526][ T8177] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 93.244545][ T8177] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 93.244638][ T8177] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 00002000000000c0 [ 93.244652][ T8177] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 93.244744][ T8177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.244756][ T8177] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 93.244775][ T8177] [ 93.428334][ T8184] __nla_validate_parse: 5 callbacks suppressed [ 93.428425][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1573'. [ 93.443613][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1573'. [ 93.452648][ T8184] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1573'. [ 93.544048][ T8196] FAULT_INJECTION: forcing a failure. [ 93.544048][ T8196] name failslab, interval 1, probability 0, space 0, times 0 [ 93.556888][ T8196] CPU: 1 UID: 0 PID: 8196 Comm: syz.4.1579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.556955][ T8196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.556966][ T8196] Call Trace: [ 93.556972][ T8196] [ 93.556983][ T8196] __dump_stack+0x1d/0x30 [ 93.557022][ T8196] dump_stack_lvl+0x95/0xd0 [ 93.557041][ T8196] dump_stack+0x15/0x1b [ 93.557129][ T8196] should_fail_ex+0x265/0x280 [ 93.557149][ T8196] should_failslab+0x8c/0xb0 [ 93.557246][ T8196] kmem_cache_alloc_noprof+0x69/0x4b0 [ 93.557265][ T8196] ? skb_clone+0x151/0x1f0 [ 93.557399][ T8196] skb_clone+0x151/0x1f0 [ 93.557503][ T8196] __netlink_deliver_tap+0x2c9/0x500 [ 93.557535][ T8196] netlink_unicast+0x66b/0x690 [ 93.557566][ T8196] netlink_sendmsg+0x58b/0x6b0 [ 93.557655][ T8196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.557683][ T8196] __sock_sendmsg+0x145/0x180 [ 93.557700][ T8196] ____sys_sendmsg+0x31e/0x4a0 [ 93.557728][ T8196] ___sys_sendmsg+0x17b/0x1d0 [ 93.557797][ T8196] __x64_sys_sendmsg+0xd4/0x160 [ 93.557881][ T8196] x64_sys_call+0x17ba/0x3000 [ 93.557986][ T8196] do_syscall_64+0xca/0x2b0 [ 93.558069][ T8196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.558088][ T8196] RIP: 0033:0x7f0bb07df749 [ 93.558102][ T8196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.558191][ T8196] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.558208][ T8196] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 93.558219][ T8196] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000003 [ 93.558230][ T8196] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 93.558241][ T8196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.558283][ T8196] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 93.558299][ T8196] [ 93.559265][ T8197] FAULT_INJECTION: forcing a failure. [ 93.559265][ T8197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.702433][ T8202] loop4: detected capacity change from 0 to 2048 [ 93.709137][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.0.1578 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.709280][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.709345][ T8197] Call Trace: [ 93.709373][ T8197] [ 93.709402][ T8197] __dump_stack+0x1d/0x30 [ 93.709543][ T8197] dump_stack_lvl+0x95/0xd0 [ 93.709621][ T8197] dump_stack+0x15/0x1b [ 93.709750][ T8197] should_fail_ex+0x265/0x280 [ 93.709809][ T8197] should_fail+0xb/0x20 [ 93.709866][ T8197] should_fail_usercopy+0x1a/0x20 [ 93.709993][ T8197] _copy_to_user+0x20/0xa0 [ 93.710084][ T8197] simple_read_from_buffer+0xb5/0x130 [ 93.710156][ T8197] proc_fail_nth_read+0x10e/0x150 [ 93.710302][ T8197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.710394][ T8197] vfs_read+0x1a8/0x770 [ 93.710459][ T8197] ? __rcu_read_unlock+0x4f/0x70 [ 93.710527][ T8197] ? __fget_files+0x184/0x1c0 [ 93.710625][ T8197] ? mutex_lock+0x58/0x90 [ 93.710753][ T8197] ksys_read+0xda/0x1a0 [ 93.710816][ T8197] __x64_sys_read+0x40/0x50 [ 93.710910][ T8197] x64_sys_call+0x2889/0x3000 [ 93.711062][ T8197] do_syscall_64+0xca/0x2b0 [ 93.711180][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.711282][ T8197] RIP: 0033:0x7fc1255fe15c [ 93.711333][ T8197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.711392][ T8197] RSP: 002b:00007fc12403e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.711507][ T8197] RAX: ffffffffffffffda RBX: 00007fc125856090 RCX: 00007fc1255fe15c [ 93.711548][ T8197] RDX: 000000000000000f RSI: 00007fc12403e0a0 RDI: 0000000000000004 [ 93.711588][ T8197] RBP: 00007fc12403e090 R08: 0000000000000000 R09: 0000000000000000 [ 93.711689][ T8197] R10: 0000200000000680 R11: 0000000000000246 R12: 0000000000000001 [ 93.711741][ T8197] R13: 00007fc125856128 R14: 00007fc125856090 R15: 00007ffda6a85828 [ 93.711811][ T8197] [ 93.845037][ T8205] netlink: 'syz.0.1582': attribute type 1 has an invalid length. [ 93.870850][ T8202] ext4 filesystem being mounted at /295/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.914133][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1582'. [ 93.936335][ T8202] 9p: Bad value for 'wfdno' [ 94.008438][ T8205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.017616][ T8208] bond1 (unregistering): Released all slaves [ 94.056832][ T8216] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1584'. [ 94.065972][ T8216] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1584'. [ 94.091606][ T8218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1583'. [ 94.168989][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1591'. [ 94.209084][ T8239] xt_CONNSECMARK: invalid mode: 66 [ 94.319536][ T8258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1601'. [ 94.361141][ T8267] EXT4-fs: Ignoring removed nobh option [ 94.366864][ T8267] EXT4-fs: Ignoring removed bh option [ 94.382403][ T8266] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.402914][ T8266] vhci_hcd vhci_hcd.2: invalid port number 96 [ 94.409161][ T8266] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 94.417422][ T8263] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.425236][ T8263] vhci_hcd vhci_hcd.2: invalid port number 96 [ 94.431372][ T8263] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 94.497781][ T8283] netlink: 'syz.1.1610': attribute type 21 has an invalid length. [ 94.514238][ T8283] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1610'. [ 94.523332][ T8283] netlink: 'syz.1.1610': attribute type 1 has an invalid length. [ 94.591061][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 94.591081][ T29] audit: type=1326 audit(1768322548.685:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb07df749 code=0x7ffc0000 [ 94.629425][ T29] audit: type=1326 audit(1768322548.685:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bb07df749 code=0x7ffc0000 [ 94.653098][ T29] audit: type=1326 audit(1768322548.715:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8301 comm="syz.4.1617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bb07df749 code=0x7ffc0000 [ 94.676671][ T29] audit: type=1326 audit(1768322548.715:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.700270][ T29] audit: type=1326 audit(1768322548.715:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.724136][ T29] audit: type=1326 audit(1768322548.715:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.747800][ T29] audit: type=1326 audit(1768322548.715:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.771393][ T29] audit: type=1326 audit(1768322548.715:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.794893][ T29] audit: type=1326 audit(1768322548.725:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 94.818502][ T29] audit: type=1326 audit(1768322548.725:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8288 comm="syz.3.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe8d69915dc code=0x7ffc0000 [ 94.846058][ T8310] netlink: 'syz.2.1619': attribute type 4 has an invalid length. [ 94.888516][ T8316] lo speed is unknown, defaulting to 1000 [ 94.897562][ T8316] lo speed is unknown, defaulting to 1000 [ 94.903628][ T8316] lo speed is unknown, defaulting to 1000 [ 94.911937][ T8314] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.919551][ T8314] vhci_hcd vhci_hcd.2: invalid port number 96 [ 94.925753][ T8314] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 95.037879][ T8316] infiniband syz1: set active [ 95.042629][ T8316] infiniband syz1: added lo [ 95.047363][ T10] lo speed is unknown, defaulting to 1000 [ 95.060369][ T8316] RDS/IB: syz1: added [ 95.065251][ T8316] smc: adding ib device syz1 with port count 1 [ 95.078220][ T8316] smc: ib device syz1 port 1 has no pnetid [ 95.084663][ T10] lo speed is unknown, defaulting to 1000 [ 95.091838][ T8324] loop1: p3 p4 < > [ 95.095933][ T8316] lo speed is unknown, defaulting to 1000 [ 95.102334][ T8324] loop1: p3 size 861184 extends beyond EOD, truncated [ 95.148882][ T8316] lo speed is unknown, defaulting to 1000 [ 95.175376][ T8332] netlink: 'syz.4.1629': attribute type 1 has an invalid length. [ 95.193189][ T8316] lo speed is unknown, defaulting to 1000 [ 95.235501][ T8332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.267958][ T8316] lo speed is unknown, defaulting to 1000 [ 95.293125][ T8332] bond1 (unregistering): Released all slaves [ 95.342179][ T8316] lo speed is unknown, defaulting to 1000 [ 95.377436][ T8351] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.384953][ T8351] vhci_hcd vhci_hcd.2: invalid port number 96 [ 95.391155][ T8351] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 95.444382][ T8360] mmap: syz.2.1639 (8360) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.469210][ T8360] vxcan1: entered allmulticast mode [ 95.492337][ T8360] vxcan1: left allmulticast mode [ 95.564425][ T8370] netlink: 'syz.3.1642': attribute type 1 has an invalid length. [ 95.572438][ T8370] netlink: 'syz.3.1642': attribute type 1 has an invalid length. [ 95.581266][ T8372] FAULT_INJECTION: forcing a failure. [ 95.581266][ T8372] name failslab, interval 1, probability 0, space 0, times 0 [ 95.594207][ T8372] CPU: 0 UID: 0 PID: 8372 Comm: syz.4.1643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.594239][ T8372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.594254][ T8372] Call Trace: [ 95.594261][ T8372] [ 95.594271][ T8372] __dump_stack+0x1d/0x30 [ 95.594346][ T8372] dump_stack_lvl+0x95/0xd0 [ 95.594374][ T8372] dump_stack+0x15/0x1b [ 95.594399][ T8372] should_fail_ex+0x265/0x280 [ 95.594429][ T8372] should_failslab+0x8c/0xb0 [ 95.594474][ T8372] kmem_cache_alloc_noprof+0x69/0x4b0 [ 95.594526][ T8372] ? key_alloc+0x27d/0x9a0 [ 95.594641][ T8372] key_alloc+0x27d/0x9a0 [ 95.594672][ T8372] keyring_alloc+0x45/0xb0 [ 95.594737][ T8372] lookup_user_key+0x2ea/0xd10 [ 95.594765][ T8372] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 95.594808][ T8372] __se_sys_add_key+0x268/0x350 [ 95.594853][ T8372] __x64_sys_add_key+0x67/0x80 [ 95.594893][ T8372] x64_sys_call+0x2ea3/0x3000 [ 95.594957][ T8372] do_syscall_64+0xca/0x2b0 [ 95.595002][ T8372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.595084][ T8372] RIP: 0033:0x7f0bb07df749 [ 95.595103][ T8372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.595127][ T8372] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.595229][ T8372] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 95.595246][ T8372] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 95.595263][ T8372] RBP: 00007f0baf247090 R08: ffffffffffffffff R09: 0000000000000000 [ 95.595279][ T8372] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 95.595295][ T8372] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 95.595321][ T8372] [ 95.788260][ T8375] lo speed is unknown, defaulting to 1000 [ 95.840783][ T8368] Process accounting resumed [ 95.872520][ T8379] set_capacity_and_notify: 3 callbacks suppressed [ 95.872539][ T8379] loop4: detected capacity change from 0 to 1024 [ 95.890039][ T8381] loop3: detected capacity change from 0 to 512 [ 95.897170][ T8379] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 95.938932][ T8379] netlink: 'syz.4.1647': attribute type 1 has an invalid length. [ 95.968281][ T8389] loop3: detected capacity change from 0 to 512 [ 95.976152][ T8379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.995269][ T8379] bond1 (unregistering): Released all slaves [ 96.002746][ T8389] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1651: bg 0: block 248: padding at end of block bitmap is not set [ 96.020897][ T8389] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1651: Failed to acquire dquot type 1 [ 96.091936][ T8389] EXT4-fs (loop3): 1 truncate cleaned up [ 96.101535][ T8389] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.126926][ T8407] loop1: detected capacity change from 0 to 4096 [ 96.242091][ T8421] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 96.721543][ T8446] netlink: 'syz.0.1670': attribute type 1 has an invalid length. [ 96.735540][ T8446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.745609][ T8446] bond1 (unregistering): Released all slaves [ 97.243348][ T8515] FAULT_INJECTION: forcing a failure. [ 97.243348][ T8515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.256533][ T8515] CPU: 0 UID: 0 PID: 8515 Comm: syz.1.1692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.256566][ T8515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.256582][ T8515] Call Trace: [ 97.256598][ T8515] [ 97.256607][ T8515] __dump_stack+0x1d/0x30 [ 97.256644][ T8515] dump_stack_lvl+0x95/0xd0 [ 97.256737][ T8515] dump_stack+0x15/0x1b [ 97.256764][ T8515] should_fail_ex+0x265/0x280 [ 97.256796][ T8515] should_fail+0xb/0x20 [ 97.256822][ T8515] should_fail_usercopy+0x1a/0x20 [ 97.256893][ T8515] _copy_from_user+0x1c/0xb0 [ 97.256930][ T8515] ___sys_sendmsg+0xc1/0x1d0 [ 97.257003][ T8515] __x64_sys_sendmsg+0xd4/0x160 [ 97.257049][ T8515] x64_sys_call+0x17ba/0x3000 [ 97.257082][ T8515] do_syscall_64+0xca/0x2b0 [ 97.257121][ T8515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.257143][ T8515] RIP: 0033:0x7f40f718f749 [ 97.257157][ T8515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.257179][ T8515] RSP: 002b:00007f40f5bef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.257205][ T8515] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718f749 [ 97.257221][ T8515] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 97.257238][ T8515] RBP: 00007f40f5bef090 R08: 0000000000000000 R09: 0000000000000000 [ 97.257254][ T8515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.257327][ T8515] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 97.257355][ T8515] [ 97.792836][ T8549] netlink: 'syz.4.1701': attribute type 1 has an invalid length. [ 97.818824][ T8549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.846583][ T8549] bond1 (unregistering): Released all slaves [ 97.937451][ T8558] lo speed is unknown, defaulting to 1000 [ 97.953883][ T8556] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.964411][ T8556] vhci_hcd vhci_hcd.2: invalid port number 96 [ 97.970557][ T8556] vhci_hcd vhci_hcd.2: default hub control req: 1f00 vfffa i0060 l0 [ 98.055936][ T8562] loop3: detected capacity change from 0 to 1024 [ 98.063675][ T8562] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 98.241118][ T8579] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 98.241118][ T8579] program syz.4.1712 not setting count and/or reply_len properly [ 98.421655][ T8584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.443736][ T8584] bond1 (unregistering): Released all slaves [ 98.458607][ T8582] __nla_validate_parse: 29 callbacks suppressed [ 98.458625][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1713'. [ 98.527660][ T8590] loop1: detected capacity change from 0 to 1024 [ 98.535019][ T8590] EXT4-fs: Ignoring removed nobh option [ 98.540646][ T8590] EXT4-fs: Ignoring removed bh option [ 98.644242][ T8596] loop4: detected capacity change from 0 to 512 [ 98.674056][ T8598] loop4: detected capacity change from 0 to 512 [ 98.690435][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 98.699507][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1717'. [ 98.711307][ T8598] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.891746][ T8617] validate_nla: 2 callbacks suppressed [ 98.891764][ T8617] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 98.910780][ T8623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.934443][ T8623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.943815][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1726'. [ 98.975133][ T8617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.981988][ T8630] loop3: detected capacity change from 0 to 512 [ 98.989089][ T8632] FAULT_INJECTION: forcing a failure. [ 98.989089][ T8632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.002701][ T8632] CPU: 0 UID: 0 PID: 8632 Comm: syz.4.1731 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.002848][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.002901][ T8632] Call Trace: [ 99.002908][ T8632] [ 99.002918][ T8632] __dump_stack+0x1d/0x30 [ 99.002963][ T8632] dump_stack_lvl+0x95/0xd0 [ 99.002984][ T8632] dump_stack+0x15/0x1b [ 99.003022][ T8632] should_fail_ex+0x265/0x280 [ 99.003048][ T8632] should_fail+0xb/0x20 [ 99.003072][ T8632] should_fail_usercopy+0x1a/0x20 [ 99.003096][ T8632] _copy_from_user+0x1c/0xb0 [ 99.003129][ T8632] ___sys_sendmsg+0xc1/0x1d0 [ 99.003253][ T8632] __x64_sys_sendmsg+0xd4/0x160 [ 99.003354][ T8632] x64_sys_call+0x17ba/0x3000 [ 99.003387][ T8632] do_syscall_64+0xca/0x2b0 [ 99.003430][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.003457][ T8632] RIP: 0033:0x7f0bb07df749 [ 99.003557][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.003576][ T8632] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.003596][ T8632] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 99.003609][ T8632] RDX: 00000000000040c0 RSI: 00002000000000c0 RDI: 0000000000000003 [ 99.003624][ T8632] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 99.003641][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.003713][ T8632] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 99.003737][ T8632] [ 99.198814][ T8637] FAULT_INJECTION: forcing a failure. [ 99.198814][ T8637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.211943][ T8637] CPU: 1 UID: 0 PID: 8637 Comm: syz.3.1733 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.212007][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.212024][ T8637] Call Trace: [ 99.212033][ T8637] [ 99.212043][ T8637] __dump_stack+0x1d/0x30 [ 99.212076][ T8637] dump_stack_lvl+0x95/0xd0 [ 99.212100][ T8637] dump_stack+0x15/0x1b [ 99.212126][ T8637] should_fail_ex+0x265/0x280 [ 99.212187][ T8637] should_fail+0xb/0x20 [ 99.212207][ T8637] should_fail_usercopy+0x1a/0x20 [ 99.212298][ T8637] _copy_from_user+0x1c/0xb0 [ 99.212330][ T8637] __sys_bind+0x106/0x2a0 [ 99.212367][ T8637] __x64_sys_bind+0x3f/0x50 [ 99.212389][ T8637] x64_sys_call+0x2ceb/0x3000 [ 99.212459][ T8637] do_syscall_64+0xca/0x2b0 [ 99.212506][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.212533][ T8637] RIP: 0033:0x7fe8d698f749 [ 99.212559][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.212583][ T8637] RSP: 002b:00007fe8d53f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 99.212602][ T8637] RAX: ffffffffffffffda RBX: 00007fe8d6be5fa0 RCX: 00007fe8d698f749 [ 99.212615][ T8637] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 99.212627][ T8637] RBP: 00007fe8d53f7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.212640][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.212657][ T8637] R13: 00007fe8d6be6038 R14: 00007fe8d6be5fa0 R15: 00007ffceef8f108 [ 99.212753][ T8637] [ 99.375403][ T8628] bond1 (unregistering): Released all slaves [ 99.479650][ T8657] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8657 comm=syz.3.1738 [ 99.495383][ T8657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1738'. [ 99.505233][ T8657] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'. [ 99.605990][ T29] kauditd_printk_skb: 1308 callbacks suppressed [ 99.606008][ T29] audit: type=1326 audit(1768322553.705:11592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 99.637125][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1740'. [ 99.675312][ T29] audit: type=1326 audit(1768322553.695:11591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 99.698881][ T29] audit: type=1326 audit(1768322553.705:11593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 99.722453][ T29] audit: type=1326 audit(1768322553.735:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 99.745999][ T29] audit: type=1326 audit(1768322553.735:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 99.769616][ T29] audit: type=1326 audit(1768322553.735:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 99.793156][ T29] audit: type=1326 audit(1768322553.735:11594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8668 comm="syz.3.1744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 99.816703][ T29] audit: type=1326 audit(1768322553.735:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 99.840265][ T29] audit: type=1326 audit(1768322553.735:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f40f71915dc code=0x7ffc0000 [ 99.859635][ T8677] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8677 comm=syz.1.1747 [ 99.863716][ T29] audit: type=1326 audit(1768322553.745:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8660 comm="syz.1.1740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f40f7191514 code=0x7ffc0000 [ 99.922212][ T8677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1747'. [ 99.940084][ T8685] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 99.942731][ T8688] FAULT_INJECTION: forcing a failure. [ 99.942731][ T8688] name failslab, interval 1, probability 0, space 0, times 0 [ 99.960643][ T8688] CPU: 0 UID: 0 PID: 8688 Comm: syz.3.1749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 99.960751][ T8688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.960765][ T8688] Call Trace: [ 99.960772][ T8688] [ 99.960779][ T8688] __dump_stack+0x1d/0x30 [ 99.960806][ T8688] dump_stack_lvl+0x95/0xd0 [ 99.960828][ T8688] dump_stack+0x15/0x1b [ 99.960849][ T8688] should_fail_ex+0x265/0x280 [ 99.960883][ T8688] should_failslab+0x8c/0xb0 [ 99.960906][ T8688] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 99.960934][ T8688] ? sidtab_sid2str_get+0xa0/0x130 [ 99.960968][ T8688] kmemdup_noprof+0x2b/0x70 [ 99.961028][ T8688] sidtab_sid2str_get+0xa0/0x130 [ 99.961066][ T8688] security_sid_to_context_core+0x1eb/0x2e0 [ 99.961119][ T8688] security_sid_to_context+0x27/0x40 [ 99.961149][ T8688] selinux_lsmprop_to_secctx+0x67/0xf0 [ 99.961232][ T8688] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 99.961304][ T8688] audit_log_subj_ctx+0xa4/0x3e0 [ 99.961327][ T8688] ? skb_put+0xa9/0xf0 [ 99.961354][ T8688] audit_log_task_context+0x48/0x70 [ 99.961378][ T8688] audit_log_task+0xf4/0x250 [ 99.961519][ T8688] ? kstrtouint+0x76/0xc0 [ 99.961539][ T8688] audit_seccomp+0x61/0x100 [ 99.961598][ T8688] ? __seccomp_filter+0x832/0x1260 [ 99.961635][ T8688] __seccomp_filter+0x843/0x1260 [ 99.961664][ T8688] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 99.961749][ T8688] ? vfs_write+0x7e8/0x960 [ 99.961773][ T8688] ? __rcu_read_unlock+0x4f/0x70 [ 99.961803][ T8688] ? __fget_files+0x184/0x1c0 [ 99.961835][ T8688] __secure_computing+0x82/0x150 [ 99.961916][ T8688] syscall_trace_enter+0xcf/0x1e0 [ 99.961941][ T8688] do_syscall_64+0xa4/0x2b0 [ 99.961979][ T8688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.962001][ T8688] RIP: 0033:0x7fe8d698f749 [ 99.962068][ T8688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.962136][ T8688] RSP: 002b:00007fe8d53f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 99.962157][ T8688] RAX: ffffffffffffffda RBX: 00007fe8d6be5fa0 RCX: 00007fe8d698f749 [ 99.962170][ T8688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 99.962183][ T8688] RBP: 00007fe8d53f7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.962197][ T8688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.962272][ T8688] R13: 00007fe8d6be6038 R14: 00007fe8d6be5fa0 R15: 00007ffceef8f108 [ 99.962292][ T8688] [ 99.976709][ T8685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.064328][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1750'. [ 100.228459][ T8696] bond1 (unregistering): Released all slaves [ 100.350250][ T8713] IPv6: Can't replace route, no match found [ 100.373101][ T8716] loop1: detected capacity change from 0 to 128 [ 100.492642][ T8720] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 100.573757][ T8723] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.619525][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1761'. [ 100.703195][ T8742] FAULT_INJECTION: forcing a failure. [ 100.703195][ T8742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.716443][ T8742] CPU: 0 UID: 0 PID: 8742 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.716513][ T8742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.716529][ T8742] Call Trace: [ 100.716537][ T8742] [ 100.716547][ T8742] __dump_stack+0x1d/0x30 [ 100.716579][ T8742] dump_stack_lvl+0x95/0xd0 [ 100.716608][ T8742] dump_stack+0x15/0x1b [ 100.716721][ T8742] should_fail_ex+0x265/0x280 [ 100.716762][ T8742] should_fail+0xb/0x20 [ 100.716821][ T8742] should_fail_usercopy+0x1a/0x20 [ 100.716844][ T8742] _copy_from_user+0x1c/0xb0 [ 100.716875][ T8742] __sys_bpf+0x183/0x7c0 [ 100.716948][ T8742] __x64_sys_bpf+0x41/0x50 [ 100.716983][ T8742] x64_sys_call+0x28e1/0x3000 [ 100.717006][ T8742] do_syscall_64+0xca/0x2b0 [ 100.717111][ T8742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.717211][ T8742] RIP: 0033:0x7f40f718f749 [ 100.717226][ T8742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.717245][ T8742] RSP: 002b:00007f40f5bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.717262][ T8742] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718f749 [ 100.717273][ T8742] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 100.717290][ T8742] RBP: 00007f40f5bef090 R08: 0000000000000000 R09: 0000000000000000 [ 100.717305][ T8742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.717388][ T8742] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 100.717409][ T8742] [ 100.919865][ T8748] set_capacity_and_notify: 2 callbacks suppressed [ 100.919907][ T8748] loop4: detected capacity change from 0 to 512 [ 100.972638][ T8751] loop4: detected capacity change from 0 to 4096 [ 101.013916][ T8751] EXT4-fs mount: 131 callbacks suppressed [ 101.013958][ T8751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.220177][ T8784] FAULT_INJECTION: forcing a failure. [ 101.220177][ T8784] name failslab, interval 1, probability 0, space 0, times 0 [ 101.233223][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.1.1779 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.233257][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.233274][ T8784] Call Trace: [ 101.233281][ T8784] [ 101.233290][ T8784] __dump_stack+0x1d/0x30 [ 101.233363][ T8784] dump_stack_lvl+0x95/0xd0 [ 101.233391][ T8784] dump_stack+0x15/0x1b [ 101.233424][ T8784] should_fail_ex+0x265/0x280 [ 101.233454][ T8784] should_failslab+0x8c/0xb0 [ 101.233483][ T8784] kmem_cache_alloc_noprof+0x69/0x4b0 [ 101.233511][ T8784] ? __proc_create+0x253/0x4f0 [ 101.233580][ T8784] ? rb_insert_color+0x299/0x2b0 [ 101.233620][ T8784] __proc_create+0x253/0x4f0 [ 101.233662][ T8784] proc_create_data+0xa3/0x130 [ 101.233699][ T8784] recent_mt_check+0x77e/0x8f0 [ 101.233731][ T8784] recent_mt_check_v0+0x67/0x90 [ 101.233843][ T8784] xt_check_match+0x2ad/0x4f0 [ 101.233880][ T8784] ? mutex_unlock+0x4f/0x90 [ 101.233910][ T8784] ? xt_find_match+0x1d1/0x210 [ 101.233943][ T8784] translate_table+0xb4b/0x1070 [ 101.234025][ T8784] do_ip6t_set_ctl+0x678/0x840 [ 101.234049][ T8784] ? kstrtoull+0x111/0x140 [ 101.234069][ T8784] ? __rcu_read_unlock+0x4f/0x70 [ 101.234100][ T8784] nf_setsockopt+0x199/0x1b0 [ 101.234175][ T8784] ipv6_setsockopt+0x11a/0x130 [ 101.234229][ T8784] tcp_setsockopt+0x98/0xb0 [ 101.234279][ T8784] sock_common_setsockopt+0x69/0x80 [ 101.234308][ T8784] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 101.234337][ T8784] __sys_setsockopt+0x184/0x200 [ 101.234382][ T8784] __x64_sys_setsockopt+0x64/0x80 [ 101.234418][ T8784] x64_sys_call+0x21d5/0x3000 [ 101.234452][ T8784] do_syscall_64+0xca/0x2b0 [ 101.234569][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.234599][ T8784] RIP: 0033:0x7f40f718f749 [ 101.234637][ T8784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.234659][ T8784] RSP: 002b:00007f40f5bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.234679][ T8784] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718f749 [ 101.234692][ T8784] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 101.234704][ T8784] RBP: 00007f40f5bef090 R08: 0000000000000500 R09: 0000000000000000 [ 101.234718][ T8784] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.234767][ T8784] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 101.234793][ T8784] [ 101.489713][ T8786] loop3: detected capacity change from 0 to 128 [ 101.546587][ T8794] netlink: 'syz.2.1783': attribute type 1 has an invalid length. [ 101.561558][ T8794] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.596259][ T8794] bond2 (unregistering): Released all slaves [ 101.668498][ T8808] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 101.683887][ T8808] vhci_hcd vhci_hcd.2: invalid port number 96 [ 101.690154][ T8808] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 101.717581][ T8817] loop3: detected capacity change from 0 to 512 [ 101.835938][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.936429][ T8833] loop1: detected capacity change from 0 to 128 [ 101.991221][ T8838] loop4: detected capacity change from 0 to 512 [ 102.006570][ T8838] ext2: Unknown parameter 'permit_directio' [ 102.124711][ T8843] loop3: detected capacity change from 0 to 512 [ 102.145421][ T8843] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 102.153926][ T8843] EXT4-fs (loop3): orphan cleanup on readonly fs [ 102.171433][ T8843] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 102.210579][ T8843] EXT4-fs (loop3): Remounting filesystem read-only [ 102.231130][ T8843] EXT4-fs (loop3): 1 truncate cleaned up [ 102.259707][ T8843] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.298306][ T8876] loop1: detected capacity change from 0 to 512 [ 102.304712][ T8872] wireguard0: entered promiscuous mode [ 102.305530][ T8876] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.318492][ T8876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.319352][ T8870] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.327048][ T8876] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.357608][ T8870] vhci_hcd vhci_hcd.2: invalid port number 96 [ 102.363840][ T8870] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 102.373297][ T8876] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.1812: Allocating blocks 41-42 which overlap fs metadata [ 102.387233][ T8876] EXT4-fs (loop1): Remounting filesystem read-only [ 102.397202][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.410444][ T8876] EXT4-fs (loop1): 1 truncate cleaned up [ 102.438465][ T8882] lo speed is unknown, defaulting to 1000 [ 102.464563][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.515311][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.548152][ T8887] loop1: detected capacity change from 0 to 512 [ 102.576188][ T8887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.593991][ T8887] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.627309][ T8887] SELinux: Context @ is not valid (left unmapped). [ 102.648119][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.869357][ T8915] random: crng reseeded on system resumption [ 102.891344][ T8915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.919683][ T8915] netlink: 'syz.3.1818': attribute type 4 has an invalid length. [ 102.995317][ T8912] lo speed is unknown, defaulting to 1000 [ 103.580483][ T8932] __nla_validate_parse: 16 callbacks suppressed [ 103.580498][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1829'. [ 103.605436][ T8930] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.623910][ T8930] vhci_hcd vhci_hcd.2: invalid port number 96 [ 103.630044][ T8930] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 103.671670][ T8935] netlink: 'syz.4.1831': attribute type 1 has an invalid length. [ 103.704521][ T8935] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.784039][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1831'. [ 103.805538][ T8940] bond1 (unregistering): Released all slaves [ 103.898349][ T8927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8927 comm=syz.2.1828 [ 104.015857][ T8947] FAULT_INJECTION: forcing a failure. [ 104.015857][ T8947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.029036][ T8947] CPU: 1 UID: 0 PID: 8947 Comm: syz.4.1834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.029066][ T8947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.029101][ T8947] Call Trace: [ 104.029108][ T8947] [ 104.029115][ T8947] __dump_stack+0x1d/0x30 [ 104.029142][ T8947] dump_stack_lvl+0x95/0xd0 [ 104.029161][ T8947] dump_stack+0x15/0x1b [ 104.029238][ T8947] should_fail_ex+0x265/0x280 [ 104.029263][ T8947] should_fail+0xb/0x20 [ 104.029281][ T8947] should_fail_usercopy+0x1a/0x20 [ 104.029307][ T8947] _copy_from_user+0x1c/0xb0 [ 104.029365][ T8947] ___sys_sendmsg+0xc1/0x1d0 [ 104.029410][ T8947] __x64_sys_sendmsg+0xd4/0x160 [ 104.029463][ T8947] x64_sys_call+0x17ba/0x3000 [ 104.029559][ T8947] do_syscall_64+0xca/0x2b0 [ 104.029593][ T8947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.029613][ T8947] RIP: 0033:0x7f0bb07df749 [ 104.029629][ T8947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.029652][ T8947] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.029710][ T8947] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 104.029725][ T8947] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 104.029740][ T8947] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 104.029799][ T8947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.029810][ T8947] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 104.029829][ T8947] [ 104.239991][ T8950] 9p: Bad value for 'rfdno' [ 105.337731][ T8966] loop4: detected capacity change from 0 to 2048 [ 105.367276][ T8966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.391005][ T8966] FAULT_INJECTION: forcing a failure. [ 105.391005][ T8966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.404168][ T8966] CPU: 0 UID: 0 PID: 8966 Comm: syz.4.1839 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.404204][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 105.404221][ T8966] Call Trace: [ 105.404229][ T8966] [ 105.404281][ T8966] __dump_stack+0x1d/0x30 [ 105.404306][ T8966] dump_stack_lvl+0x95/0xd0 [ 105.404424][ T8966] dump_stack+0x15/0x1b [ 105.404452][ T8966] should_fail_ex+0x265/0x280 [ 105.404504][ T8966] should_fail+0xb/0x20 [ 105.404530][ T8966] should_fail_usercopy+0x1a/0x20 [ 105.404563][ T8966] _copy_from_user+0x1c/0xb0 [ 105.404601][ T8966] autofs_dev_ioctl+0xdd/0x6a0 [ 105.404630][ T8966] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 105.404669][ T8966] __se_sys_ioctl+0xce/0x140 [ 105.404795][ T8966] __x64_sys_ioctl+0x43/0x50 [ 105.404838][ T8966] x64_sys_call+0x14b0/0x3000 [ 105.404864][ T8966] do_syscall_64+0xca/0x2b0 [ 105.404915][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.405007][ T8966] RIP: 0033:0x7f0bb07df749 [ 105.405027][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.405050][ T8966] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.405070][ T8966] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 105.405082][ T8966] RDX: 0000200000000240 RSI: 00000000c0189374 RDI: 0000000000000004 [ 105.405094][ T8966] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 105.405168][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.405185][ T8966] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 105.405209][ T8966] [ 105.611340][ T8977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.623584][ T8977] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.637171][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.658727][ T8977] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wÞ£ÿ: bg 0: block 112: padding at end of block bitmap is not set [ 105.674246][ T8977] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 117 [ 105.687035][ T8977] EXT4-fs (loop1): This should not happen!! Data will be lost [ 105.687035][ T8977] [ 105.736952][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 105.736968][ T29] audit: type=1326 audit(1768322559.835:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.773382][ T29] audit: type=1326 audit(1768322559.875:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.797007][ T29] audit: type=1326 audit(1768322559.875:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.820801][ T29] audit: type=1326 audit(1768322559.875:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.844530][ T29] audit: type=1326 audit(1768322559.875:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.868326][ T29] audit: type=1326 audit(1768322559.875:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.891935][ T29] audit: type=1326 audit(1768322559.875:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.915535][ T29] audit: type=1326 audit(1768322559.875:12110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.939136][ T29] audit: type=1326 audit(1768322559.875:12111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 105.962674][ T29] audit: type=1326 audit(1768322559.875:12112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8976 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 106.047759][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.146730][ T9005] set_capacity_and_notify: 1 callbacks suppressed [ 106.146765][ T9005] loop1: detected capacity change from 0 to 512 [ 106.242331][ T9005] EXT4-fs (loop1): 1 orphan inode deleted [ 106.264200][ T347] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 106.308348][ T9005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.375523][ T9005] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.454982][ T9024] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 106.498806][ T9024] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.507200][ T8999] loop4: detected capacity change from 0 to 128 [ 106.523949][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 106.596359][ T9027] bond1 (unregistering): Released all slaves [ 106.620287][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.683870][ T8999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.695482][ T9032] loop3: detected capacity change from 0 to 1024 [ 106.729665][ T9034] loop1: detected capacity change from 0 to 1024 [ 106.741127][ T9032] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 106.764508][ T9034] EXT4-fs: Ignoring removed nobh option [ 106.770126][ T9034] EXT4-fs: Ignoring removed bh option [ 106.781586][ T9032] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 106.787713][ T8996] syz.4.1849 (8996) used greatest stack depth: 6408 bytes left [ 106.812029][ T9034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.820759][ T8999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.844009][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 106.866173][ T9032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.898216][ T9041] bond2 (unregistering): Released all slaves [ 106.906098][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.958738][ T8999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.032118][ T8999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.074711][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.082031][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.102027][ T9058] loop1: detected capacity change from 0 to 1024 [ 107.109772][ T9058] EXT4-fs: Ignoring removed nobh option [ 107.115560][ T9058] EXT4-fs: Ignoring removed bh option [ 107.120149][ T9056] bridge0: entered allmulticast mode [ 107.167302][ T347] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.178916][ T9058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.203914][ T347] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.239633][ T347] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.243480][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.249428][ T347] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.299864][ T9067] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 107.320686][ T9067] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.330439][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1874'. [ 107.351073][ T9067] bond2 (unregistering): Released all slaves [ 107.386306][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1877'. [ 107.416530][ T9075] loop1: detected capacity change from 0 to 4096 [ 107.423291][ T9075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.475038][ T9075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.545218][ T9092] loop4: detected capacity change from 0 to 1024 [ 107.592263][ T9092] EXT4-fs: Ignoring removed nobh option [ 107.598129][ T9092] EXT4-fs: Ignoring removed bh option [ 107.616689][ T9092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.669142][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.680542][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.730406][ T9104] netlink: 24 bytes leftover after parsing attributes in process `ÿ'. [ 107.785814][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 107.804253][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 107.805371][ T9110] loop1: detected capacity change from 0 to 1024 [ 107.821901][ T9110] EXT4-fs: Ignoring removed nobh option [ 107.827545][ T9110] EXT4-fs: Ignoring removed bh option [ 107.850624][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1890'. [ 107.861398][ T9110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.903563][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.937016][ T9122] loop4: detected capacity change from 0 to 1024 [ 107.951712][ T9122] EXT4-fs: Ignoring removed nobh option [ 107.957424][ T9122] EXT4-fs: Ignoring removed bh option [ 107.975654][ T9122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.031064][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.055227][ T9140] loop4: detected capacity change from 0 to 512 [ 108.213986][ T9152] syz.0.1904 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 108.424060][ T9158] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 108.424060][ T9158] program syz.3.1906 not setting count and/or reply_len properly [ 108.733050][ T9162] lo speed is unknown, defaulting to 1000 [ 109.121168][ T9177] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 109.129103][ T9177] __nla_validate_parse: 2 callbacks suppressed [ 109.129288][ T9177] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1914'. [ 109.187012][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 109.226880][ T9187] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.244257][ T9180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.272063][ T9180] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.300614][ T9177] rdma_op ffff88813d4d5180 conn xmit_rdma 0000000000000000 [ 109.313967][ T9187] bond0: option downdelay: invalid value (18446744073709551615) [ 109.321740][ T9187] bond0: option downdelay: allowed values 0 - 2147483647 [ 109.351261][ T9187] bond0 (unregistering): Released all slaves [ 109.410085][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 109.458271][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.553055][ T9207] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 109.657268][ T9208] lo speed is unknown, defaulting to 1000 [ 110.510572][ T9207] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 110.528102][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.538401][ T9203] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.563960][ T9203] vhci_hcd vhci_hcd.2: invalid port number 96 [ 110.570100][ T9203] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 110.597550][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1924'. [ 111.527033][ T9207] bond0 (unregistering): Released all slaves [ 111.742518][ T29] kauditd_printk_skb: 678 callbacks suppressed [ 111.742575][ T29] audit: type=1326 audit(1768322565.835:12790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.800365][ T29] audit: type=1326 audit(1768322565.865:12791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.823874][ T29] audit: type=1326 audit(1768322565.865:12792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.847438][ T29] audit: type=1326 audit(1768322565.875:12793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.870929][ T29] audit: type=1326 audit(1768322565.875:12794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.894504][ T29] audit: type=1326 audit(1768322565.875:12795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.918051][ T29] audit: type=1326 audit(1768322565.875:12796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.941927][ T29] audit: type=1326 audit(1768322565.875:12797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.965533][ T29] audit: type=1326 audit(1768322565.875:12798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 111.989069][ T29] audit: type=1326 audit(1768322565.875:12799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9226 comm="syz.3.1926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 112.074168][ T9234] FAULT_INJECTION: forcing a failure. [ 112.074168][ T9234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.087801][ T9234] CPU: 1 UID: 0 PID: 9234 Comm: syz.1.1929 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.087892][ T9234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.087905][ T9234] Call Trace: [ 112.087913][ T9234] [ 112.088000][ T9234] __dump_stack+0x1d/0x30 [ 112.088033][ T9234] dump_stack_lvl+0x95/0xd0 [ 112.088137][ T9234] dump_stack+0x15/0x1b [ 112.088165][ T9234] should_fail_ex+0x265/0x280 [ 112.088193][ T9234] should_fail+0xb/0x20 [ 112.088218][ T9234] should_fail_usercopy+0x1a/0x20 [ 112.088319][ T9234] _copy_from_user+0x1c/0xb0 [ 112.088364][ T9234] __sys_bpf+0x183/0x7c0 [ 112.088402][ T9234] __x64_sys_bpf+0x41/0x50 [ 112.088443][ T9234] x64_sys_call+0x28e1/0x3000 [ 112.088477][ T9234] do_syscall_64+0xca/0x2b0 [ 112.088525][ T9234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.088585][ T9234] RIP: 0033:0x7f40f718f749 [ 112.088638][ T9234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.088662][ T9234] RSP: 002b:00007f40f5bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 112.088687][ T9234] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718f749 [ 112.088699][ T9234] RDX: 0000000000000048 RSI: 00002000000006c0 RDI: 0000000000000000 [ 112.088712][ T9234] RBP: 00007f40f5bef090 R08: 0000000000000000 R09: 0000000000000000 [ 112.088724][ T9234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.088736][ T9234] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 112.088837][ T9234] [ 112.281402][ T9244] set_capacity_and_notify: 2 callbacks suppressed [ 112.281419][ T9244] loop3: detected capacity change from 0 to 1024 [ 112.312736][ T9246] loop4: detected capacity change from 0 to 128 [ 112.325764][ T9253] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1935'. [ 112.334996][ T9253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1935'. [ 112.343023][ T9244] ext2: Unknown parameter 'fsname' [ 112.360305][ T9253] loop1: detected capacity change from 0 to 128 [ 112.387000][ T9257] loop3: detected capacity change from 0 to 1024 [ 112.393892][ T9257] EXT4-fs: Ignoring removed nobh option [ 112.399517][ T9257] EXT4-fs: Ignoring removed bh option [ 112.419286][ T9257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.445852][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.476467][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1939'. [ 112.487008][ T9262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 112.506903][ T9265] FAULT_INJECTION: forcing a failure. [ 112.506903][ T9265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.520144][ T9265] CPU: 0 UID: 0 PID: 9265 Comm: syz.3.1938 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.520179][ T9265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.520210][ T9265] Call Trace: [ 112.520217][ T9265] [ 112.520226][ T9265] __dump_stack+0x1d/0x30 [ 112.520258][ T9265] dump_stack_lvl+0x95/0xd0 [ 112.520287][ T9265] dump_stack+0x15/0x1b [ 112.520358][ T9265] should_fail_ex+0x265/0x280 [ 112.520451][ T9265] should_fail+0xb/0x20 [ 112.520471][ T9265] should_fail_usercopy+0x1a/0x20 [ 112.520497][ T9265] _copy_from_user+0x1c/0xb0 [ 112.520534][ T9265] kstrtouint_from_user+0x69/0xf0 [ 112.520603][ T9265] ? 0xffffffff81000000 [ 112.520620][ T9265] ? selinux_file_permission+0x1e2/0x320 [ 112.520754][ T9265] proc_fail_nth_write+0x50/0x160 [ 112.520790][ T9265] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 112.520818][ T9265] vfs_write+0x269/0x960 [ 112.520875][ T9265] ? vfs_read+0x4e6/0x770 [ 112.520895][ T9265] ? __rcu_read_unlock+0x4f/0x70 [ 112.520920][ T9265] ? __fget_files+0x184/0x1c0 [ 112.520949][ T9265] ? mutex_lock+0x58/0x90 [ 112.521018][ T9265] ksys_write+0xda/0x1a0 [ 112.521038][ T9265] __x64_sys_write+0x40/0x50 [ 112.521059][ T9265] x64_sys_call+0x2847/0x3000 [ 112.521174][ T9265] do_syscall_64+0xca/0x2b0 [ 112.521336][ T9265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.521364][ T9265] RIP: 0033:0x7fe8d698e1ff [ 112.521382][ T9265] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 112.521427][ T9265] RSP: 002b:00007fe8d53f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 112.521610][ T9265] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe8d698e1ff [ 112.521657][ T9265] RDX: 0000000000000001 RSI: 00007fe8d53f70a0 RDI: 0000000000000004 [ 112.521669][ T9265] RBP: 00007fe8d53f7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.521701][ T9265] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 112.521717][ T9265] R13: 00007fe8d6be6038 R14: 00007fe8d6be5fa0 R15: 00007ffceef8f108 [ 112.521739][ T9265] [ 112.807198][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1936'. [ 113.058960][ T9269] netlink: 'syz.0.1940': attribute type 1 has an invalid length. [ 113.178080][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 113.220180][ T9269] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.239108][ T9274] bond1 (unregistering): Released all slaves [ 113.311620][ T9284] loop3: detected capacity change from 0 to 128 [ 113.452156][ T9291] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.556150][ T9291] vhci_hcd vhci_hcd.2: invalid port number 96 [ 113.562322][ T9291] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 114.153981][ T9320] x_tables: duplicate underflow at hook 2 [ 114.196405][ T9322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9322 comm=syz.3.1957 [ 114.247450][ T9326] loop3: detected capacity change from 0 to 256 [ 114.398949][ T9328] Cannot find del_set index 3 as target [ 114.410495][ T3396] hid-generic 0000:86010001:0006.0002: unknown main item tag 0x0 [ 114.420687][ T3396] hid-generic 0000:86010001:0006.0002: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 114.518943][ T9342] 9p: Bad value for 'wfdno' [ 114.561062][ T9348] __nla_validate_parse: 1 callbacks suppressed [ 114.561108][ T9348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1964'. [ 114.591744][ T9347] delete_channel: no stack [ 114.618844][ T9351] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.695307][ T9353] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1966'. [ 114.808325][ T9367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1972'. [ 114.826050][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1972'. [ 114.991692][ T9389] netlink: 464 bytes leftover after parsing attributes in process `syz.0.1976'. [ 115.002939][ T9388] loop3: detected capacity change from 0 to 512 [ 115.013047][ T9388] ------------[ cut here ]------------ [ 115.018585][ T9388] EA inode 11 i_nlink=2 [ 115.018600][ T9388] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.1978/9388 [ 115.033595][ T9388] Modules linked in: [ 115.037580][ T9388] CPU: 0 UID: 0 PID: 9388 Comm: syz.3.1978 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.047529][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.057793][ T9388] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 115.064556][ T9388] Code: a1 e2 9c ff 4c 8d 2d 9a ed 20 05 49 8d 7e 40 e8 11 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 25 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 dc 9b ba 03 66 66 66 2e 0f 1f 84 [ 115.084325][ T9388] RSP: 0018:ffffc90002f235a0 EFLAGS: 00010246 [ 115.090479][ T9388] RAX: ffff88811a689b10 RBX: ffff88811a85d348 RCX: ffffffff81bb1e2b [ 115.098494][ T9388] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 115.106613][ T9388] RBP: 000000000000000b R08: 000188811a85d2fb R09: 0000000000000000 [ 115.114671][ T9388] R10: ffffc90002f234d0 R11: 0001c90002f234d0 R12: ffff88811a85d2f8 [ 115.122679][ T9388] R13: ffffffff86dc0bb0 R14: ffff88811a85d2b0 R15: 0000000000000001 [ 115.130978][ T9388] FS: 00007fe8d53f76c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 115.139974][ T9388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.146623][ T9388] CR2: 00007fe8cd016000 CR3: 0000000137436000 CR4: 00000000003506f0 [ 115.154722][ T9388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 115.162763][ T9388] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 115.163838][ T9393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1979'. [ 115.170868][ T9388] Call Trace: [ 115.170879][ T9388] [ 115.186123][ T9388] ext4_xattr_set_entry+0x77f/0x1020 [ 115.191533][ T9388] ext4_xattr_ibody_set+0x184/0x3c0 [ 115.196848][ T9388] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 115.202745][ T9388] __ext4_expand_extra_isize+0x246/0x280 [ 115.208447][ T9388] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 115.214046][ T9388] ext4_evict_inode+0x7c4/0xd40 [ 115.218966][ T9388] ? __pfx_ext4_evict_inode+0x10/0x10 [ 115.224556][ T9388] evict+0x2af/0x510 [ 115.228559][ T9388] ? __dquot_initialize+0x146/0x7c0 [ 115.233862][ T9388] iput+0x4bd/0x650 [ 115.237734][ T9388] ext4_process_orphan+0x1a9/0x1c0 [ 115.242993][ T9388] ext4_orphan_cleanup+0x6a8/0xa00 [ 115.248207][ T9388] ext4_fill_super+0x3411/0x37a0 [ 115.253197][ T9388] ? set_blocksize+0x1a8/0x310 [ 115.258429][ T9388] ? sb_set_blocksize+0xfc/0x170 [ 115.263410][ T9388] ? setup_bdev_super+0x30e/0x370 [ 115.268560][ T9388] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.274030][ T9388] get_tree_bdev_flags+0x291/0x300 [ 115.279190][ T9388] ? __pfx_ext4_fill_super+0x10/0x10 [ 115.284559][ T9388] get_tree_bdev+0x1f/0x30 [ 115.289015][ T9388] ext4_get_tree+0x1c/0x30 [ 115.293626][ T9388] vfs_get_tree+0x57/0x1d0 [ 115.298144][ T9388] do_new_mount+0x24d/0x6a0 [ 115.302728][ T9388] path_mount+0x4ab/0xb80 [ 115.307149][ T9388] ? user_path_at+0xbf/0x130 [ 115.311869][ T9388] __se_sys_mount+0x28c/0x2e0 [ 115.316614][ T9388] __x64_sys_mount+0x67/0x80 [ 115.321317][ T9388] x64_sys_call+0x2cca/0x3000 [ 115.326062][ T9388] do_syscall_64+0xca/0x2b0 [ 115.330628][ T9388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.336607][ T9388] RIP: 0033:0x7fe8d6990eea [ 115.341081][ T9388] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.360781][ T9388] RSP: 002b:00007fe8d53f6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.369461][ T9388] RAX: ffffffffffffffda RBX: 00007fe8d53f6ef0 RCX: 00007fe8d6990eea [ 115.377481][ T9388] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe8d53f6eb0 [ 115.385592][ T9388] RBP: 0000200000000180 R08: 00007fe8d53f6ef0 R09: 0000000000800700 [ 115.393633][ T9388] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 115.401665][ T9388] R13: 00007fe8d53f6eb0 R14: 000000000000046f R15: 000000000000002c [ 115.409689][ T9388] [ 115.412814][ T9388] ---[ end trace 0000000000000000 ]--- [ 115.421978][ T9388] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #18: comm syz.3.1978: iget: bad extra_isize 90 (inode size 256) [ 115.437593][ T9388] EXT4-fs (loop3): Remounting filesystem read-only [ 115.448202][ T9388] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -30) [ 115.458749][ T9388] EXT4-fs (loop3): 1 orphan inode deleted [ 115.465281][ T9388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.511457][ T9404] ipip0: entered promiscuous mode [ 115.530817][ T9406] netlink: 'syz.2.1985': attribute type 1 has an invalid length. [ 115.559349][ T9406] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.571478][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.583936][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1985'. [ 115.604535][ T9406] bond2 (unregistering): Released all slaves [ 115.619079][ T9413] loop1: detected capacity change from 0 to 4096 [ 115.639295][ T9413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.793476][ T9432] loop3: detected capacity change from 0 to 128 [ 115.804061][ T9432] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 115.816951][ T9432] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.839004][ T9428] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 115.855550][ T9434] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 115.864632][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.875863][ T9434] team0: Failed to send options change via netlink (err -105) [ 115.883960][ T9434] team0: Port device dummy0 added [ 115.895914][ T9434] netlink: 'syz.2.1991': attribute type 10 has an invalid length. [ 115.904723][ T9434] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.937110][ T9434] team0: Failed to send options change via netlink (err -105) [ 115.954501][ T9434] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 115.970358][ T9434] team0: Port device dummy0 removed [ 115.978606][ T9434] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 116.327576][ T9449] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 116.408368][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 116.419430][ T3316] CPU: 1 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 116.419470][ T3316] Tainted: [W]=WARN [ 116.419477][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.419534][ T3316] Call Trace: [ 116.419544][ T3316] [ 116.419555][ T3316] __dump_stack+0x1d/0x30 [ 116.419594][ T3316] dump_stack_lvl+0x95/0xd0 [ 116.419620][ T3316] dump_stack+0x15/0x1b [ 116.419641][ T3316] dump_header+0x81/0x240 [ 116.419722][ T3316] oom_kill_process+0x295/0x350 [ 116.419777][ T3316] out_of_memory+0x97b/0xb80 [ 116.419802][ T3316] try_charge_memcg+0x610/0xa10 [ 116.419896][ T3316] charge_memcg+0x51/0xc0 [ 116.419934][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 116.419971][ T3316] __read_swap_cache_async+0x17b/0x2d0 [ 116.420063][ T3316] swap_cluster_readahead+0x262/0x3c0 [ 116.420104][ T3316] swapin_readahead+0xde/0x820 [ 116.420132][ T3316] ? copy_from_user_nofault+0xd5/0x120 [ 116.420214][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 116.420240][ T3316] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 116.420270][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 116.420289][ T3316] ? __rcu_read_unlock+0x4f/0x70 [ 116.420308][ T3316] ? swap_cache_get_folio+0x277/0x280 [ 116.420354][ T3316] do_swap_page+0x2b4/0x21e0 [ 116.420392][ T3316] ? _raw_spin_unlock+0x26/0x50 [ 116.420449][ T3316] ? __schedule+0x85f/0xcd0 [ 116.420483][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 116.420531][ T3316] handle_mm_fault+0x9d8/0x2c60 [ 116.420604][ T3316] do_user_addr_fault+0x630/0x1080 [ 116.420637][ T3316] exc_page_fault+0x62/0xa0 [ 116.420676][ T3316] asm_exc_page_fault+0x26/0x30 [ 116.420748][ T3316] RIP: 0033:0x7f712e3e1fc5 [ 116.420764][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 95 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 116.420803][ T3316] RSP: 002b:00007ffd4f3f13f8 EFLAGS: 00010246 [ 116.420825][ T3316] RAX: 0000000000000000 RBX: 0000000000000416 RCX: 00007f712e3e1fc3 [ 116.420842][ T3316] RDX: 00007ffd4f3f1410 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.420860][ T3316] RBP: 00007ffd4f3f147c R08: 000000001008a414 R09: 0000000000000000 [ 116.420875][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 116.420887][ T3316] R13: 00000000000927c0 R14: 000000000001c503 R15: 00007ffd4f3f14d0 [ 116.420916][ T3316] [ 116.420923][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 332 [ 116.662622][ T3316] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 116.670620][ T3316] kmem: usage 306964kB, limit 9007199254740988kB, failcnt 0 [ 116.677975][ T3316] Memory cgroup stats for /syz2: [ 116.795804][ T9453] loop4: detected capacity change from 0 to 1024 [ 116.807976][ T9453] EXT4-fs: Ignoring removed nobh option [ 116.813665][ T9453] EXT4-fs: Ignoring removed bh option [ 116.899070][ T9453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.922609][ T9460] netlink: 'syz.0.2002': attribute type 1 has an invalid length. [ 116.952027][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.981903][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.997972][ T9460] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.031552][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 117.094951][ T9468] bond1 (unregistering): Released all slaves [ 117.105058][ T3316] cache 0 [ 117.108045][ T3316] rss 32768 [ 117.111183][ T3316] shmem 0 [ 117.114195][ T3316] mapped_file 0 [ 117.117674][ T3316] dirty 0 [ 117.120689][ T3316] writeback 0 [ 117.124147][ T3316] workingset_refault_anon 402 [ 117.128907][ T3316] workingset_refault_file 384 [ 117.133870][ T3316] swap 528384 [ 117.137214][ T3316] swapcached 16384 [ 117.140974][ T3316] pgpgin 149007 [ 117.144487][ T3316] pgpgout 148997 [ 117.148077][ T3316] pgfault 118337 [ 117.151651][ T3316] pgmajfault 62 [ 117.155257][ T3316] inactive_anon 8192 [ 117.159187][ T3316] active_anon 32768 [ 117.163014][ T3316] inactive_file 0 [ 117.166718][ T3316] active_file 0 [ 117.168086][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 117.170193][ T3316] unevictable 0 [ 117.170205][ T3316] hierarchical_memory_limit 314572800 [ 117.188450][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 117.194642][ T3316] total_cache 0 [ 117.198211][ T3316] total_rss 32768 [ 117.201881][ T3316] total_shmem 0 [ 117.205420][ T3316] total_mapped_file 0 [ 117.209422][ T3316] total_dirty 0 [ 117.212898][ T3316] total_writeback 0 [ 117.216837][ T3316] total_workingset_refault_anon 402 [ 117.222057][ T3316] total_workingset_refault_file 384 [ 117.227292][ T3316] total_swap 528384 [ 117.231205][ T3316] total_swapcached 16384 [ 117.235516][ T3316] total_pgpgin 149007 [ 117.239519][ T3316] total_pgpgout 148997 [ 117.243695][ T3316] total_pgfault 118337 [ 117.247824][ T3316] total_pgmajfault 62 [ 117.251828][ T3316] total_inactive_anon 8192 [ 117.256283][ T3316] total_active_anon 32768 [ 117.260677][ T3316] total_inactive_file 0 [ 117.264985][ T3316] total_active_file 0 [ 117.269101][ T3316] total_unevictable 0 [ 117.273161][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=+}[@,pid=3763,uid=0 [ 117.287375][ T3316] Memory cgroup out of memory: Killed process 3763 (+}[@) total-vm:93836kB, anon-rss:1176kB, file-rss:20356kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 117.330684][ T9478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9478 comm=syz.3.2007 [ 117.375383][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 117.561352][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 117.561389][ T29] audit: type=1326 audit(1768322571.655:13163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.591422][ T29] audit: type=1326 audit(1768322571.655:13164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.615122][ T29] audit: type=1326 audit(1768322571.655:13165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.624368][ T9494] loop3: detected capacity change from 0 to 128 [ 117.639207][ T29] audit: type=1326 audit(1768322571.655:13166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.668922][ T29] audit: type=1326 audit(1768322571.655:13167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.692582][ T29] audit: type=1326 audit(1768322571.655:13168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.748556][ T29] audit: type=1326 audit(1768322571.675:13169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.772455][ T29] audit: type=1326 audit(1768322571.675:13170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.796084][ T29] audit: type=1326 audit(1768322571.675:13171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.819987][ T29] audit: type=1326 audit(1768322571.675:13172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9473 comm="syz.1.2008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 117.853368][ T9504] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 118.018698][ T9514] loop1: detected capacity change from 0 to 1024 [ 118.025878][ T9514] EXT4-fs: Ignoring removed nobh option [ 118.031664][ T9514] EXT4-fs: Ignoring removed bh option [ 118.049482][ T9514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.126866][ T9528] lo speed is unknown, defaulting to 1000 [ 118.224840][ T9534] loop4: detected capacity change from 0 to 128 [ 118.231648][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.384364][ T9542] loop4: detected capacity change from 0 to 512 [ 118.391281][ T9542] EXT4-fs: Ignoring removed bh option [ 118.396870][ T9542] EXT4-fs: Ignoring removed mblk_io_submit option [ 118.407808][ T9542] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 118.420910][ T9542] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.429844][ T9542] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.437383][ T9542] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2031: Failed to acquire dquot type 1 [ 118.460229][ T9542] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2031: Invalid block bitmap block 0 in block_group 0 [ 118.490848][ T9542] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2031: Invalid block bitmap block 0 in block_group 0 [ 118.514330][ T9542] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.2031: Invalid block bitmap block 0 in block_group 0 [ 118.529979][ T9542] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2031: Failed to acquire dquot type 1 [ 118.542395][ T9542] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2031: Failed to acquire dquot type 1 [ 118.554254][ T9542] EXT4-fs (loop4): 1 orphan inode deleted [ 118.561655][ T9542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.694117][ T9561] FAULT_INJECTION: forcing a failure. [ 118.694117][ T9561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.707403][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.1.2037 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.707503][ T9561] Tainted: [W]=WARN [ 118.707512][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.707606][ T9561] Call Trace: [ 118.707614][ T9561] [ 118.707622][ T9561] __dump_stack+0x1d/0x30 [ 118.707697][ T9561] dump_stack_lvl+0x95/0xd0 [ 118.707726][ T9561] dump_stack+0x15/0x1b [ 118.707753][ T9561] should_fail_ex+0x265/0x280 [ 118.707784][ T9561] should_fail+0xb/0x20 [ 118.707949][ T9561] should_fail_usercopy+0x1a/0x20 [ 118.707977][ T9561] _copy_to_user+0x20/0xa0 [ 118.708011][ T9561] simple_read_from_buffer+0xb5/0x130 [ 118.708036][ T9561] proc_fail_nth_read+0x10e/0x150 [ 118.708127][ T9561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.708217][ T9561] vfs_read+0x1a8/0x770 [ 118.708234][ T9561] ? __rcu_read_unlock+0x4f/0x70 [ 118.708260][ T9561] ? __fget_files+0x184/0x1c0 [ 118.708290][ T9561] ? mutex_lock+0x58/0x90 [ 118.708325][ T9561] ksys_read+0xda/0x1a0 [ 118.708419][ T9561] __x64_sys_read+0x40/0x50 [ 118.708438][ T9561] x64_sys_call+0x2889/0x3000 [ 118.708507][ T9561] do_syscall_64+0xca/0x2b0 [ 118.708565][ T9561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.708609][ T9561] RIP: 0033:0x7f40f718e15c [ 118.708630][ T9561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 118.708654][ T9561] RSP: 002b:00007f40f5bef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.708678][ T9561] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718e15c [ 118.708695][ T9561] RDX: 000000000000000f RSI: 00007f40f5bef0a0 RDI: 0000000000000006 [ 118.708708][ T9561] RBP: 00007f40f5bef090 R08: 0000000000000000 R09: 0000000000000000 [ 118.708720][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.708783][ T9561] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 118.708810][ T9561] [ 118.938068][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.008244][ T9569] loop4: detected capacity change from 0 to 1024 [ 119.042148][ T9572] loop1: detected capacity change from 0 to 1024 [ 119.049994][ T9569] EXT4-fs: Ignoring removed nobh option [ 119.055645][ T9569] EXT4-fs: Ignoring removed bh option [ 119.061727][ T9572] EXT4-fs: Ignoring removed nobh option [ 119.067415][ T9572] EXT4-fs: Ignoring removed bh option [ 119.086342][ T9572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.099829][ T9569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.131557][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.157059][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.225351][ T9589] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 119.243518][ T9590] program syz.4.2044 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.260977][ T9590] loop4: detected capacity change from 0 to 1024 [ 119.268326][ T9590] EXT4-fs: Ignoring removed bh option [ 119.274845][ T9594] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 119.305484][ T9596] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.313351][ T9596] vhci_hcd vhci_hcd.2: invalid port number 96 [ 119.319511][ T9596] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 119.332594][ T9590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.371864][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.430777][ T9611] loop4: detected capacity change from 0 to 1024 [ 119.449413][ T9611] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 119.462002][ T9611] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 119.484159][ T9611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.508562][ T9611] bond1 (unregistering): Released all slaves [ 119.572155][ T9628] __nla_validate_parse: 8 callbacks suppressed [ 119.572215][ T9628] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2058'. [ 119.918182][ T9650] netlink: 'gtp': attribute type 46 has an invalid length. [ 119.949399][ T9666] xt_hashlimit: max too large, truncated to 1048576 [ 120.012882][ T9669] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.021221][ T9669] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.077427][ T9669] lo speed is unknown, defaulting to 1000 [ 120.726337][ T9682] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 120.761200][ T9684] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 120.838150][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2078'. [ 120.852572][ T9689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2078'. [ 121.160645][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 121.191861][ T9709] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.280858][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2087'. [ 121.339944][ T9712] 8021q: VLANs not supported on ip6_vti0 [ 121.429947][ T9727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2091'. [ 121.461616][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 121.521524][ T9731] syzkaller0: entered promiscuous mode [ 121.527087][ T9731] syzkaller0: entered allmulticast mode [ 121.554979][ T9740] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 121.602572][ T9737] syz_tun: entered allmulticast mode [ 121.696906][ T9746] lo speed is unknown, defaulting to 1000 [ 121.848142][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 121.862953][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 121.922381][ T9765] lo speed is unknown, defaulting to 1000 [ 121.991966][ T9776] loop3: detected capacity change from 0 to 1024 [ 122.008142][ T9776] EXT4-fs: Ignoring removed nobh option [ 122.014193][ T9776] EXT4-fs: Ignoring removed bh option [ 122.039019][ T9776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.059150][ T9776] EXT4-fs (loop3): pa ffff888107dcc9a0: logic 1, phys. 129, len 4 [ 122.067086][ T9776] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 122.114769][ T9786] loop4: detected capacity change from 0 to 1024 [ 122.121977][ T9786] EXT4-fs: Ignoring removed nobh option [ 122.127633][ T9786] EXT4-fs: Ignoring removed bh option [ 122.142872][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.173464][ T9786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.246332][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 122.260545][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.465462][ T9792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.569343][ T29] kauditd_printk_skb: 913 callbacks suppressed [ 122.569362][ T29] audit: type=1326 audit(122.543:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.607186][ T9818] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.614894][ T9818] vhci_hcd vhci_hcd.2: invalid port number 96 [ 122.621086][ T9818] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 122.663278][ T9821] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 122.671276][ T9821] vhci_hcd vhci_hcd.2: invalid port number 96 [ 122.677445][ T9821] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 122.683921][ T29] audit: type=1326 audit(122.553:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.708658][ T29] audit: type=1326 audit(122.553:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.732113][ T29] audit: type=1326 audit(122.583:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.755126][ T29] audit: type=1326 audit(122.583:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.778905][ T29] audit: type=1326 audit(122.593:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.801845][ T29] audit: type=1326 audit(122.613:14086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.825032][ T29] audit: type=1326 audit(122.613:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.848119][ T29] audit: type=1326 audit(122.623:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 122.871221][ T29] audit: type=1326 audit(122.633:14089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9791 comm="syz.1.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40f718f749 code=0x7ffc0000 [ 123.085207][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.471308][ T9845] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 123.501997][ T9844] set_capacity_and_notify: 1 callbacks suppressed [ 123.502018][ T9844] loop4: detected capacity change from 0 to 1024 [ 123.524295][ T9814] syz.0.2122 (9814) used greatest stack depth: 6200 bytes left [ 123.541053][ T9844] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 123.581239][ T9844] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 123.607023][ T9844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.647121][ T9844] bond1 (unregistering): Released all slaves [ 123.676484][ T9857] netlink: 'syz.0.2137': attribute type 1 has an invalid length. [ 123.722712][ T9857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.774415][ T9865] bond1 (unregistering): Released all slaves [ 123.919148][ T9880] x_tables: duplicate underflow at hook 2 [ 123.979055][ T9888] loop1: detected capacity change from 0 to 512 [ 123.990542][ T9888] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.016614][ T9894] smc: removing ib device syz1 [ 124.032098][ T9888] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.2148: Directory hole found for htree leaf block 0 [ 124.045893][ T9888] EXT4-fs (loop1): Remounting filesystem read-only [ 124.071498][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.081482][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.116704][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.145121][ T9901] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 124.153226][ T3315] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 124.169351][ T9903] netlink: zone id is out of range [ 124.174560][ T9903] netlink: zone id is out of range [ 124.179759][ T9903] netlink: zone id is out of range [ 124.185062][ T9903] netlink: zone id is out of range [ 124.191486][ T9899] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 124.198831][ T9903] netlink: zone id is out of range [ 124.204079][ T9903] netlink: zone id is out of range [ 124.211252][ T9903] netlink: zone id is out of range [ 124.223571][ T9903] netlink: zone id is out of range [ 124.231421][ T9901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.241119][ T9903] netlink: zone id is out of range [ 124.247593][ T9904] loop4: detected capacity change from 0 to 512 [ 124.252101][ T9903] netlink: zone id is out of range [ 124.266060][ T9904] EXT4-fs: dax option not supported [ 124.276100][ T9905] bond2 (unregistering): Released all slaves [ 124.297509][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.326241][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.332676][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.360852][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.372909][ T9899] wg1 speed is unknown, defaulting to 1000 [ 124.489663][ T9925] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 124.497708][ T9925] vhci_hcd vhci_hcd.2: invalid port number 96 [ 124.503918][ T9925] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 124.705556][ T9940] __nla_validate_parse: 11 callbacks suppressed [ 124.705573][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2164'. [ 124.736677][ T9947] netlink: 'syz.2.2166': attribute type 1 has an invalid length. [ 124.770481][ T9947] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.833130][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 124.856608][ T9950] bond2 (unregistering): Released all slaves [ 124.890572][ T9953] usb usb7: usbfs: process 9953 (syz.4.2168) did not claim interface 7 before use [ 124.906383][ T9953] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.2168'. [ 124.981391][ T9956] netlink: 'syz.0.2169': attribute type 6 has an invalid length. [ 125.114154][ T9967] FAULT_INJECTION: forcing a failure. [ 125.114154][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 125.126903][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz.4.2172 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.126944][ T9967] Tainted: [W]=WARN [ 125.126950][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.127016][ T9967] Call Trace: [ 125.127024][ T9967] [ 125.127034][ T9967] __dump_stack+0x1d/0x30 [ 125.127075][ T9967] dump_stack_lvl+0x95/0xd0 [ 125.127178][ T9967] dump_stack+0x15/0x1b [ 125.127198][ T9967] should_fail_ex+0x265/0x280 [ 125.127226][ T9967] should_failslab+0x8c/0xb0 [ 125.127250][ T9967] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 125.127312][ T9967] ? __alloc_skb+0x2ff/0x4b0 [ 125.127347][ T9967] __alloc_skb+0x2ff/0x4b0 [ 125.127435][ T9967] ? __alloc_skb+0x228/0x4b0 [ 125.127460][ T9967] audit_log_start+0x3a0/0x720 [ 125.127558][ T9967] ? kstrtouint+0x76/0xc0 [ 125.127585][ T9967] audit_seccomp+0x48/0x100 [ 125.127625][ T9967] ? __seccomp_filter+0x832/0x1260 [ 125.127655][ T9967] __seccomp_filter+0x843/0x1260 [ 125.127735][ T9967] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 125.127774][ T9967] ? vfs_write+0x7e8/0x960 [ 125.127794][ T9967] ? __rcu_read_unlock+0x4f/0x70 [ 125.127834][ T9967] ? __fget_files+0x184/0x1c0 [ 125.127870][ T9967] __secure_computing+0x82/0x150 [ 125.127898][ T9967] syscall_trace_enter+0xcf/0x1e0 [ 125.127923][ T9967] do_syscall_64+0xa4/0x2b0 [ 125.128036][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.128116][ T9967] RIP: 0033:0x7f0bb07df749 [ 125.128139][ T9967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.128163][ T9967] RSP: 002b:00007f0baf247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.128230][ T9967] RAX: ffffffffffffffda RBX: 00007f0bb0a35fa0 RCX: 00007f0bb07df749 [ 125.128244][ T9967] RDX: 0000200000000340 RSI: 00000000c0285443 RDI: 0000000000000004 [ 125.128256][ T9967] RBP: 00007f0baf247090 R08: 0000000000000000 R09: 0000000000000000 [ 125.128307][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.128324][ T9967] R13: 00007f0bb0a36038 R14: 00007f0bb0a35fa0 R15: 00007ffd3a5110e8 [ 125.128350][ T9967] [ 125.727466][ T9971] wg1 speed is unknown, defaulting to 1000 [ 126.028564][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2173'. [ 126.056576][ T9976] netlink: 'syz.3.2174': attribute type 1 has an invalid length. [ 126.080854][ T9974] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2173'. [ 126.109510][ T9976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.129853][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2174'. [ 126.173536][ T9976] bond2 (unregistering): Released all slaves [ 126.224596][ T9985] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2177'. [ 126.234584][ T9987] loop1: detected capacity change from 0 to 1024 [ 126.241584][ T9987] EXT4-fs: Ignoring removed nobh option [ 126.247415][ T9987] EXT4-fs: Ignoring removed bh option [ 126.283577][ T9987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.316012][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.341407][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 126.365703][T10003] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 126.372305][T10003] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 126.379931][T10003] vhci_hcd vhci_hcd.0: Device attached [ 126.393005][T10005] vhci_hcd: connection closed [ 126.396385][ T7913] vhci_hcd vhci_hcd.4: stop threads [ 126.406504][ T7913] vhci_hcd vhci_hcd.4: release socket [ 126.411922][ T7913] vhci_hcd vhci_hcd.4: disconnect device [ 126.437514][T10012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2186'. [ 126.453247][T10012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.476489][T10012] bond2 (unregistering): Released all slaves [ 126.684484][T10035] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2193'. [ 151.419959][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 151.419977][ T29] audit: type=1326 audit(151.393:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427247][ T29] audit: type=1326 audit(151.393:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427350][ T29] audit: type=1326 audit(151.393:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427463][ T29] audit: type=1326 audit(151.393:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427571][ T29] audit: type=1326 audit(151.393:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427606][ T29] audit: type=1326 audit(151.393:14590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427720][ T29] audit: type=1326 audit(151.393:14591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427782][ T29] audit: type=1326 audit(151.393:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427821][ T29] audit: type=1326 audit(151.393:14593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.427861][ T29] audit: type=1326 audit(151.393:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10053 comm="syz.3.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d698f749 code=0x7ffc0000 [ 151.505932][T10063] __nla_validate_parse: 1 callbacks suppressed [ 151.505949][T10063] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2200'. [ 151.620255][T10069] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 151.762986][T10082] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2205'. [ 151.776269][T10082] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2205'. [ 151.836557][T10089] tmpfs: Bad value for 'mpol' [ 151.864396][T10091] FAULT_INJECTION: forcing a failure. [ 151.864396][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 151.877127][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.1.2209 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.877179][T10091] Tainted: [W]=WARN [ 151.877188][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.877275][T10091] Call Trace: [ 151.877284][T10091] [ 151.877294][T10091] __dump_stack+0x1d/0x30 [ 151.877327][T10091] dump_stack_lvl+0x95/0xd0 [ 151.877355][T10091] dump_stack+0x15/0x1b [ 151.877383][T10091] should_fail_ex+0x265/0x280 [ 151.877450][T10091] should_failslab+0x8c/0xb0 [ 151.877479][T10091] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 151.877514][T10091] ? sidtab_sid2str_get+0xa0/0x130 [ 151.877556][T10091] kmemdup_noprof+0x2b/0x70 [ 151.877635][T10091] sidtab_sid2str_get+0xa0/0x130 [ 151.877682][T10091] security_sid_to_context_core+0x1eb/0x2e0 [ 151.877790][T10091] security_sid_to_context+0x27/0x40 [ 151.877886][T10091] selinux_lsmprop_to_secctx+0x67/0xf0 [ 151.877928][T10091] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 151.877969][T10091] audit_log_subj_ctx+0xa4/0x3e0 [ 151.877997][T10091] ? skb_put+0xa9/0xf0 [ 151.878032][T10091] audit_log_task_context+0x48/0x70 [ 151.878063][T10091] audit_log_task+0xf4/0x250 [ 151.878255][T10091] audit_seccomp+0x61/0x100 [ 151.878297][T10091] ? __seccomp_filter+0x832/0x1260 [ 151.878402][T10091] __seccomp_filter+0x843/0x1260 [ 151.878439][T10091] ? __schedule+0x85f/0xcd0 [ 151.878471][T10091] __secure_computing+0x82/0x150 [ 151.878498][T10091] syscall_trace_enter+0xcf/0x1e0 [ 151.878580][T10091] do_syscall_64+0xa4/0x2b0 [ 151.878675][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.878704][T10091] RIP: 0033:0x7f40f718e15c [ 151.878726][T10091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.878751][T10091] RSP: 002b:00007f40f5bef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.878839][T10091] RAX: ffffffffffffffda RBX: 00007f40f73e5fa0 RCX: 00007f40f718e15c [ 151.878856][T10091] RDX: 000000000000000f RSI: 00007f40f5bef0a0 RDI: 0000000000000007 [ 151.878873][T10091] RBP: 00007f40f5bef090 R08: 0000000000000000 R09: 0000000000000000 [ 151.878902][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.878918][T10091] R13: 00007f40f73e6038 R14: 00007f40f73e5fa0 R15: 00007ffe25506a38 [ 151.878945][T10091] [ 152.142226][T10097] 9p: Bad value for 'source' [ 152.186998][T10099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2213'. [ 152.283372][T10107] loop1: detected capacity change from 0 to 128 [ 152.309303][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2216'. [ 152.409091][T10111] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 152.594003][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2217'. [ 152.635784][T10118] loop4: detected capacity change from 0 to 1024 [ 152.642779][T10118] EXT4-fs: Ignoring removed bh option [ 152.731644][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2220'. [ 152.746155][T10123] loop3: detected capacity change from 0 to 1024 [ 152.754424][T10118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.770642][T10123] EXT4-fs: Ignoring removed nobh option [ 152.776311][T10123] EXT4-fs: Ignoring removed bh option [ 152.836174][T10123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.913414][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.923512][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.007921][T10099] net_ratelimit: 64 callbacks suppressed [ 153.007936][T10099] Set syz1 is full, maxelem 65536 reached [ 153.034474][T10142] loop3: detected capacity change from 0 to 764 [ 153.042990][T10142] 9p: Bad value for 'rfdno' [ 153.045068][T10143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2228'. [ 153.056593][T10143] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2228'. [ 153.065620][T10142] Symlink component flag not implemented [ 153.071363][T10142] Symlink component flag not implemented [ 153.077342][T10142] Symlink component flag not implemented (129) [ 153.083613][T10142] Symlink component flag not implemented (6) [ 153.099201][T10142] rock: directory entry would overflow storage [ 153.105511][T10142] rock: sig=0x4f50, size=4, remaining=3 [ 153.111118][T10142] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 153.166246][T10152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.307611][T10161] syzkaller0: entered promiscuous mode [ 153.313190][T10161] syzkaller0: entered allmulticast mode [ 153.327142][T10166] loop1: detected capacity change from 0 to 512 [ 153.335009][T10166] EXT4-fs: Ignoring removed i_version option [ 153.342483][T10166] EXT4-fs: test_dummy_encryption option not supported [ 153.364298][ T8865] syz_tun (unregistering): left allmulticast mode [ 153.397911][T10152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.444454][T10175] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=10175 comm=syz.2.2239 [ 153.473331][T10152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.510006][T10180] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10180 comm=syz.0.2240 [ 153.528697][T10152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.554987][ T7913] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.573292][T10181] wg1 speed is unknown, defaulting to 1000 [ 153.625397][ T7913] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.661882][ T347] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.701171][ T356] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.710717][ T7913] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.738921][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.754989][ T275] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.765757][ T7913] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.906293][T10212] openvswitch: netlink: Missing key (keys=40, expected=100) [ 154.036532][ T7913] bond0 (unregistering): Released all slaves [ 154.045422][T10181] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 154.088644][ T7913] tipc: Disabling bearer [ 154.098736][ T7913] tipc: Left network mode [ 154.098740][T10195] wg1 speed is unknown, defaulting to 1000 [ 154.114708][ T7913] IPVS: stopping master sync thread 8421 ... [ 154.155134][ T7913] hsr_slave_0: left promiscuous mode [ 154.165255][T10234] loop3: detected capacity change from 0 to 512 [ 154.171974][T10234] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 154.191594][ T7913] hsr_slave_1: left promiscuous mode [ 154.202688][T10234] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2258: bg 0: block 104: invalid block bitmap [ 154.215712][ T7913] veth1_macvtap: left promiscuous mode [ 154.221281][ T7913] veth0_macvtap: left promiscuous mode [ 154.226975][T10234] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 154.236114][ T7913] veth1_vlan: left promiscuous mode [ 154.241525][ T7913] veth0_vlan: left promiscuous mode [ 154.244598][T10234] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2258: invalid indirect mapped block 1 (level 1) [ 154.281078][T10234] EXT4-fs (loop3): 1 truncate cleaned up [ 154.287582][T10234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.362418][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.437937][ T3396] wg1 speed is unknown, defaulting to 1000 [ 154.443845][ T3396] infiniband syz0: ib_query_port failed (-19) [ 154.494250][T10195] ================================================================== [ 154.502427][T10195] BUG: KCSAN: data-race in __htab_map_lookup_elem / bpf_lru_pop_free [ 154.511050][T10195] [ 154.513390][T10195] write to 0xffff88811ac0a828 of 4 bytes by task 10255 on cpu 0: [ 154.521209][T10195] bpf_lru_pop_free+0xbea/0xcc0 [ 154.526098][T10195] __htab_lru_percpu_map_update_elem+0xea/0x630 [ 154.532366][T10195] bpf_percpu_hash_update+0x61/0xa0 [ 154.537585][T10195] bpf_map_update_value+0x36b/0x570 [ 154.542811][T10195] generic_map_update_batch+0x3eb/0x540 [ 154.548388][T10195] bpf_map_do_batch+0x25c/0x380 [ 154.553269][T10195] __sys_bpf+0x5f8/0x7c0 [ 154.557800][T10195] __x64_sys_bpf+0x41/0x50 [ 154.562260][T10195] x64_sys_call+0x28e1/0x3000 [ 154.566971][T10195] do_syscall_64+0xca/0x2b0 [ 154.571506][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.577421][T10195] [ 154.579763][T10195] read to 0xffff88811ac0a828 of 4 bytes by task 10195 on cpu 1: [ 154.587667][T10195] __htab_map_lookup_elem+0xab/0x150 [ 154.593101][T10195] htab_lru_percpu_map_lookup_elem+0x20/0xb0 [ 154.599108][T10195] bpf_prog_1908f35e458ae2da+0x48/0x50 [ 154.604618][T10195] bpf_trace_run2+0x107/0x1d0 [ 154.609504][T10195] kfree+0x353/0x3c0 [ 154.613674][T10195] kfree_const+0x3e/0x50 [ 154.617977][T10195] kobject_set_name_vargs+0xb8/0xe0 [ 154.623202][T10195] kobject_init_and_add+0x11f/0x1f0 [ 154.628426][T10195] net_rx_queue_update_kobjects+0x18d/0x540 [ 154.634344][T10195] netdev_register_kobject+0x17a/0x220 [ 154.639831][T10195] register_netdevice+0x8cf/0xdd0 [ 154.644902][T10195] bond_newlink+0x2f/0xb0 [ 154.649345][T10195] rtnl_newlink_create+0x1bc/0x620 [ 154.654654][T10195] rtnl_newlink+0xf5b/0x1360 [ 154.659274][T10195] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 154.664231][T10195] netlink_rcv_skb+0x123/0x220 [ 154.669036][T10195] rtnetlink_rcv+0x1c/0x30 [ 154.673489][T10195] netlink_unicast+0x5c0/0x690 [ 154.678294][T10195] netlink_sendmsg+0x58b/0x6b0 [ 154.683199][T10195] __sock_sendmsg+0x145/0x180 [ 154.687907][T10195] __sys_sendto+0x268/0x330 [ 154.692438][T10195] __x64_sys_sendto+0x76/0x90 [ 154.697137][T10195] x64_sys_call+0x29a7/0x3000 [ 154.701841][T10195] do_syscall_64+0xca/0x2b0 [ 154.706378][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.712299][T10195] [ 154.714899][T10195] value changed: 0x65ccb241 -> 0x28a375d8 [ 154.720631][T10195] [ 154.722993][T10195] Reported by Kernel Concurrency Sanitizer on: [ 154.729163][T10195] CPU: 1 UID: 0 PID: 10195 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.740728][T10195] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 154.744544][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.754624][T10195] ================================================================== [ 154.819241][T10195] chnl_net:caif_netlink_parms(): no params data found [ 155.069689][ T7913] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.186684][ T7913] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.306655][ T7913] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.396606][ T7913] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.505055][ T7913] bond0 (unregistering): Released all slaves [ 155.534581][ T7913] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.543406][ T7913] bond_slave_0: left promiscuous mode [ 155.550014][ T7913] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.558940][ T7913] bond_slave_1: left promiscuous mode [ 155.565092][ T7913] $Hÿ (unregistering): Released all slaves [ 155.656032][ T7913] hsr_slave_0: left promiscuous mode [ 155.661781][ T7913] hsr_slave_1: left promiscuous mode [ 155.668773][ T7913] veth1_macvtap: left promiscuous mode [ 155.674415][ T7913] veth0_macvtap: left promiscuous mode [ 156.758182][ T1575] batadv0: left allmulticast mode [ 156.763319][ T1575] batadv0: left promiscuous mode [ 156.768481][ T1575] bridge0: port 3(batadv0) entered disabled state [ 156.775629][ T1575] bridge_slave_1: left allmulticast mode [ 156.781288][ T1575] bridge_slave_1: left promiscuous mode [ 156.787080][ T1575] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.795232][ T1575] bridge_slave_0: left allmulticast mode [ 156.800877][ T1575] bridge_slave_0: left promiscuous mode [ 156.806577][ T1575] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.866737][ T1575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.876106][ T1575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.885509][ T1575] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 156.894494][ T1575] bond0 (unregistering): Released all slaves [ 156.902674][ T1575] bond1 (unregistering): Released all slaves [ 156.957007][ T1575] hsr_slave_0: left promiscuous mode [ 156.962725][ T1575] hsr_slave_1: left promiscuous mode [ 156.979459][ T1575] team0 (unregistering): Port device team_slave_1 removed [ 156.989462][ T1575] team0 (unregistering): Port device team_slave_0 removed [ 157.656061][ T863] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.705820][ T863] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.775484][ T863] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.835316][ T863] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.928455][ T863] bridge_slave_1: left allmulticast mode [ 157.934181][ T863] bridge_slave_1: left promiscuous mode [ 157.939914][ T863] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.947743][ T863] bridge_slave_0: left allmulticast mode [ 157.953402][ T863] bridge_slave_0: left promiscuous mode [ 157.959219][ T863] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.035372][ T863] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 158.043548][ T863] bridge1 (unregistering): left promiscuous mode [ 158.086264][ T863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.096324][ T863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.105856][ T863] bond0 (unregistering): Released all slaves [ 158.114763][ T863] bond1 (unregistering): Released all slaves [ 158.178621][ T863] hsr_slave_0: left promiscuous mode [ 158.184481][ T863] hsr_slave_1: left promiscuous mode [ 158.192254][ T863] veth1_macvtap: left promiscuous mode [ 158.197924][ T863] veth0_macvtap: left promiscuous mode [ 158.203484][ T863] veth1_vlan: left promiscuous mode [ 158.208722][ T863] veth0_vlan: left promiscuous mode [ 158.272334][ T863] team0 (unregistering): Port device team_slave_1 removed [ 158.282039][ T863] team0 (unregistering): Port device team_slave_0 removed