last executing test programs: 5m16.860981916s ago: executing program 1 (id=1068): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x6a9a0000000, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x100000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 5m16.753869755s ago: executing program 1 (id=1074): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500"], &(0x7f0000000000)='GPL\x00'}, 0x94) 5m16.529790172s ago: executing program 1 (id=1076): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) 5m16.497028465s ago: executing program 1 (id=1078): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x27, 0x0, 0x1, 0x5, 0x8, 0x3, "63f52d9227f423f1c55e48e753c6d76e45763e70be3b64d3044bbeb725a157cf81eab4d44dd7d43a5dadb9a03ae4329c23260056dc0cf2b4c5c75fb9ae30c7"}, 0x60, &(0x7f00000008c0)=[{&(0x7f0000000480)="b5ca4a368b5c70ec48611cfdc2264048d5ca57979fcc7b3ce631d9d64bffd81ebd2b7023ffd05c45407336c5b99be8243d3a2d005b8e083c132c810f90e289ad0653d071898f0b0abfcc42755a479427c44eb9d4bf639fc580d43ba62bd2405ea95515d4d4865c98722f36cf758167150ff054ac20b4c8a560eb85f1d3a92c297058a8623c153bbb043af2bd4244ce1bdef5717edd8d63c7e7c2f247f5f2d5c943d90b09643a2afc2969b37fda313f1075aff889b7a834deebd77c6737d8", 0xbe}, {&(0x7f0000000540)="23de5aa97df256281c0bb83026bdd14c709c09f0dd4df88100", 0x19}, {&(0x7f0000000580)="db87a47d1bf73263b086813dd0622ccaa22ad9d79d3b1dc5f9327bcda901a66be179c8454ddb2dd192e92a87e1f7eee2bb3f1c8b51f66de3ad8787611b9a17bdc2ea726be0", 0x45}, {&(0x7f0000000640)="d592f56d0cde52d67d8aeeceb40c6156b2d8d9fe9b045b10c60b819dd6cff3378e1caafb9959660ee005bb01750583c24f48fd60b06046198a1fdd47788a5c41e09f5b88c3bec8721d240e61efe125f5572701225e20248d5b73e741998b9378e780f9ebb6a63bae2747d6d7e323fa447fb1efdae702f42529fb345dd8749d4d9fb1ff5610", 0x85}, {&(0x7f0000000700)="59621090e865609cd47c20d32bdea0ea128a7bfe2d2b1afc19a7801644f22513a7a01d02597660984393f270a2f50a98c4b4251e8c08e056b07fa6ef57bc314afb25a50f5c4bbb1406780231ae2122b6b1ba4c27072aca0458f4d965ab632164880597c4af0b3e22fe25111faad3bd4c2aa393e262bf3ce3211d46c2c5ef9f627c791013c3afb8cf39a9dfcc42463b008f1ec5d300502f875709b5e6f14fc923707fb9b1655a1ae3374359d1b4f9d260939fbb864cab91df32", 0xb9}, {&(0x7f00000007c0)="7cae226c59d3f4a79f0f2928bd1c858c61990ac74b3ce13ad112e1f5519d67745923d9bf767fb0216e9ae722802494256cc5361d38d44e29a755ad894f8a71bb1c5c5d3cb951bf8317ad3301ec6431d491b764e7fab80c65a6bd3ae7f86d", 0x5e}], 0x6, &(0x7f0000000a80)={0xf0, 0x119, 0x8, "4ccec5bf086c9b35c5cf40d11175aabbb376d4fe982c635f384e67e0931a900be66db9776668e29eb1231fc5697f1a66aff63e02a26be42dfc54f6c130fb2091e1733836dfb0e2139af99bc21fbba309b5bb15554d2d2b6303e30afbef037e6cb019311a9f469a25357be920f62b0bf6126856bbe7af2f6e11dd2a69f5620e1e1629bad2d65ee897bbab9c38c5078d922badcd62ca3bc9a2db8da0b02a0d7cb98e3e66b99dadf9946ce557cb3ed4de8395ffbab28a916ab4708752390b9547326993cd2b9c0278b4349fcaf71d86f161d2763e2a202d7ed2d3"}, 0xf0, 0x80}, 0x8000) rename(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095e5ff4f2331546eb2b350c5b9f255f09404a330d7481fb33ba26c203bbbc243ea8c4bf251cd02458b0f2082a0a489ebf1eebee6f17f2c8a9b3ecbc6cc304555bbb5bd549ea9ad72cb51e2429cb31fe2c80167e7b76541f97f2bcec2249c8e2976227164703ac6a48b55927041f5010175ec6bedb77b217362ff4b37591b"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffdf4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) r7 = creat(0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 5m13.758745819s ago: executing program 1 (id=1089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="01020000b65cf1b614f0ffffff7f000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000a40)) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, 0x0, 0x0, 0x7c00, 0x30000000, 0x3) setsockopt$packet_int(r2, 0x107, 0x14, 0x0, 0x30) listxattr(&(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000018, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x401a932, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 5m12.860034289s ago: executing program 1 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1095, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7e73c0008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x53, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001210600000005000400000000000900020073797a3100000000050005000a0000001168f900686173683a69702c306f7274000000000c00078008000840e000005fa85e"], 0x58}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 5m12.632528447s ago: executing program 32 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1095, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7e73c0008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x53, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="5800000002060108000034e40000000000000000050001210600000005000400000000000900020073797a3100000000050005000a0000001168f900686173683a69702c306f7274000000000c00078008000840e000005fa85e"], 0x58}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 9.239409847s ago: executing program 2 (id=4497): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) r0 = syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") symlinkat(&(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r2, &(0x7f0000000740)=ANY=[@ANYBLOB="0701080843020000cf0200000c0000000f030000080000000000000000000000212e37841c09fc84e5cf7ec8ccafe54136d08081f9293ca5c4e2744734405cd1c99e64b6b6f005f8a94e911c3de417ce901bbd1c1fbda4c857281df009654bb8ba6d09c47c8b060187a8e726ce6cc23ed1490c95e0a4515669de04831f574a88f6b8f212f5a462800b1e04a779658fc94b4b53e60c987950a470a530701ceaf3c5e93f734dc96f1a72ce64b4a50b6dfad509f4c95ae3aa2c1f96e1ebd51f7d4253f44dc6726449b0ba414b8d99005b19c59b94dcdc868443a0b56334e28639ab7b00"/1233], 0x4e1) syz_open_dev$evdev(&(0x7f0000000000), 0x8, 0x100) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newtaction={0x88c, 0x30, 0xffff, 0x4, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x4, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x3ff, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0xfffffffe, 0x8c, 0x80000001, 0x6, 0x1, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x1, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0xfffffffd, 0x7, 0x9, 0xb7d, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x5, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x0, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x7fff, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0xb, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0xd, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) fallocate(r5, 0x3, 0x1020003, 0x8000c62) r7 = timerfd_create(0x0, 0x0) r8 = syz_io_uring_setup(0x58f7, &(0x7f0000000880)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r7, 0x3, &(0x7f0000000840)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r11 = accept4$llc(r5, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_inet_SIOCGIFADDR(r11, 0x8915, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @initdev}}) io_uring_enter(r8, 0x1f82, 0x0, 0x0, 0x0, 0x0) 8.44126873s ago: executing program 2 (id=4502): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7.814078139s ago: executing program 2 (id=4510): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x1000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) 6.948663617s ago: executing program 2 (id=4525): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="180000120000d8e249a4400000000000000000000000a7f11b0d87956d85", @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x8084}, 0x48810) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x60043, 0x0) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r6, &(0x7f0000fc4fbe)=""/80, 0x50) unlink(&(0x7f00000001c0)='./control/file0\x00') unlinkat(r6, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) 6.64835645s ago: executing program 0 (id=4535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000101100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0xaa, &(0x7f00000008c0)=ANY=[@ANYBLOB="2899915786e8077c71e6dffd3b14d3fe9cc7bc1f494f5d65eb5b17c22438cb370ebd31d0549028397c07beefde17ae764ca1e2624eb020a8d262d9dce5f2a429ee74f683c3a9c604742712ac240f239d71861a961d2cc234ad7cbe5014bca8aa541fb9ae4f4abc9bc50d9b8e216bb0f327cf", @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r2], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) acct(0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_emit_ethernet(0xffffffffffffff0c, 0x0, 0x0) 6.542371959s ago: executing program 2 (id=4537): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe7e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4}, {0x10000000, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff4}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c022300040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c00)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'veth1_to_team\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000abc0)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000dc0)={'ip6tnl0\x00', &(0x7f0000000d40)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x4, 0x7ff, 0x28, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x10, 0x10, 0xe, 0x2}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0xfffffffd, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2000000, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x102, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x2, 0x3, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.988687592s ago: executing program 0 (id=4541): mkdir(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000140)=0x6, 0x4) 5.789586557s ago: executing program 0 (id=4543): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf73, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.552539884s ago: executing program 5 (id=4546): socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000004c0), &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000004840)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.48545609s ago: executing program 5 (id=4549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x6a9a0000000, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 4.440088403s ago: executing program 2 (id=4550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) add_key$fscrypt_v1(&(0x7f00000045c0), &(0x7f0000004600)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x63, 0x34, 0x32, 0x61, 0x35, 0x37, 0x31, 0x30, 0x31, 0x66, 0x37, 0x66]}, &(0x7f0000004640)={0x0, "777d8f054c48da896ef189bbddda1c15d5e1e6063b49fdebb87c6402a39f2e4243b9c6b0d3f5fec0094ba3336140cc7b22fdb690cd041be8f677556f46013668", 0x31}, 0x48, 0xfffffffffffffffc) 4.399593166s ago: executing program 33 (id=4550): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) add_key$fscrypt_v1(&(0x7f00000045c0), &(0x7f0000004600)={'fscrypt:', @auto=[0x35, 0x39, 0x34, 0x30, 0x63, 0x34, 0x32, 0x61, 0x35, 0x37, 0x31, 0x30, 0x31, 0x66, 0x37, 0x66]}, &(0x7f0000004640)={0x0, "777d8f054c48da896ef189bbddda1c15d5e1e6063b49fdebb87c6402a39f2e4243b9c6b0d3f5fec0094ba3336140cc7b22fdb690cd041be8f677556f46013668", 0x31}, 0x48, 0xfffffffffffffffc) 4.381983618s ago: executing program 5 (id=4552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a320000"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4.272328896s ago: executing program 5 (id=4554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/13], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$netlink(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0x100000000, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0xffffffffffffffff, 0x0}) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4004004) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0xfffffffffffffdbb}, 0x0) 3.959290711s ago: executing program 5 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000a40)='./file0\x00', 0x18000, &(0x7f0000000f00)=ANY=[@ANYRES32=r2, @ANYRESDEC, @ANYRES16=r3, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRESDEC=r0], 0x7, 0x2f4, &(0x7f0000000c00)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000a00)) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r12}, 0x10) unshare(0x64000600) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32=r13, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r14, 0x0, 0xfffffffffffffffd}, 0x18) 3.721406059s ago: executing program 0 (id=4560): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.136077175s ago: executing program 0 (id=4562): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000700)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r2, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xb, 0x3, 0x7}, 0x10, 0x0, r1, 0x8, &(0x7f0000000b00)=[r3, r4], &(0x7f0000000b40)=[{0x2, 0x5, 0x6, 0x4}, {0x2, 0x1, 0xa, 0x1}, {0x1, 0x3, 0xf, 0x2}, {0x4, 0x4, 0xd, 0x2}, {0xa893, 0x5, 0x0, 0xa}, {0x1, 0x4, 0x0, 0x2}, {0x1, 0x1, 0x8, 0x2}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 2.859409597s ago: executing program 0 (id=4565): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt(r0, 0x6, 0x400, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8614, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x0, 0x8, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) fallocate(0xffffffffffffffff, 0x9, 0x2, 0x7000003) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) 1.526398761s ago: executing program 3 (id=4574): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000009c0)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000700)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r2, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xb, 0x3, 0x7}, 0x10, 0x0, r1, 0x8, &(0x7f0000000b00)=[r3, r4], &(0x7f0000000b40)=[{0x2, 0x5, 0x6, 0x4}, {0x2, 0x1, 0xa, 0x1}, {0x1, 0x3, 0xf, 0x2}, {0x4, 0x4, 0xd, 0x2}, {0xa893, 0x5, 0x0, 0xa}, {0x1, 0x4, 0x0, 0x2}, {0x1, 0x1, 0x8, 0x2}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{0x0}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1.262428802s ago: executing program 3 (id=4575): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0xe2de3e8, 0x100000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x202980) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x100000003}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/4096, 0x1000) 1.132042042s ago: executing program 3 (id=4576): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0xe2de3e8, 0x100000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x202980) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x100000003}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/4096, 0x1000) 1.015731021s ago: executing program 3 (id=4579): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x2) 931.581758ms ago: executing program 3 (id=4581): openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) fsetxattr$security_capability(r2, &(0x7f0000000140), &(0x7f00000002c0)=@v3={0x3000000, [{0x9, 0xffff0000}, {0x3, 0xfffffffd}]}, 0x18, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 886.712191ms ago: executing program 4 (id=4582): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={0xffffffffffffffff, 0x6a9a0000000, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 824.986716ms ago: executing program 4 (id=4583): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4014) 727.432294ms ago: executing program 4 (id=4584): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$netlink(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_open_dev$usbfs(0x0, 0x77, 0x41341) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6a, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r8, 0x2285, &(0x7f00000005c0)={0x53, 0x100000000, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0xffffffffffffffff, 0x0}) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4004004) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1, 0x0, 0xfffffffffffffdbb}, 0x0) 674.680618ms ago: executing program 3 (id=4585): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c00)={'team_slave_1\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setsockopt$sock_int(r4, 0x1, 0x23, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf73, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r6, &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 568.667286ms ago: executing program 4 (id=4586): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000c, 0xe2de3e8, 0x100000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000140)='Q', 0x1, 0x202980) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000100), 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r4, r4, 0x0, 0xe0000000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x100000003}, 0x18) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080d4}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/4096, 0x1000) 447.932926ms ago: executing program 4 (id=4587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000001240)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000101100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_emit_ethernet(0xaa, &(0x7f00000008c0)=ANY=[@ANYBLOB="2899915786e8077c71e6dffd3b14d3fe9cc7bc1f494f5d65eb5b17c22438cb370ebd31d0549028397c07beefde17ae764ca1e2624eb020a8d262d9dce5f2a429ee74f683c3a9c604742712ac240f239d71861a961d2cc234ad7cbe5014bca8aa541fb9ae4f4abc9bc50d9b8e216bb0f327cf", @ANYRESHEX=r1, @ANYRES32=r1, @ANYRES64=r2], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) acct(0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0xfffffffe}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_emit_ethernet(0xffffffffffffff0c, 0x0, 0x0) 179.164927ms ago: executing program 6 (id=4551): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@generic={0x0, 0x0, 0x8}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r4, 0x1) splice(r4, 0x0, r3, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x19, &(0x7f0000000700)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xb, 0x3, 0x7}, 0x10, 0x0, r1, 0x8, &(0x7f0000000b00)=[r2, r3], &(0x7f0000000b40)=[{0x2, 0x5, 0x6, 0x4}, {0x2, 0x1, 0xa, 0x1}, {0x1, 0x3, 0xf, 0x2}, {0x4, 0x4, 0xd, 0x2}, {0xa893, 0x5, 0x0, 0xa}, {0x1, 0x4, 0x0, 0x2}, {0x1, 0x1, 0x8, 0x2}, {0x2, 0x3, 0x10, 0x2}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x12a6, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb010511000b0003000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 70.193085ms ago: executing program 6 (id=4588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 37.537038ms ago: executing program 4 (id=4589): r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x0, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) epoll_create1(0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], 0x0, 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x73) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440)=0x2000000, &(0x7f0000000480)=r2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x800) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)={0x50, r5, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "462309d337e122bb201a0b392c93e866"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "95d1cfb3bd8a40b2fbdd16343ac6fa7e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ee502204369edca456160a6e2ebbe5cb"}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x4004000) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @mcast2, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002140)=ANY=[], 0x48) close(0x3) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x2a00, 0x0) r7 = epoll_create1(0x80000) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffeffff, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f00000001c0)={0x80000002}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 10.45682ms ago: executing program 6 (id=4590): socket(0x25, 0x2, 0x82) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") (async) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="040100000101030000000000000000000a00000220000280060003400003000006000340080000000c000280050001002100000058000e8006000340000400000c00028005000100000000000c00028005000100060000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa06000340000000006c0002800c0002800500010011000000140001"], 0x104}, 0x1, 0x0, 0x0, 0x840}, 0x804) (async) fallocate(r0, 0x0, 0x0, 0x1001f0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000100)={0x0, 0x1, 0xffffffffffffffff, 0x7, 0x80000}) (async, rerun: 64) unlink(&(0x7f0000000180)='./file1\x00') (rerun: 64) 0s ago: executing program 5 (id=4591): syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) unshare(0x20000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x1000}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x10, &(0x7f00000004c0)=ANY=[]) kernel console output (not intermixed with test programs): 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 371.060799][T13573] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.090735][T13596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 371.214576][T13605] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3614'. [ 372.146146][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 372.155139][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3619'. [ 372.220609][T13622] FAULT_INJECTION: forcing a failure. [ 372.220609][T13622] name failslab, interval 1, probability 0, space 0, times 0 [ 372.233413][T13622] CPU: 0 UID: 0 PID: 13622 Comm: syz.0.3621 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 372.233477][T13622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.233491][T13622] Call Trace: [ 372.233500][T13622] [ 372.233510][T13622] __dump_stack+0x1d/0x30 [ 372.233532][T13622] dump_stack_lvl+0xe8/0x140 [ 372.233600][T13622] dump_stack+0x15/0x1b [ 372.233619][T13622] should_fail_ex+0x265/0x280 [ 372.233693][T13622] ? audit_log_d_path+0x8d/0x150 [ 372.233734][T13622] should_failslab+0x8c/0xb0 [ 372.233792][T13622] __kmalloc_cache_noprof+0x4c/0x320 [ 372.233891][T13622] audit_log_d_path+0x8d/0x150 [ 372.234005][T13622] audit_log_d_path_exe+0x42/0x70 [ 372.234047][T13622] audit_log_task+0x1e9/0x250 [ 372.234157][T13622] audit_seccomp+0x61/0x100 [ 372.234194][T13622] ? __seccomp_filter+0x68c/0x10d0 [ 372.234220][T13622] __seccomp_filter+0x69d/0x10d0 [ 372.234268][T13622] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 372.234305][T13622] ? vfs_write+0x75e/0x8e0 [ 372.234338][T13622] __secure_computing+0x82/0x150 [ 372.234359][T13622] syscall_trace_enter+0xcf/0x1e0 [ 372.234393][T13622] do_syscall_64+0xac/0x200 [ 372.234484][T13622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 372.234588][T13622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 372.234612][T13622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.234640][T13622] RIP: 0033:0x7f5150dcebe9 [ 372.234673][T13622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.234696][T13622] RSP: 002b:00007f514f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 372.234765][T13622] RAX: ffffffffffffffda RBX: 00007f5150ff5fa0 RCX: 00007f5150dcebe9 [ 372.234782][T13622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 372.234816][T13622] RBP: 00007f514f837090 R08: 0000000000000000 R09: 0000000000000000 [ 372.234837][T13622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.234869][T13622] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 372.234901][T13622] [ 373.054023][T13635] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3625'. [ 373.176187][T13641] 9pnet_fd: Insufficient options for proto=fd [ 373.243254][T13643] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3628'. [ 373.517980][T13655] FAULT_INJECTION: forcing a failure. [ 373.517980][T13655] name failslab, interval 1, probability 0, space 0, times 0 [ 373.530763][T13655] CPU: 0 UID: 0 PID: 13655 Comm: syz.3.3633 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 373.530794][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.530808][T13655] Call Trace: [ 373.530817][T13655] [ 373.530825][T13655] __dump_stack+0x1d/0x30 [ 373.530850][T13655] dump_stack_lvl+0xe8/0x140 [ 373.531004][T13655] dump_stack+0x15/0x1b [ 373.531024][T13655] should_fail_ex+0x265/0x280 [ 373.531115][T13655] should_failslab+0x8c/0xb0 [ 373.531141][T13655] kmem_cache_alloc_noprof+0x50/0x310 [ 373.531177][T13655] ? skb_clone+0x151/0x1f0 [ 373.531277][T13655] skb_clone+0x151/0x1f0 [ 373.531295][T13655] __netlink_deliver_tap+0x2c9/0x500 [ 373.531341][T13655] netlink_unicast+0x66b/0x690 [ 373.531430][T13655] netlink_sendmsg+0x58b/0x6b0 [ 373.531478][T13655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.531512][T13655] __sock_sendmsg+0x142/0x180 [ 373.531541][T13655] ____sys_sendmsg+0x345/0x4e0 [ 373.531618][T13655] ___sys_sendmsg+0x17b/0x1d0 [ 373.531666][T13655] __sys_sendmmsg+0x178/0x300 [ 373.531718][T13655] __x64_sys_sendmmsg+0x57/0x70 [ 373.531767][T13655] x64_sys_call+0x1c4a/0x2ff0 [ 373.531794][T13655] do_syscall_64+0xd2/0x200 [ 373.531883][T13655] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 373.531916][T13655] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 373.531946][T13655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.531976][T13655] RIP: 0033:0x7fe5724febe9 [ 373.532013][T13655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.532038][T13655] RSP: 002b:00007fe570f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 373.532060][T13655] RAX: ffffffffffffffda RBX: 00007fe572725fa0 RCX: 00007fe5724febe9 [ 373.532073][T13655] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 373.532085][T13655] RBP: 00007fe570f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 373.532098][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.532138][T13655] R13: 00007fe572726038 R14: 00007fe572725fa0 R15: 00007ffebde39c68 [ 373.532176][T13655] [ 373.786944][T13662] 9pnet_fd: Insufficient options for proto=fd [ 374.480527][ T294] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.513673][ T294] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.548057][ T294] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.558286][ T294] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.742858][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 375.742877][ T29] audit: type=1326 audit(1754545468.028:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.860400][ T29] audit: type=1326 audit(1754545468.058:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.884102][ T29] audit: type=1326 audit(1754545468.058:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.907668][ T29] audit: type=1326 audit(1754545468.058:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.931367][ T29] audit: type=1326 audit(1754545468.068:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.947785][T13715] __nla_validate_parse: 5 callbacks suppressed [ 375.947807][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3651'. [ 375.954919][ T29] audit: type=1326 audit(1754545468.098:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13706 comm="syz.5.3650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 375.993998][ T29] audit: type=1326 audit(1754545468.108:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.4.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 376.017599][ T29] audit: type=1326 audit(1754545468.108:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.4.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 376.041492][ T29] audit: type=1326 audit(1754545468.108:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.4.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 376.065188][ T29] audit: type=1326 audit(1754545468.108:6804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13707 comm="syz.4.3651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 376.092575][T13719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3652'. [ 376.125569][T13721] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3654'. [ 376.171574][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 376.180596][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 377.359996][T13748] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3664'. [ 377.693277][T13752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3665'. [ 377.813526][T13755] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3666'. [ 377.833084][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3667'. [ 377.842124][T13757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3667'. [ 380.769022][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 380.769125][ T29] audit: type=1400 audit(1754545473.058:6958): avc: denied { setopt } for pid=13810 comm="syz.3.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.064274][T13817] __nla_validate_parse: 3 callbacks suppressed [ 381.064295][T13817] netlink: 12 bytes leftover after parsing attributes in process `'. [ 381.078764][T13817] netlink: 28 bytes leftover after parsing attributes in process `'. [ 381.086850][T13817] netlink: 12 bytes leftover after parsing attributes in process `'. [ 381.139058][T13818] x_tables: ip_tables: CONNMARK.1 target: invalid size 16 (kernel) != (user) 24 [ 381.177626][T13817] netlink: 28 bytes leftover after parsing attributes in process `'. [ 381.185851][T13817] netlink: '': attribute type 6 has an invalid length. [ 381.319245][T13820] netlink: 'syz.2.3692': attribute type 13 has an invalid length. [ 381.457322][T13820] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.661189][T13826] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3696'. [ 381.744678][ T29] audit: type=1326 audit(1754545474.028:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.796737][ T29] audit: type=1326 audit(1754545474.068:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.820709][ T29] audit: type=1326 audit(1754545474.078:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.844378][ T29] audit: type=1326 audit(1754545474.078:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.868062][ T29] audit: type=1326 audit(1754545474.078:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.891800][ T29] audit: type=1326 audit(1754545474.078:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.915422][ T29] audit: type=1326 audit(1754545474.078:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.939028][ T29] audit: type=1326 audit(1754545474.078:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 381.962746][ T29] audit: type=1326 audit(1754545474.078:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13829 comm="syz.4.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 382.103937][T13846] program syz.3.3700 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.113705][T13836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 382.135122][T13846] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 382.385933][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3705'. [ 382.569061][T13864] 9pnet_fd: Insufficient options for proto=fd [ 384.137701][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3714'. [ 384.274119][T13904] bpf: Bad value for 'gid' [ 384.334317][T13907] 9pnet_fd: Insufficient options for proto=fd [ 384.367426][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 384.376560][T13911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 385.075795][T13938] bpf: Bad value for 'gid' [ 386.418774][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 386.418795][ T29] audit: type=1326 audit(1754545478.688:7036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.4.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.448789][ T29] audit: type=1326 audit(1754545478.688:7037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.4.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.472441][ T29] audit: type=1326 audit(1754545478.688:7038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.4.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.495997][ T29] audit: type=1326 audit(1754545478.688:7039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13941 comm="syz.4.3736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.558556][T13946] __nla_validate_parse: 2 callbacks suppressed [ 386.558573][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3737'. [ 386.573902][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3737'. [ 386.655588][ T29] audit: type=1326 audit(1754545478.828:7040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.679302][ T29] audit: type=1326 audit(1754545478.828:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.703367][ T29] audit: type=1326 audit(1754545478.828:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.727044][ T29] audit: type=1326 audit(1754545478.828:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.750608][ T29] audit: type=1326 audit(1754545478.828:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.774243][ T29] audit: type=1326 audit(1754545478.828:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13943 comm="syz.4.3738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 386.800721][T13953] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3741'. [ 387.525853][T13957] netlink: 'syz.3.3752': attribute type 1 has an invalid length. [ 387.533925][T13957] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3752'. [ 387.552078][T13960] bpf: Bad value for 'gid' [ 387.576744][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3752'. [ 387.631227][T13968] netlink: 'syz.2.3742': attribute type 10 has an invalid length. [ 387.769091][T13975] 9pnet_fd: Insufficient options for proto=fd [ 387.786462][T13976] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3746'. [ 387.799272][T13978] netlink: 'syz.3.3747': attribute type 1 has an invalid length. [ 387.807149][T13978] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3747'. [ 387.851737][T13980] netlink: 'syz.2.3748': attribute type 10 has an invalid length. [ 387.887083][T13978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3747'. [ 387.947948][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 387.956937][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3751'. [ 388.138659][T13998] bpf: Bad value for 'gid' [ 388.436450][T14006] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 389.324351][T14047] 9pnet_fd: Insufficient options for proto=fd [ 389.946809][T14073] netlink: 'syz.5.3780': attribute type 10 has an invalid length. [ 390.380750][T14098] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 390.780882][T14122] 9pnet_fd: Insufficient options for proto=fd [ 391.342214][T14137] 9pnet_fd: Insufficient options for proto=fd [ 392.006880][T14147] netlink: 'syz.3.3806': attribute type 10 has an invalid length. [ 392.494938][T14158] __nla_validate_parse: 25 callbacks suppressed [ 392.494956][T14158] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3809'. [ 392.794279][T14160] block device autoloading is deprecated and will be removed. [ 392.965062][T14171] block device autoloading is deprecated and will be removed. [ 393.085658][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 393.085677][ T29] audit: type=1326 audit(1754545485.368:7271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.162216][ T29] audit: type=1326 audit(1754545485.398:7272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.185856][ T29] audit: type=1326 audit(1754545485.398:7273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.209489][ T29] audit: type=1326 audit(1754545485.408:7274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.233095][ T29] audit: type=1326 audit(1754545485.408:7275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.256757][ T29] audit: type=1326 audit(1754545485.408:7276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.280587][ T29] audit: type=1326 audit(1754545485.408:7277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14180 comm="syz.5.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 393.356126][T14184] netlink: 'syz.5.3815': attribute type 1 has an invalid length. [ 393.363967][T14184] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3815'. [ 393.393752][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3815'. [ 393.626863][T14194] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 393.665835][ T29] audit: type=1326 audit(1754545485.778:7278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.4.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 393.689690][ T29] audit: type=1326 audit(1754545485.778:7279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.4.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 393.713432][ T29] audit: type=1326 audit(1754545485.778:7280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14187 comm="syz.4.3816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 393.763318][T14193] netlink: 'syz.4.3817': attribute type 10 has an invalid length. [ 393.914284][T14198] netlink: 'syz.4.3818': attribute type 10 has an invalid length. [ 393.961896][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3819'. [ 393.970845][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3819'. [ 394.983022][T14217] netlink: 'syz.5.3825': attribute type 1 has an invalid length. [ 394.990876][T14217] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3825'. [ 395.102980][T14222] netlink: 'syz.2.3828': attribute type 10 has an invalid length. [ 395.123056][T14217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'. [ 395.150391][T14233] 9pnet_fd: Insufficient options for proto=fd [ 395.286216][T14241] bpf: Bad value for 'gid' [ 395.292253][T14236] netlink: 'syz.2.3831': attribute type 10 has an invalid length. [ 395.472220][T14245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3834'. [ 395.579311][T14247] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3835'. [ 396.002303][T14265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3842'. [ 396.067353][T14265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14265 comm=syz.3.3842 [ 396.326852][T14282] netlink: 'syz.0.3849': attribute type 10 has an invalid length. [ 396.650089][T14303] netlink: 'syz.3.3858': attribute type 10 has an invalid length. [ 396.662126][T14308] netlink: 'syz.2.3860': attribute type 1 has an invalid length. [ 396.737769][T14313] netlink: 'syz.0.3861': attribute type 10 has an invalid length. [ 397.509172][T14361] __nla_validate_parse: 9 callbacks suppressed [ 397.509190][T14361] netlink: 288 bytes leftover after parsing attributes in process `syz.0.3880'. [ 397.648206][T14373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3885'. [ 397.680521][T14373] team0: Port device team_slave_0 removed [ 398.179214][T14386] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3890'. [ 398.294502][T14392] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3893'. [ 398.325454][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 398.325480][ T29] audit: type=1326 audit(1754545490.608:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.373497][ T29] audit: type=1326 audit(1754545490.648:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.397323][ T29] audit: type=1326 audit(1754545490.648:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.421029][ T29] audit: type=1326 audit(1754545490.648:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.444703][ T29] audit: type=1326 audit(1754545490.648:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.468251][ T29] audit: type=1326 audit(1754545490.648:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.492011][ T29] audit: type=1326 audit(1754545490.648:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.516154][ T29] audit: type=1326 audit(1754545490.648:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14395 comm="syz.4.3894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 398.553017][T14398] 9pnet_fd: Insufficient options for proto=fd [ 398.580301][T14405] bpf: Bad value for 'gid' [ 398.643638][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'. [ 398.832396][T14415] validate_nla: 4 callbacks suppressed [ 398.832418][T14415] netlink: 'syz.2.3901': attribute type 10 has an invalid length. [ 398.867315][T14418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3902'. [ 398.900549][T14420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3903'. [ 398.932021][ T29] audit: type=1326 audit(1754545491.218:7358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 398.957682][ T29] audit: type=1326 audit(1754545491.218:7359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14421 comm="syz.2.3904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 399.068978][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3906'. [ 399.078427][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3906'. [ 399.133636][T14435] bpf: Bad value for 'gid' [ 399.258307][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3913'. [ 399.321567][T14448] netlink: 'syz.5.3914': attribute type 10 has an invalid length. [ 399.443794][T14466] 9pnet_fd: Insufficient options for proto=fd [ 399.618353][T14472] blktrace: Concurrent blktraces are not allowed on loop7 [ 399.756690][T14488] netlink: 'syz.5.3931': attribute type 10 has an invalid length. [ 399.893558][T14501] FAULT_INJECTION: forcing a failure. [ 399.893558][T14501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 399.906987][T14501] CPU: 0 UID: 0 PID: 14501 Comm: syz.0.3935 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 399.907029][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.907046][T14501] Call Trace: [ 399.907055][T14501] [ 399.907065][T14501] __dump_stack+0x1d/0x30 [ 399.907093][T14501] dump_stack_lvl+0xe8/0x140 [ 399.907152][T14501] dump_stack+0x15/0x1b [ 399.907169][T14501] should_fail_ex+0x265/0x280 [ 399.907203][T14501] should_fail_alloc_page+0xf2/0x100 [ 399.907241][T14501] __alloc_frozen_pages_noprof+0xff/0x360 [ 399.907368][T14501] alloc_pages_mpol+0xb3/0x250 [ 399.907474][T14501] alloc_frozen_pages_noprof+0x90/0x110 [ 399.907519][T14501] ___kmalloc_large_node+0x52/0x100 [ 399.907558][T14501] __kmalloc_large_node_noprof+0x16/0xa0 [ 399.907638][T14501] __kmalloc_noprof+0x2ab/0x3e0 [ 399.907743][T14501] ? iovec_from_user+0x84/0x210 [ 399.907779][T14501] iovec_from_user+0x84/0x210 [ 399.907807][T14501] ? process_vm_rw+0x137/0x960 [ 399.907843][T14501] process_vm_rw+0x15b/0x960 [ 399.907911][T14501] ? _parse_integer+0x27/0x40 [ 399.908016][T14501] ? kstrtoull+0x111/0x140 [ 399.908066][T14501] ? __fget_files+0x184/0x1c0 [ 399.908101][T14501] ? fput+0x8f/0xc0 [ 399.908140][T14501] __x64_sys_process_vm_readv+0x78/0x90 [ 399.908208][T14501] x64_sys_call+0x1874/0x2ff0 [ 399.908323][T14501] do_syscall_64+0xd2/0x200 [ 399.908348][T14501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 399.908373][T14501] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 399.908445][T14501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.908546][T14501] RIP: 0033:0x7f5150dcebe9 [ 399.908566][T14501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.908610][T14501] RSP: 002b:00007f514f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 399.908633][T14501] RAX: ffffffffffffffda RBX: 00007f5150ff5fa0 RCX: 00007f5150dcebe9 [ 399.908649][T14501] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000208 [ 399.908666][T14501] RBP: 00007f514f837090 R08: 0000000000000286 R09: 0000000000000000 [ 399.908682][T14501] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 399.908704][T14501] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 399.908782][T14501] [ 400.399461][ C1] vcan0: j1939_session_tx_dat: 0xffff888131602400: queue data error: -100 [ 400.466709][ T3370] kernel write not supported for file /532/sched (pid: 3370 comm: kworker/0:2) [ 400.522295][T14530] netem: change failed [ 400.553931][T14532] FAULT_INJECTION: forcing a failure. [ 400.553931][T14532] name failslab, interval 1, probability 0, space 0, times 0 [ 400.566780][T14532] CPU: 1 UID: 0 PID: 14532 Comm: gtp Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 400.566825][T14532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.566843][T14532] Call Trace: [ 400.566852][T14532] [ 400.566863][T14532] __dump_stack+0x1d/0x30 [ 400.566885][T14532] dump_stack_lvl+0xe8/0x140 [ 400.566950][T14532] dump_stack+0x15/0x1b [ 400.566972][T14532] should_fail_ex+0x265/0x280 [ 400.567073][T14532] should_failslab+0x8c/0xb0 [ 400.567104][T14532] kmem_cache_alloc_noprof+0x50/0x310 [ 400.567133][T14532] ? audit_log_start+0x365/0x6c0 [ 400.567190][T14532] audit_log_start+0x365/0x6c0 [ 400.567243][T14532] ? save_fpregs_to_fpstate+0x100/0x160 [ 400.567296][T14532] audit_seccomp+0x48/0x100 [ 400.567322][T14532] ? __seccomp_filter+0x68c/0x10d0 [ 400.567348][T14532] __seccomp_filter+0x69d/0x10d0 [ 400.567431][T14532] ? do_nanosleep+0x26d/0x330 [ 400.567460][T14532] ? __hrtimer_setup+0x144/0x170 [ 400.567488][T14532] __secure_computing+0x82/0x150 [ 400.567516][T14532] syscall_trace_enter+0xcf/0x1e0 [ 400.567544][T14532] do_syscall_64+0xac/0x200 [ 400.567630][T14532] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 400.567739][T14532] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 400.567764][T14532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.567787][T14532] RIP: 0033:0x7fc2a8f0d5fc [ 400.567807][T14532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 400.567900][T14532] RSP: 002b:00007fc2a7977030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.567925][T14532] RAX: ffffffffffffffda RBX: 00007fc2a9135fa0 RCX: 00007fc2a8f0d5fc [ 400.567942][T14532] RDX: 000000000000000f RSI: 00007fc2a79770a0 RDI: 0000000000000005 [ 400.567958][T14532] RBP: 00007fc2a7977090 R08: 0000000000000000 R09: 0000000000000000 [ 400.568015][T14532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.568078][T14532] R13: 00007fc2a9136038 R14: 00007fc2a9135fa0 R15: 00007ffe8e8f9018 [ 400.568105][T14532] [ 400.793354][T14535] blktrace: Concurrent blktraces are not allowed on loop7 [ 400.869089][T14546] 9pnet_fd: Insufficient options for proto=fd [ 400.962748][T14551] bpf: Bad value for 'gid' [ 401.027846][T14553] bpf: Bad value for 'gid' [ 401.640109][ C0] vcan0: j1939_session_tx_dat: 0xffff888119932c00: queue data error: -100 [ 404.004036][T14604] __nla_validate_parse: 18 callbacks suppressed [ 404.004058][T14604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 404.025812][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 404.025827][ T29] audit: type=1326 audit(1754545496.308:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 404.055787][ T29] audit: type=1326 audit(1754545496.308:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 404.096246][ T29] audit: type=1326 audit(1754545496.368:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 404.119916][ T29] audit: type=1326 audit(1754545496.368:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 404.144238][ T29] audit: type=1326 audit(1754545496.368:7640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 404.178243][T14613] binfmt_misc: register: failed to install interpreter file ./file2 [ 404.188162][T14616] netlink: 'syz.5.3980': attribute type 1 has an invalid length. [ 404.196213][T14616] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3980'. [ 404.242743][T14618] netlink: 'syz.0.3982': attribute type 10 has an invalid length. [ 404.269078][ T29] audit: type=1326 audit(1754545496.518:7641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 404.269412][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3980'. [ 404.292196][ T29] audit: type=1326 audit(1754545496.518:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 404.324118][ T29] audit: type=1326 audit(1754545496.518:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14619 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 404.403240][T14630] 9pnet_fd: Insufficient options for proto=fd [ 404.456161][ T29] audit: type=1326 audit(1754545496.738:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 404.493794][ T29] audit: type=1326 audit(1754545496.778:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14637 comm="syz.5.3987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96fe7eebe9 code=0x7ffc0000 [ 404.635879][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3987'. [ 404.745353][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3991'. [ 404.871250][T14657] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3993'. [ 404.959033][T14658] netlink: 'syz.2.3994': attribute type 10 has an invalid length. [ 405.065791][T14667] netlink: 'syz.2.3997': attribute type 10 has an invalid length. [ 405.347226][T14682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 405.987400][T14700] 9pnet_fd: Insufficient options for proto=fd [ 406.068173][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4010'. [ 406.563676][T14707] netlink: 288 bytes leftover after parsing attributes in process `syz.5.4011'. [ 406.768030][T14717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 407.365391][T14737] netlink: 'syz.5.4023': attribute type 10 has an invalid length. [ 407.378762][T14732] netlink: 'syz.4.4022': attribute type 10 has an invalid length. [ 407.653821][T14754] bpf: Bad value for 'gid' [ 407.788917][T14766] netlink: 'syz.2.4034': attribute type 1 has an invalid length. [ 408.301955][T14775] netlink: 'syz.0.4035': attribute type 1 has an invalid length. [ 408.405638][T14777] FAULT_INJECTION: forcing a failure. [ 408.405638][T14777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.418993][T14777] CPU: 0 UID: 0 PID: 14777 Comm: syz.4.4036 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 408.419091][T14777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.419105][T14777] Call Trace: [ 408.419112][T14777] [ 408.419120][T14777] __dump_stack+0x1d/0x30 [ 408.419147][T14777] dump_stack_lvl+0xe8/0x140 [ 408.419172][T14777] dump_stack+0x15/0x1b [ 408.419206][T14777] should_fail_ex+0x265/0x280 [ 408.419274][T14777] should_fail+0xb/0x20 [ 408.419367][T14777] should_fail_usercopy+0x1a/0x20 [ 408.419393][T14777] _copy_from_user+0x1c/0xb0 [ 408.419460][T14777] do_ipv6_setsockopt+0x124/0x2160 [ 408.419493][T14777] ? kstrtoull+0x111/0x140 [ 408.419539][T14777] ? avc_has_perm_noaudit+0x1b1/0x200 [ 408.419572][T14777] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 408.419742][T14777] ipv6_setsockopt+0x59/0x130 [ 408.419779][T14777] udpv6_setsockopt+0x99/0xb0 [ 408.419815][T14777] sock_common_setsockopt+0x66/0x80 [ 408.419849][T14777] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 408.419891][T14777] __sys_setsockopt+0x181/0x200 [ 408.420007][T14777] __x64_sys_setsockopt+0x64/0x80 [ 408.420048][T14777] x64_sys_call+0x20ec/0x2ff0 [ 408.420088][T14777] do_syscall_64+0xd2/0x200 [ 408.420118][T14777] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 408.420191][T14777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 408.420234][T14777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.420275][T14777] RIP: 0033:0x7f51616bebe9 [ 408.420291][T14777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.420310][T14777] RSP: 002b:00007f5160127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 408.420329][T14777] RAX: ffffffffffffffda RBX: 00007f51618e5fa0 RCX: 00007f51616bebe9 [ 408.420341][T14777] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 408.420396][T14777] RBP: 00007f5160127090 R08: 0000000000000014 R09: 0000000000000000 [ 408.420413][T14777] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 408.420523][T14777] R13: 00007f51618e6038 R14: 00007f51618e5fa0 R15: 00007ffe4078dc68 [ 408.420544][T14777] [ 408.759635][T14781] bpf: Bad value for 'gid' [ 409.792416][T14801] blktrace: Concurrent blktraces are not allowed on loop7 [ 409.847096][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 409.847120][ T29] audit: type=1326 audit(1754545502.118:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 409.876929][ T29] audit: type=1326 audit(1754545502.118:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 409.900941][ T29] audit: type=1326 audit(1754545502.118:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 409.924543][ T29] audit: type=1326 audit(1754545502.128:7716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 409.948333][ T29] audit: type=1326 audit(1754545502.128:7717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.4.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51616bebe9 code=0x7ffc0000 [ 409.977897][T14808] __nla_validate_parse: 10 callbacks suppressed [ 409.977916][T14808] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4046'. [ 410.070905][T14821] bpf: Bad value for 'gid' [ 410.076145][T14817] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4050'. [ 410.218765][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4055'. [ 410.602779][ T29] audit: type=1326 audit(1754545502.688:7718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 410.626590][ T29] audit: type=1326 audit(1754545502.688:7719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 410.650188][ T29] audit: type=1326 audit(1754545502.688:7720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 410.673797][ T29] audit: type=1326 audit(1754545502.688:7721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14848 comm="syz.0.4061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5150dcebe9 code=0x7ffc0000 [ 410.829116][ T29] audit: type=1326 audit(1754545503.098:7722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14854 comm="syz.3.4063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 410.835022][T14857] netlink: 288 bytes leftover after parsing attributes in process `syz.0.4062'. [ 411.141354][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4063'. [ 411.264637][T14867] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4064'. [ 411.391336][T14874] bpf: Bad value for 'gid' [ 411.632183][T14883] 9pnet_fd: Insufficient options for proto=fd [ 411.877818][T14889] netlink: 'syz.0.4072': attribute type 10 has an invalid length. [ 412.166852][T14904] netlink: 'syz.3.4078': attribute type 10 has an invalid length. [ 412.342296][T14916] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4083'. [ 412.584065][T14925] netlink: 'syz.4.4086': attribute type 10 has an invalid length. [ 412.701023][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 412.710373][T14929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4088'. [ 412.973093][T14936] netlink: 'syz.4.4090': attribute type 10 has an invalid length. [ 413.089238][T14938] team0: Port device dummy0 removed [ 413.151434][T14938] bridge_slave_0: left allmulticast mode [ 413.157331][T14938] bridge_slave_0: left promiscuous mode [ 413.163071][T14938] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.247870][T14938] bridge_slave_1: left allmulticast mode [ 413.253648][T14938] bridge_slave_1: left promiscuous mode [ 413.259392][T14938] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.292233][T14938] bond0: (slave bond_slave_0): Releasing backup interface [ 413.314778][T14938] bond0: (slave bond_slave_1): Releasing backup interface [ 413.351007][T14938] team0: Failed to send options change via netlink (err -105) [ 413.359167][T14953] 9pnet_fd: Insufficient options for proto=fd [ 413.376043][T14938] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 413.394403][T14938] team0: Port device team_slave_0 removed [ 413.415734][T14938] team0: Failed to send options change via netlink (err -105) [ 413.433743][T14938] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 413.447802][T14938] team0: Port device team_slave_1 removed [ 413.454918][T14938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.462551][T14938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.472350][T14938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.479972][T14938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.678970][T14963] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4099'. [ 414.171624][T14989] netlink: 'syz.5.4106': attribute type 10 has an invalid length. [ 414.184992][T14989] team0: entered promiscuous mode [ 414.190105][T14989] team_slave_0: entered promiscuous mode [ 414.195939][T14989] team_slave_1: entered promiscuous mode [ 414.203686][T14989] dummy0: entered promiscuous mode [ 414.209019][T14989] team0: entered allmulticast mode [ 414.214278][T14989] team_slave_0: entered allmulticast mode [ 414.220063][T14989] team_slave_1: entered allmulticast mode [ 414.235354][T14989] dummy0: entered allmulticast mode [ 414.241851][T14991] FAULT_INJECTION: forcing a failure. [ 414.241851][T14991] name failslab, interval 1, probability 0, space 0, times 0 [ 414.243401][T14989] bridge0: port 3(team0) entered blocking state [ 414.254532][T14991] CPU: 0 UID: 0 PID: 14991 Comm: syz.4.4108 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 414.254570][T14991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.254587][T14991] Call Trace: [ 414.254594][T14991] [ 414.254604][T14991] __dump_stack+0x1d/0x30 [ 414.254633][T14991] dump_stack_lvl+0xe8/0x140 [ 414.254693][T14991] dump_stack+0x15/0x1b [ 414.254718][T14991] should_fail_ex+0x265/0x280 [ 414.254766][T14991] ? bdi_split_work_to_wbs+0x2db/0x640 [ 414.255016][T14991] should_failslab+0x8c/0xb0 [ 414.255064][T14991] __kmalloc_cache_noprof+0x4c/0x320 [ 414.255101][T14991] bdi_split_work_to_wbs+0x2db/0x640 [ 414.255198][T14991] sync_inodes_sb+0xff/0x440 [ 414.255237][T14991] ? down_read+0x77/0xe0 [ 414.255274][T14991] sync_inodes_one_sb+0x3d/0x50 [ 414.255344][T14991] __iterate_supers+0x110/0x220 [ 414.255370][T14991] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 414.255402][T14991] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 414.255435][T14991] iterate_supers+0x1f/0x30 [ 414.255460][T14991] ksys_sync+0x5c/0xe0 [ 414.255520][T14991] __ia32_sys_sync+0xe/0x20 [ 414.255549][T14991] x64_sys_call+0x2d10/0x2ff0 [ 414.255579][T14991] do_syscall_64+0xd2/0x200 [ 414.255613][T14991] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 414.255652][T14991] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 414.255682][T14991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.255714][T14991] RIP: 0033:0x7f51616bebe9 [ 414.255736][T14991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.255834][T14991] RSP: 002b:00007f5160127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 414.255861][T14991] RAX: ffffffffffffffda RBX: 00007f51618e5fa0 RCX: 00007f51616bebe9 [ 414.255879][T14991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 414.255895][T14991] RBP: 00007f5160127090 R08: 0000000000000000 R09: 0000000000000000 [ 414.255912][T14991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.255993][T14991] R13: 00007f51618e6038 R14: 00007f51618e5fa0 R15: 00007ffe4078dc68 [ 414.256021][T14991] [ 414.476644][T14989] bridge0: port 3(team0) entered disabled state [ 414.485837][T14989] bridge0: port 3(team0) entered blocking state [ 414.492388][T14989] bridge0: port 3(team0) entered forwarding state [ 414.612782][T15015] 9pnet_fd: Insufficient options for proto=fd [ 414.734438][T15023] FAULT_INJECTION: forcing a failure. [ 414.734438][T15023] name failslab, interval 1, probability 0, space 0, times 0 [ 414.747244][T15023] CPU: 1 UID: 0 PID: 15023 Comm: syz.2.4119 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 414.747286][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.747303][T15023] Call Trace: [ 414.747312][T15023] [ 414.747323][T15023] __dump_stack+0x1d/0x30 [ 414.747362][T15023] dump_stack_lvl+0xe8/0x140 [ 414.747389][T15023] dump_stack+0x15/0x1b [ 414.747412][T15023] should_fail_ex+0x265/0x280 [ 414.747530][T15023] should_failslab+0x8c/0xb0 [ 414.747563][T15023] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 414.747628][T15023] ? sidtab_sid2str_get+0xa0/0x130 [ 414.747677][T15023] kmemdup_noprof+0x2b/0x70 [ 414.747717][T15023] sidtab_sid2str_get+0xa0/0x130 [ 414.747772][T15023] security_sid_to_context_core+0x1eb/0x2e0 [ 414.747870][T15023] security_sid_to_context+0x27/0x40 [ 414.747914][T15023] selinux_lsmprop_to_secctx+0x67/0xf0 [ 414.748026][T15023] security_lsmprop_to_secctx+0x43/0x80 [ 414.748060][T15023] audit_log_task_context+0x77/0x190 [ 414.748099][T15023] audit_log_task+0xf4/0x250 [ 414.748194][T15023] audit_seccomp+0x61/0x100 [ 414.748221][T15023] ? __seccomp_filter+0x68c/0x10d0 [ 414.748289][T15023] __seccomp_filter+0x69d/0x10d0 [ 414.748314][T15023] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 414.748343][T15023] ? vfs_write+0x75e/0x8e0 [ 414.748366][T15023] ? __rcu_read_unlock+0x4f/0x70 [ 414.748433][T15023] ? __fget_files+0x184/0x1c0 [ 414.748519][T15023] __secure_computing+0x82/0x150 [ 414.748543][T15023] syscall_trace_enter+0xcf/0x1e0 [ 414.748570][T15023] do_syscall_64+0xac/0x200 [ 414.748619][T15023] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 414.748645][T15023] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 414.748696][T15023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.748724][T15023] RIP: 0033:0x7fc2a8f0ebe9 [ 414.748743][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.748833][T15023] RSP: 002b:00007fc2a7977038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bb [ 414.748855][T15023] RAX: ffffffffffffffda RBX: 00007fc2a9135fa0 RCX: 00007fc2a8f0ebe9 [ 414.748883][T15023] RDX: 0000000000000000 RSI: ffffffff80000302 RDI: ffffffffffffffff [ 414.748972][T15023] RBP: 00007fc2a7977090 R08: 0000000000000000 R09: 0000000000000000 [ 414.748996][T15023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.749011][T15023] R13: 00007fc2a9136038 R14: 00007fc2a9135fa0 R15: 00007ffe8e8f9018 [ 414.749033][T15023] [ 414.920758][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 414.920778][ T29] audit: type=1400 audit(1754545507.208:7985): avc: denied { sys_module } for pid=15024 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 414.924675][T15023] audit: error in audit_log_task_context [ 415.042244][ T29] audit: type=1326 audit(1754545507.018:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 415.063577][ T29] audit: type=1326 audit(1754545507.318:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc2a8f0d5fc code=0x7ffc0000 [ 415.087364][ T29] audit: type=1326 audit(1754545507.318:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc2a8f0d69f code=0x7ffc0000 [ 415.110837][ T29] audit: type=1326 audit(1754545507.318:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc2a8f0d84a code=0x7ffc0000 [ 415.134923][ T29] audit: type=1326 audit(1754545507.318:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 415.158780][ T29] audit: type=1326 audit(1754545507.318:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.2.4119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 415.185060][ T29] audit: type=1400 audit(1754545507.418:7991): avc: denied { map_read map_write } for pid=15028 comm="syz.3.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 415.205093][ T29] audit: type=1326 audit(1754545507.418:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15028 comm="syz.3.4121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 415.244157][T15034] __nla_validate_parse: 9 callbacks suppressed [ 415.244249][T15034] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4122'. [ 415.259691][T15031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4120'. [ 415.277277][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4123'. [ 415.323708][T15041] FAULT_INJECTION: forcing a failure. [ 415.323708][T15041] name failslab, interval 1, probability 0, space 0, times 0 [ 415.336587][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.0.4124 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 415.336632][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.336650][T15041] Call Trace: [ 415.336657][T15041] [ 415.336668][T15041] __dump_stack+0x1d/0x30 [ 415.336703][T15041] dump_stack_lvl+0xe8/0x140 [ 415.336735][T15041] dump_stack+0x15/0x1b [ 415.336756][T15041] should_fail_ex+0x265/0x280 [ 415.336868][T15041] should_failslab+0x8c/0xb0 [ 415.336900][T15041] __kmalloc_cache_node_noprof+0x54/0x320 [ 415.336935][T15041] ? __get_vm_area_node+0x106/0x1d0 [ 415.337056][T15041] __get_vm_area_node+0x106/0x1d0 [ 415.337214][T15041] __vmalloc_node_range_noprof+0x273/0xe00 [ 415.337256][T15041] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.337352][T15041] ? avc_has_perm_noaudit+0x1b1/0x200 [ 415.337403][T15041] ? cred_has_capability+0x210/0x280 [ 415.337501][T15041] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.337537][T15041] __vmalloc_noprof+0x83/0xc0 [ 415.337625][T15041] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.337654][T15041] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.337680][T15041] ? bpf_prog_alloc+0x2a/0x150 [ 415.337715][T15041] bpf_prog_alloc+0x3c/0x150 [ 415.337814][T15041] bpf_prog_load+0x514/0x1070 [ 415.337874][T15041] ? security_bpf+0x2b/0x90 [ 415.337991][T15041] __sys_bpf+0x462/0x7b0 [ 415.338036][T15041] __x64_sys_bpf+0x41/0x50 [ 415.338068][T15041] x64_sys_call+0x2aea/0x2ff0 [ 415.338097][T15041] do_syscall_64+0xd2/0x200 [ 415.338203][T15041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 415.338246][T15041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 415.338275][T15041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.338399][T15041] RIP: 0033:0x7f5150dcebe9 [ 415.338419][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.338441][T15041] RSP: 002b:00007f514f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.338531][T15041] RAX: ffffffffffffffda RBX: 00007f5150ff5fa0 RCX: 00007f5150dcebe9 [ 415.338543][T15041] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 415.338556][T15041] RBP: 00007f514f837090 R08: 0000000000000000 R09: 0000000000000000 [ 415.338568][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.338630][T15041] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 415.338652][T15041] [ 415.338661][T15041] syz.0.4124: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 415.596270][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.0.4124 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 415.596305][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.596318][T15041] Call Trace: [ 415.596325][T15041] [ 415.596332][T15041] __dump_stack+0x1d/0x30 [ 415.596354][T15041] dump_stack_lvl+0xe8/0x140 [ 415.596378][T15041] dump_stack+0x15/0x1b [ 415.596479][T15041] warn_alloc+0x12b/0x1a0 [ 415.596522][T15041] __vmalloc_node_range_noprof+0x297/0xe00 [ 415.596559][T15041] ? avc_has_perm_noaudit+0x1b1/0x200 [ 415.596619][T15041] ? cred_has_capability+0x210/0x280 [ 415.596655][T15041] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.596688][T15041] __vmalloc_noprof+0x83/0xc0 [ 415.596769][T15041] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.596801][T15041] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 415.596836][T15041] ? bpf_prog_alloc+0x2a/0x150 [ 415.596944][T15041] bpf_prog_alloc+0x3c/0x150 [ 415.596971][T15041] bpf_prog_load+0x514/0x1070 [ 415.597077][T15041] ? security_bpf+0x2b/0x90 [ 415.597108][T15041] __sys_bpf+0x462/0x7b0 [ 415.597149][T15041] __x64_sys_bpf+0x41/0x50 [ 415.597178][T15041] x64_sys_call+0x2aea/0x2ff0 [ 415.597199][T15041] do_syscall_64+0xd2/0x200 [ 415.597227][T15041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 415.597254][T15041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 415.597275][T15041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.597314][T15041] RIP: 0033:0x7f5150dcebe9 [ 415.597333][T15041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.597357][T15041] RSP: 002b:00007f514f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.597379][T15041] RAX: ffffffffffffffda RBX: 00007f5150ff5fa0 RCX: 00007f5150dcebe9 [ 415.597407][T15041] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 415.597424][T15041] RBP: 00007f514f837090 R08: 0000000000000000 R09: 0000000000000000 [ 415.597441][T15041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.597453][T15041] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 415.597472][T15041] [ 415.597489][T15041] Mem-Info: [ 415.642490][T15045] FAULT_INJECTION: forcing a failure. [ 415.642490][T15045] name failslab, interval 1, probability 0, space 0, times 0 [ 415.643594][T15041] active_anon:52845 inactive_anon:23 isolated_anon:0 [ 415.643594][T15041] active_file:24222 inactive_file:2436 isolated_file:0 [ 415.643594][T15041] unevictable:16855 dirty:15 writeback:0 [ 415.643594][T15041] slab_reclaimable:3515 slab_unreclaimable:28106 [ 415.643594][T15041] mapped:29676 shmem:49299 pagetables:1072 [ 415.643594][T15041] sec_pagetables:0 bounce:0 [ 415.643594][T15041] kernel_misc_reclaimable:0 [ 415.643594][T15041] free:1765800 free_pcp:21988 free_cma:0 [ 415.649493][T15045] CPU: 0 UID: 0 PID: 15045 Comm: syz.3.4125 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 415.649535][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.649574][T15045] Call Trace: [ 415.649583][T15045] [ 415.649592][T15045] __dump_stack+0x1d/0x30 [ 415.649667][T15045] dump_stack_lvl+0xe8/0x140 [ 415.649695][T15045] dump_stack+0x15/0x1b [ 415.649720][T15045] should_fail_ex+0x265/0x280 [ 415.649766][T15045] should_failslab+0x8c/0xb0 [ 415.649876][T15045] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 415.649922][T15045] ? sidtab_sid2str_get+0xa0/0x130 [ 415.650011][T15045] kmemdup_noprof+0x2b/0x70 [ 415.650051][T15045] sidtab_sid2str_get+0xa0/0x130 [ 415.650152][T15045] security_sid_to_context_core+0x1eb/0x2e0 [ 415.650203][T15045] security_sid_to_context+0x27/0x40 [ 415.650249][T15045] selinux_lsmprop_to_secctx+0x67/0xf0 [ 415.650387][T15045] security_lsmprop_to_secctx+0x43/0x80 [ 415.650425][T15045] audit_log_task_context+0x77/0x190 [ 415.650475][T15045] audit_log_task+0xf4/0x250 [ 415.650633][T15045] audit_seccomp+0x61/0x100 [ 415.650663][T15045] ? __seccomp_filter+0x68c/0x10d0 [ 415.650777][T15045] __seccomp_filter+0x69d/0x10d0 [ 415.650842][T15045] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 415.650881][T15045] ? vfs_write+0x75e/0x8e0 [ 415.650913][T15045] ? __rcu_read_unlock+0x4f/0x70 [ 415.650997][T15045] ? __fget_files+0x184/0x1c0 [ 415.651038][T15045] __secure_computing+0x82/0x150 [ 415.651067][T15045] syscall_trace_enter+0xcf/0x1e0 [ 415.651105][T15045] do_syscall_64+0xac/0x200 [ 415.651140][T15045] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 415.651174][T15045] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 415.651206][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.651317][T15045] RIP: 0033:0x7fe5724febe9 [ 415.651338][T15045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.651364][T15045] RSP: 002b:00007fe570f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 415.651469][T15045] RAX: ffffffffffffffda RBX: 00007fe572725fa0 RCX: 00007fe5724febe9 [ 415.651487][T15045] RDX: 0000200000000380 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 415.651505][T15045] RBP: 00007fe570f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 415.651523][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.651540][T15045] R13: 00007fe572726038 R14: 00007fe572725fa0 R15: 00007ffebde39c68 [ 415.651612][T15045] [ 415.673647][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'. [ 415.676042][T15041] Node 0 active_anon:211380kB inactive_anon:92kB active_file:96888kB inactive_file:9744kB unevictable:67420kB isolated(anon):0kB isolated(file):0kB mapped:118704kB dirty:60kB writeback:0kB shmem:197196kB kernel_stack:3328kB pagetables:4404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 415.681649][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4126'. [ 415.686443][T15041] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.791000][T15050] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 415.792392][T15041] lowmem_reserve[]: [ 415.800470][T15050] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4127'. [ 415.808399][T15041] 0 2883 7862 7862 [ 415.808456][T15041] Node 0 DMA32 free:2949228kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 415.840326][T15050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4127'. [ 415.873258][T15041] lowmem_reserve[]: 0 0 4978 4978 [ 415.873333][T15041] Node 0 Normal free:4127392kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:211660kB inactive_anon:92kB active_file:96888kB inactive_file:9748kB unevictable:67420kB writepending:92kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:78864kB local_pcp:30512kB free_cma:0kB [ 416.296288][T15041] lowmem_reserve[]: 0 0 0 0 [ 416.300998][T15041] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.313771][T15041] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949228kB [ 416.329892][T15041] Node 0 Normal: 5241*4kB (UME) 3198*8kB (UME) 1185*16kB (UME) 491*32kB (UME) 212*64kB (UME) 233*128kB (UME) 256*256kB (UME) 104*512kB (UME) 47*1024kB (UM) 9*2048kB (UM) 932*4096kB (UM) = 4127428kB [ 416.349560][T15041] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 416.358893][T15041] 92816 total pagecache pages [ 416.363596][T15041] 28 pages in swap cache [ 416.367859][T15041] Free swap = 124884kB [ 416.372042][T15041] Total swap = 124996kB [ 416.376198][T15041] 2097051 pages RAM [ 416.380030][T15041] 0 pages HighMem/MovableOnly [ 416.384726][T15041] 80436 pages reserved [ 416.585395][T15068] netlink: 'syz.4.4133': attribute type 10 has an invalid length. [ 416.608201][ T36] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.662195][T15024] chnl_net:caif_netlink_parms(): no params data found [ 416.717637][ T36] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.731747][T15081] 9pnet_fd: Insufficient options for proto=fd [ 416.835713][ T36] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.857361][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4138'. [ 416.912889][T15024] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.920216][T15024] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.931142][T15024] bridge_slave_0: entered allmulticast mode [ 416.938276][T15024] bridge_slave_0: entered promiscuous mode [ 416.955188][ T36] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.987533][T15024] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.994864][T15024] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.056113][T15024] bridge_slave_1: entered allmulticast mode [ 417.081637][T15024] bridge_slave_1: entered promiscuous mode [ 417.177306][T15097] netlink: 'syz.4.4142': attribute type 1 has an invalid length. [ 417.185251][T15097] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4142'. [ 417.210888][T15024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.222592][ T36] bridge0: port 3(team0) entered disabled state [ 417.238010][ T36] bridge_slave_1: left allmulticast mode [ 417.244030][ T36] bridge_slave_1: left promiscuous mode [ 417.249817][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.294649][ T36] bridge_slave_0: left allmulticast mode [ 417.300400][ T36] bridge_slave_0: left promiscuous mode [ 417.306051][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.332873][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'. [ 417.604308][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.625428][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.644226][ T36] bond0 (unregistering): Released all slaves [ 417.656488][T15024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.686293][T15115] netlink: 'syz.0.4146': attribute type 10 has an invalid length. [ 417.742287][T15115] team0: Port device dummy0 added [ 417.795556][T15024] team0: Port device team_slave_0 added [ 417.817068][ T36] tipc: Disabling bearer [ 417.822398][ T36] tipc: Disabling bearer [ 417.827780][ T36] tipc: Left network mode [ 417.844035][T15024] team0: Port device team_slave_1 added [ 417.899476][ T36] hsr_slave_0: left promiscuous mode [ 417.930630][ T36] hsr_slave_1: left promiscuous mode [ 417.950816][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.958448][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.001124][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.008645][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.032002][ T36] veth1_macvtap: left promiscuous mode [ 418.047872][ T36] veth0_macvtap: left promiscuous mode [ 418.224553][ T36] team_slave_1 (unregistering): left promiscuous mode [ 418.231494][ T36] team_slave_1 (unregistering): left allmulticast mode [ 418.246309][ T36] team0 (unregistering): Port device team_slave_1 removed [ 418.262040][ T36] team_slave_0 (unregistering): left promiscuous mode [ 418.268903][ T36] team_slave_0 (unregistering): left allmulticast mode [ 418.276221][ T36] team0 (unregistering): Port device team_slave_0 removed [ 418.331221][ T36] dummy0 (unregistering): left promiscuous mode [ 418.343548][ T36] dummy0 (unregistering): left allmulticast mode [ 418.352523][ T36] team0 (unregistering): Port device dummy0 removed [ 418.378740][T15024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.385739][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.411778][T15024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.438621][T15024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.446277][T15024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.472809][T15024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.525876][T15147] bpf: Bad value for 'gid' [ 418.601870][T15024] hsr_slave_0: entered promiscuous mode [ 418.607941][T15024] hsr_slave_1: entered promiscuous mode [ 418.973010][T15024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.994178][T15024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 419.014159][T15024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.034148][T15024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.214379][T15024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.240269][T15024] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.261524][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.268648][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.310471][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.318447][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.443501][T15024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.666501][T15212] FAULT_INJECTION: forcing a failure. [ 419.666501][T15212] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.679901][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.3.4172 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 419.679932][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.679945][T15212] Call Trace: [ 419.679955][T15212] [ 419.679963][T15212] __dump_stack+0x1d/0x30 [ 419.679988][T15212] dump_stack_lvl+0xe8/0x140 [ 419.680021][T15212] dump_stack+0x15/0x1b [ 419.680043][T15212] should_fail_ex+0x265/0x280 [ 419.680115][T15212] should_fail+0xb/0x20 [ 419.680145][T15212] should_fail_usercopy+0x1a/0x20 [ 419.680187][T15212] _copy_to_user+0x20/0xa0 [ 419.680213][T15212] simple_read_from_buffer+0xb5/0x130 [ 419.680247][T15212] proc_fail_nth_read+0x10e/0x150 [ 419.680297][T15212] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.680332][T15212] vfs_read+0x1a0/0x6f0 [ 419.680359][T15212] ? __rcu_read_unlock+0x4f/0x70 [ 419.680433][T15212] ? __fget_files+0x184/0x1c0 [ 419.680504][T15212] ksys_read+0xda/0x1a0 [ 419.680530][T15212] __x64_sys_read+0x40/0x50 [ 419.680554][T15212] x64_sys_call+0x27bc/0x2ff0 [ 419.680575][T15212] do_syscall_64+0xd2/0x200 [ 419.680598][T15212] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.680654][T15212] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 419.680675][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.680731][T15212] RIP: 0033:0x7fe5724fd5fc [ 419.680752][T15212] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 419.680775][T15212] RSP: 002b:00007fe570f5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.680806][T15212] RAX: ffffffffffffffda RBX: 00007fe572725fa0 RCX: 00007fe5724fd5fc [ 419.680903][T15212] RDX: 000000000000000f RSI: 00007fe570f5f0a0 RDI: 0000000000000005 [ 419.680920][T15212] RBP: 00007fe570f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 419.680937][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.680953][T15212] R13: 00007fe572726038 R14: 00007fe572725fa0 R15: 00007ffebde39c68 [ 419.680977][T15212] [ 419.725829][T15024] veth0_vlan: entered promiscuous mode [ 419.909961][T15024] veth1_vlan: entered promiscuous mode [ 419.925957][T15024] veth0_macvtap: entered promiscuous mode [ 419.949266][T15024] veth1_macvtap: entered promiscuous mode [ 419.958241][T15219] bpf: Bad value for 'gid' [ 419.965484][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 419.965502][ T29] audit: type=1326 audit(1754545512.248:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.3.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 419.995657][ T29] audit: type=1326 audit(1754545512.248:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.3.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 420.023817][T15024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.032705][ T29] audit: type=1326 audit(1754545512.308:8188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.3.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 420.056512][ T29] audit: type=1326 audit(1754545512.308:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.3.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 420.080022][ T29] audit: type=1326 audit(1754545512.308:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15224 comm="syz.3.4176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 420.105080][T15024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.116550][ T408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.128146][ T408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.153465][ T408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.158853][ T29] audit: type=1400 audit(1754545512.438:8191): avc: denied { mounton } for pid=15024 comm="syz-executor" path="/root/syzkaller.oL61Q9/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 420.183845][ T408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.186669][ T29] audit: type=1400 audit(1754545512.438:8192): avc: denied { mount } for pid=15024 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 420.214860][T15229] blktrace: Concurrent blktraces are not allowed on loop7 [ 420.217643][ T29] audit: type=1400 audit(1754545512.438:8193): avc: denied { mount } for pid=15024 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 420.246953][ T29] audit: type=1400 audit(1754545512.438:8194): avc: denied { mounton } for pid=15024 comm="syz-executor" path="/root/syzkaller.oL61Q9/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 420.274092][ T29] audit: type=1400 audit(1754545512.438:8195): avc: denied { mounton } for pid=15024 comm="syz-executor" path="/root/syzkaller.oL61Q9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=51264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 420.381477][T15234] loop5: detected capacity change from 0 to 128 [ 420.390642][T15234] vfat: Unknown parameter '' [ 420.420205][T15244] __nla_validate_parse: 6 callbacks suppressed [ 420.420275][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 420.435597][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4180'. [ 420.517436][T15247] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4181'. [ 420.593830][T15252] bpf: Bad value for 'gid' [ 421.411957][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4187'. [ 421.424192][T15264] netlink: 'syz.4.4188': attribute type 1 has an invalid length. [ 421.432072][T15264] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4188'. [ 421.545878][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4188'. [ 421.688258][T15280] bpf: Bad value for 'mode' [ 421.776334][T15282] bpf: Bad value for 'gid' [ 421.851609][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 421.860785][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4193'. [ 422.039368][T15288] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4195'. [ 422.197500][T15297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4196'. [ 422.454878][T15312] bpf: Bad value for 'gid' [ 422.513326][T15310] netlink: 'syz.2.4203': attribute type 10 has an invalid length. [ 422.610917][T15316] bpf: Bad value for 'gid' [ 422.672753][T15318] loop5: detected capacity change from 0 to 512 [ 422.748037][T15318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.763163][T15318] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.776399][T15322] netlink: 'syz.2.4208': attribute type 10 has an invalid length. [ 423.019149][T15350] bpf: Bad value for 'gid' [ 423.671627][T15388] bpf: Bad value for 'gid' [ 423.916760][T15396] netlink: 'syz.2.4236': attribute type 1 has an invalid length. [ 424.922908][T15423] loop5: detected capacity change from 0 to 512 [ 424.974724][T15423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.053598][T15423] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.342278][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 425.342295][ T29] audit: type=1326 audit(1754545517.628:8325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 425.399088][ T29] audit: type=1326 audit(1754545517.658:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 425.422749][ T29] audit: type=1326 audit(1754545517.658:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 425.446340][ T29] audit: type=1326 audit(1754545517.658:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 425.451776][T15434] __nla_validate_parse: 15 callbacks suppressed [ 425.451798][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 425.469938][ T29] audit: type=1326 audit(1754545517.658:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15429 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 425.476324][T15434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4250'. [ 425.485526][ T29] audit: type=1400 audit(1754545517.708:8330): avc: denied { create } for pid=15431 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.537571][ T29] audit: type=1400 audit(1754545517.708:8331): avc: denied { bind } for pid=15431 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.557083][ T29] audit: type=1400 audit(1754545517.708:8332): avc: denied { setopt } for pid=15431 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.656598][ T29] audit: type=1400 audit(1754545517.798:8333): avc: denied { write } for pid=15431 comm="syz.4.4248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 425.689515][T15438] vhci_hcd: invalid port number 96 [ 425.694827][T15438] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 425.836465][ T29] audit: type=1400 audit(1754545518.118:8334): avc: denied { setopt } for pid=15444 comm="syz.3.4253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 425.948983][T15445] Falling back ldisc for ttyS3. [ 426.007618][T15447] bpf: Bad value for 'gid' [ 426.049006][T15449] can0: slcan on ttyS3. [ 426.178932][T15449] can0 (unregistered): slcan off ttyS3. [ 427.596367][T15476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4261'. [ 427.696105][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 427.705255][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4263'. [ 427.733596][T15480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4264'. [ 427.809848][T15484] netlink: 'syz.3.4266': attribute type 10 has an invalid length. [ 427.849808][T15487] FAULT_INJECTION: forcing a failure. [ 427.849808][T15487] name failslab, interval 1, probability 0, space 0, times 0 [ 427.862579][T15487] CPU: 1 UID: 0 PID: 15487 Comm: syz.0.4267 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 427.862612][T15487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.862625][T15487] Call Trace: [ 427.862633][T15487] [ 427.862685][T15487] __dump_stack+0x1d/0x30 [ 427.862712][T15487] dump_stack_lvl+0xe8/0x140 [ 427.862738][T15487] dump_stack+0x15/0x1b [ 427.862801][T15487] should_fail_ex+0x265/0x280 [ 427.862899][T15487] should_failslab+0x8c/0xb0 [ 427.862932][T15487] __kmalloc_noprof+0xa5/0x3e0 [ 427.862963][T15487] ? security_sem_alloc+0x45/0x100 [ 427.862994][T15487] security_sem_alloc+0x45/0x100 [ 427.863089][T15487] newary+0x12b/0x620 [ 427.863232][T15487] ipcget+0x33a/0x4f0 [ 427.863274][T15487] __x64_sys_semget+0xfb/0x130 [ 427.863351][T15487] x64_sys_call+0x6bf/0x2ff0 [ 427.863374][T15487] do_syscall_64+0xd2/0x200 [ 427.863398][T15487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 427.863439][T15487] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 427.863469][T15487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.863650][T15487] RIP: 0033:0x7f5150dcebe9 [ 427.863669][T15487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.863766][T15487] RSP: 002b:00007f514f837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 427.863815][T15487] RAX: ffffffffffffffda RBX: 00007f5150ff5fa0 RCX: 00007f5150dcebe9 [ 427.863832][T15487] RDX: 000000000000001c RSI: 0000000000000003 RDI: 0000000000000000 [ 427.863848][T15487] RBP: 00007f514f837090 R08: 0000000000000000 R09: 0000000000000000 [ 427.863864][T15487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.863880][T15487] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 427.863903][T15487] [ 428.076907][T15491] netlink: 'syz.3.4269': attribute type 1 has an invalid length. [ 428.084741][T15491] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4269'. [ 428.118444][T15493] netlink: 'syz.0.4270': attribute type 83 has an invalid length. [ 428.206376][T15491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4269'. [ 428.516419][T15514] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4277'. [ 428.682349][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4278'. [ 428.942443][T15594] FAULT_INJECTION: forcing a failure. [ 428.942443][T15594] name failslab, interval 1, probability 0, space 0, times 0 [ 428.955149][T15594] CPU: 0 UID: 0 PID: 15594 Comm: syz.4.4285 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 428.955237][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.955254][T15594] Call Trace: [ 428.955262][T15594] [ 428.955272][T15594] __dump_stack+0x1d/0x30 [ 428.955295][T15594] dump_stack_lvl+0xe8/0x140 [ 428.955317][T15594] dump_stack+0x15/0x1b [ 428.955392][T15594] should_fail_ex+0x265/0x280 [ 428.955434][T15594] ? tipc_group_create_member+0x42/0x270 [ 428.955564][T15594] should_failslab+0x8c/0xb0 [ 428.955589][T15594] __kmalloc_cache_noprof+0x4c/0x320 [ 428.955667][T15594] tipc_group_create_member+0x42/0x270 [ 428.955714][T15594] tipc_group_add_member+0x2e/0x40 [ 428.955754][T15594] tipc_nametbl_build_group+0x1b6/0x230 [ 428.955787][T15594] tipc_sk_join+0x240/0x2e0 [ 428.955830][T15594] tipc_setsockopt+0x598/0x620 [ 428.955863][T15594] ? __pfx_tipc_setsockopt+0x10/0x10 [ 428.955899][T15594] __sys_setsockopt+0x181/0x200 [ 428.955956][T15594] __x64_sys_setsockopt+0x64/0x80 [ 428.955998][T15594] x64_sys_call+0x20ec/0x2ff0 [ 428.956021][T15594] do_syscall_64+0xd2/0x200 [ 428.956064][T15594] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 428.956229][T15594] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 428.956262][T15594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.956290][T15594] RIP: 0033:0x7f51616bebe9 [ 428.956306][T15594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.956327][T15594] RSP: 002b:00007f5160127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 428.956351][T15594] RAX: ffffffffffffffda RBX: 00007f51618e5fa0 RCX: 00007f51616bebe9 [ 428.956374][T15594] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 428.956386][T15594] RBP: 00007f5160127090 R08: 0000000000000010 R09: 0000000000000000 [ 428.956408][T15594] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 428.956424][T15594] R13: 00007f51618e6038 R14: 00007f51618e5fa0 R15: 00007ffe4078dc68 [ 428.956450][T15594] [ 429.288809][T15592] Falling back ldisc for ttyS3. [ 429.308173][T15602] loop5: detected capacity change from 0 to 128 [ 429.339140][T15602] vfat: Unknown parameter '$' [ 429.756557][T15635] 9pnet_fd: Insufficient options for proto=fd [ 429.821236][T15641] 9pnet_fd: Insufficient options for proto=fd [ 429.976902][T15656] bpf: Bad value for 'gid' [ 430.525741][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 430.525762][ T29] audit: type=1326 audit(1754545522.808:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 430.569048][ T29] audit: type=1326 audit(1754545522.808:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 430.593447][ T29] audit: type=1326 audit(1754545522.838:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 430.617172][ T29] audit: type=1326 audit(1754545522.838:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 430.631502][T15678] __nla_validate_parse: 13 callbacks suppressed [ 430.631528][T15678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4317'. [ 430.641035][ T29] audit: type=1326 audit(1754545522.838:8612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15675 comm="syz.2.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 430.715920][T15684] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4320'. [ 430.782734][T15690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 430.788995][T15686] netlink: 'syz.0.4321': attribute type 10 has an invalid length. [ 430.899630][T15697] netlink: 'syz.0.4326': attribute type 1 has an invalid length. [ 430.907418][T15697] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4326'. [ 430.977171][T15697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4326'. [ 431.035527][ T29] audit: type=1326 audit(1754545523.318:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15704 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 431.059322][ T29] audit: type=1326 audit(1754545523.318:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15704 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 431.082984][ T29] audit: type=1326 audit(1754545523.318:8615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15704 comm="syz.2.4328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 431.238202][T15718] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4334'. [ 431.258056][ T29] audit: type=1400 audit(1754545523.518:8616): avc: denied { watch } for pid=15712 comm="syz.5.4332" path="/26/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.280615][ T29] audit: type=1400 audit(1754545523.518:8617): avc: denied { watch_reads } for pid=15712 comm="syz.5.4332" path="/26/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 431.327986][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4335'. [ 431.385241][T15723] netlink: 'syz.4.4337': attribute type 1 has an invalid length. [ 431.393533][T15723] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4337'. [ 431.432276][T15724] netlink: 'syz.0.4336': attribute type 10 has an invalid length. [ 431.474923][T15726] loop5: detected capacity change from 0 to 512 [ 431.525760][T15726] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.541962][T15726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.562523][T15723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4337'. [ 431.680407][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4342'. [ 432.222388][T15763] bpf: Bad value for 'gid' [ 432.322723][T15769] netlink: 'syz.0.4352': attribute type 1 has an invalid length. [ 432.371016][T15767] netlink: 'syz.5.4350': attribute type 10 has an invalid length. [ 432.383601][T15767] team0: Port device dummy0 added [ 432.438978][T15777] loop5: detected capacity change from 0 to 128 [ 432.449204][T15777] vfat: Unknown parameter '' [ 434.163881][T15803] netlink: 'syz.2.4360': attribute type 83 has an invalid length. [ 434.178640][T15801] bpf: Bad value for 'gid' [ 434.211242][T15806] 9pnet_fd: Insufficient options for proto=fd [ 434.298635][T15809] lo speed is unknown, defaulting to 1000 [ 434.306623][T15809] lo speed is unknown, defaulting to 1000 [ 434.312857][T15809] lo speed is unknown, defaulting to 1000 [ 434.320436][T15809] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 434.339917][T15809] lo speed is unknown, defaulting to 1000 [ 434.346175][T15809] lo speed is unknown, defaulting to 1000 [ 434.369885][T15809] lo speed is unknown, defaulting to 1000 [ 434.394563][T15809] lo speed is unknown, defaulting to 1000 [ 434.416670][T15809] lo speed is unknown, defaulting to 1000 [ 434.440107][T15812] netlink: 'syz.5.4364': attribute type 10 has an invalid length. [ 434.640702][T15822] loop5: detected capacity change from 0 to 512 [ 434.659436][T15822] EXT4-fs: Ignoring removed oldalloc option [ 434.675167][T15822] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4368: Parent and EA inode have the same ino 15 [ 434.698089][T15822] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 434.726438][T15822] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.4368: Parent and EA inode have the same ino 15 [ 434.775740][T15822] EXT4-fs (loop5): 1 orphan inode deleted [ 434.785793][T15822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.938069][T15826] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.4368: deleted inode referenced: 15 [ 435.109905][T15835] FAULT_INJECTION: forcing a failure. [ 435.109905][T15835] name failslab, interval 1, probability 0, space 0, times 0 [ 435.122693][T15835] CPU: 1 UID: 0 PID: 15835 Comm: syz.0.4373 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 435.122741][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 435.122874][T15835] Call Trace: [ 435.122881][T15835] [ 435.122888][T15835] __dump_stack+0x1d/0x30 [ 435.122917][T15835] dump_stack_lvl+0xe8/0x140 [ 435.122943][T15835] dump_stack+0x15/0x1b [ 435.123042][T15835] should_fail_ex+0x265/0x280 [ 435.123102][T15835] should_failslab+0x8c/0xb0 [ 435.123131][T15835] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 435.123172][T15835] ? __d_alloc+0x3d/0x340 [ 435.123206][T15835] __d_alloc+0x3d/0x340 [ 435.123240][T15835] ? mpol_shared_policy_init+0xbd/0x4c0 [ 435.123341][T15835] d_alloc_pseudo+0x1e/0x80 [ 435.123426][T15835] alloc_file_pseudo+0x71/0x160 [ 435.123463][T15835] __shmem_file_setup+0x1de/0x210 [ 435.123500][T15835] shmem_file_setup+0x3b/0x50 [ 435.123608][T15835] __se_sys_memfd_create+0x2c3/0x590 [ 435.123632][T15835] __x64_sys_memfd_create+0x31/0x40 [ 435.123653][T15835] x64_sys_call+0x2abe/0x2ff0 [ 435.123691][T15835] do_syscall_64+0xd2/0x200 [ 435.123717][T15835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.123763][T15835] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 435.123786][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.123808][T15835] RIP: 0033:0x7f5150dcebe9 [ 435.123824][T15835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.123843][T15835] RSP: 002b:00007f514f836e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 435.123890][T15835] RAX: ffffffffffffffda RBX: 000000000000081c RCX: 00007f5150dcebe9 [ 435.123904][T15835] RDX: 00007f514f836ef0 RSI: 0000000000000000 RDI: 00007f5150e527e8 [ 435.123925][T15835] RBP: 0000200000001540 R08: 00007f514f836bb7 R09: 00007f514f836e40 [ 435.123938][T15835] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 435.123950][T15835] R13: 00007f514f836ef0 R14: 00007f514f836eb0 R15: 0000200000000380 [ 435.123970][T15835] [ 435.400776][T15839] bpf: Bad value for 'gid' [ 435.494501][T15024] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.584482][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 435.584500][ T29] audit: type=1326 audit(1754545527.868:8842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.635156][T15846] netlink: 'syz.2.4377': attribute type 10 has an invalid length. [ 435.650015][T15849] __nla_validate_parse: 9 callbacks suppressed [ 435.650034][T15849] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4379'. [ 435.688191][T15857] 9pnet_fd: Insufficient options for proto=fd [ 435.690005][ T29] audit: type=1326 audit(1754545527.898:8843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.717848][ T29] audit: type=1326 audit(1754545527.898:8844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.741400][ T29] audit: type=1326 audit(1754545527.898:8845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.765019][ T29] audit: type=1326 audit(1754545527.898:8846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.788768][ T29] audit: type=1326 audit(1754545527.898:8847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.812506][ T29] audit: type=1326 audit(1754545527.898:8848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.836125][ T29] audit: type=1326 audit(1754545527.908:8849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.859721][ T29] audit: type=1326 audit(1754545527.908:8850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.883680][ T29] audit: type=1326 audit(1754545527.908:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15848 comm="syz.5.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f814511ebe9 code=0x7ffc0000 [ 435.943567][T15862] netlink: 'syz.3.4384': attribute type 1 has an invalid length. [ 435.951437][T15862] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.4384'. [ 435.963290][T15862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4384'. [ 436.085934][T15873] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4388'. [ 436.410271][T15885] netlink: 'syz.5.4392': attribute type 10 has an invalid length. [ 436.423065][T15887] netlink: 'syz.2.4393': attribute type 10 has an invalid length. [ 436.498426][T15891] loop5: detected capacity change from 0 to 128 [ 436.507170][T15891] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 436.534913][T15891] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 436.576037][T15024] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 436.626816][T15900] bpf: Bad value for 'gid' [ 436.635085][T15902] netlink: 'syz.5.4399': attribute type 1 has an invalid length. [ 436.643026][T15902] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.4399'. [ 436.669786][T15898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4397'. [ 436.685828][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4399'. [ 436.889567][T15918] netlink: 'syz.2.4405': attribute type 10 has an invalid length. [ 437.007580][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4408'. [ 437.017678][T15920] netlink: 'syz.5.4406': attribute type 10 has an invalid length. [ 437.065362][T15931] netlink: 'syz.2.4410': attribute type 1 has an invalid length. [ 437.073246][T15931] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.4410'. [ 437.173040][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4412'. [ 437.684618][T15979] bpf: Bad value for 'gid' [ 439.074401][T16033] bpf: Bad value for 'gid' [ 439.256963][T16041] bpf: Bad value for 'gid' [ 439.535981][T16058] validate_nla: 1 callbacks suppressed [ 439.536002][T16058] netlink: 'syz.4.4450': attribute type 10 has an invalid length. [ 439.674701][T16070] netlink: 'syz.0.4455': attribute type 1 has an invalid length. [ 440.272094][T16089] bpf: Bad value for 'gid' [ 440.383793][T16099] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 440.509263][T16099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.850134][T16118] lo speed is unknown, defaulting to 1000 [ 441.393536][T16121] netlink: 'syz.0.4472': attribute type 10 has an invalid length. [ 441.684120][T16128] __nla_validate_parse: 16 callbacks suppressed [ 441.684143][T16128] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4475'. [ 441.753312][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4476'. [ 441.772631][T16133] bpf: Bad value for 'gid' [ 441.885442][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 441.885458][ T29] audit: type=1326 audit(1754545534.168:9260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 441.952230][T16141] bpf: Bad value for 'gid' [ 442.001985][ T29] audit: type=1326 audit(1754545534.208:9261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.025883][ T29] audit: type=1326 audit(1754545534.208:9262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.049694][ T29] audit: type=1326 audit(1754545534.208:9263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.074547][ T29] audit: type=1326 audit(1754545534.208:9264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.098327][ T29] audit: type=1326 audit(1754545534.208:9265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.122256][ T29] audit: type=1326 audit(1754545534.208:9266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.145860][ T29] audit: type=1326 audit(1754545534.208:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.169655][ T29] audit: type=1326 audit(1754545534.208:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.193370][ T29] audit: type=1326 audit(1754545534.208:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16138 comm="syz.2.4479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a8f0ebe9 code=0x7ffc0000 [ 442.455107][T16149] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.537401][T16149] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.572812][T16155] netlink: 'syz.4.4483': attribute type 10 has an invalid length. [ 442.735768][T16149] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.756841][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4490'. [ 442.786197][T16168] netlink: 'syz.4.4489': attribute type 10 has an invalid length. [ 442.864945][T16175] bpf: Bad value for 'gid' [ 442.889546][T16149] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.996237][T16184] netlink: 'syz.2.4497': attribute type 10 has an invalid length. [ 443.004275][T16184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4497'. [ 443.038148][T16188] netlink: 'syz.0.4499': attribute type 1 has an invalid length. [ 443.046347][T16188] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.4499'. [ 443.063667][T15562] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.091968][T16184] team0: entered promiscuous mode [ 443.097059][T16184] team_slave_1: entered promiscuous mode [ 443.103198][T16184] dummy0: entered promiscuous mode [ 443.108528][T16184] team0: entered allmulticast mode [ 443.113757][T16184] team_slave_1: entered allmulticast mode [ 443.119912][T16184] dummy0: entered allmulticast mode [ 443.126208][T16184] bridge0: port 3(team0) entered blocking state [ 443.132548][T16184] bridge0: port 3(team0) entered disabled state [ 443.140846][T16184] bridge0: port 3(team0) entered blocking state [ 443.147229][T16184] bridge0: port 3(team0) entered forwarding state [ 443.226222][T16193] lo speed is unknown, defaulting to 1000 [ 443.304166][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4499'. [ 443.321403][T15562] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.356501][T15562] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.458482][T15562] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.874506][T16204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4503'. [ 444.108814][T16210] netlink: 'syz.0.4504': attribute type 10 has an invalid length. [ 444.134262][T16212] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 444.142461][T16212] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4506'. [ 444.225611][T16212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4506'. [ 444.488005][T16232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4513'. [ 444.512426][T16232] team0: entered promiscuous mode [ 444.531647][T16232] dummy0: entered promiscuous mode [ 444.536973][T16232] team0: entered allmulticast mode [ 444.556665][T16232] dummy0: entered allmulticast mode [ 444.576568][T16232] bridge0: port 1(team0) entered blocking state [ 444.583015][T16232] bridge0: port 1(team0) entered disabled state [ 444.782520][T16247] validate_nla: 3 callbacks suppressed [ 444.782539][T16247] netlink: 'syz.4.4527': attribute type 10 has an invalid length. [ 444.821375][T16250] netlink: 'syz.5.4518': attribute type 10 has an invalid length. [ 444.918102][T16256] FAULT_INJECTION: forcing a failure. [ 444.918102][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 444.931381][T16256] CPU: 1 UID: 0 PID: 16256 Comm: syz.0.4520 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 444.931411][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.931423][T16256] Call Trace: [ 444.931431][T16256] [ 444.931439][T16256] __dump_stack+0x1d/0x30 [ 444.931465][T16256] dump_stack_lvl+0xe8/0x140 [ 444.931555][T16256] dump_stack+0x15/0x1b [ 444.931572][T16256] should_fail_ex+0x265/0x280 [ 444.931610][T16256] should_fail+0xb/0x20 [ 444.931714][T16256] should_fail_usercopy+0x1a/0x20 [ 444.931780][T16256] _copy_from_user+0x1c/0xb0 [ 444.931814][T16256] kstrtouint_from_user+0x69/0xf0 [ 444.931841][T16256] ? 0xffffffff81000000 [ 444.931858][T16256] ? selinux_file_permission+0x1e4/0x320 [ 444.931974][T16256] proc_fail_nth_write+0x50/0x160 [ 444.932009][T16256] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 444.932046][T16256] vfs_write+0x269/0x8e0 [ 444.932073][T16256] ? vfs_read+0x47f/0x6f0 [ 444.932109][T16256] ? __rcu_read_unlock+0x4f/0x70 [ 444.932138][T16256] ? __fget_files+0x184/0x1c0 [ 444.932167][T16256] ? do_mkdirat+0x3ac/0x3f0 [ 444.932190][T16256] ksys_write+0xda/0x1a0 [ 444.932228][T16256] __x64_sys_write+0x40/0x50 [ 444.932263][T16256] x64_sys_call+0x27fe/0x2ff0 [ 444.932292][T16256] do_syscall_64+0xd2/0x200 [ 444.932319][T16256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 444.932454][T16256] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 444.932477][T16256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.932506][T16256] RIP: 0033:0x7f5150dcd69f [ 444.932525][T16256] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 444.932550][T16256] RSP: 002b:00007f514f837030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 444.932643][T16256] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5150dcd69f [ 444.932660][T16256] RDX: 0000000000000001 RSI: 00007f514f8370a0 RDI: 0000000000000005 [ 444.932677][T16256] RBP: 00007f514f837090 R08: 0000000000000000 R09: 0000000000000000 [ 444.932694][T16256] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 444.932711][T16256] R13: 00007f5150ff6038 R14: 00007f5150ff5fa0 R15: 00007ffe3ed48d58 [ 444.932793][T16256] [ 445.217398][T16263] bpf: Bad value for 'gid' [ 445.355272][T16271] netlink: 'syz.3.4529': attribute type 1 has an invalid length. [ 445.408151][T16265] lo speed is unknown, defaulting to 1000 [ 445.495881][T16281] netlink: 'syz.0.4532': attribute type 10 has an invalid length. [ 445.520853][T16286] netlink: 'syz.3.4533': attribute type 10 has an invalid length. [ 445.529443][T16286] team0: entered promiscuous mode [ 445.534839][T16286] team_slave_0: entered promiscuous mode [ 445.540926][T16286] team_slave_1: entered promiscuous mode [ 445.548084][T16286] dummy0: entered promiscuous mode [ 445.553575][T16286] team0: entered allmulticast mode [ 445.558783][T16286] team_slave_0: entered allmulticast mode [ 445.564782][T16286] team_slave_1: entered allmulticast mode [ 445.570939][T16286] dummy0: entered allmulticast mode [ 445.577224][T16286] bridge0: port 3(team0) entered blocking state [ 445.583616][T16286] bridge0: port 3(team0) entered disabled state [ 445.591464][T16286] bridge0: port 3(team0) entered blocking state [ 445.597915][T16286] bridge0: port 3(team0) entered forwarding state [ 445.959566][T16306] lo speed is unknown, defaulting to 1000 [ 447.616643][T16319] netlink: 'syz.4.4545': attribute type 10 has an invalid length. [ 447.827786][T16335] __nla_validate_parse: 9 callbacks suppressed [ 447.827813][T16335] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4552'. [ 448.030210][T16341] netlink: 'syz.5.4554': attribute type 10 has an invalid length. [ 448.048291][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 448.048311][ T29] audit: type=1326 audit(1754545540.328:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16345 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.078316][ T29] audit: type=1326 audit(1754545540.328:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16345 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.101913][ T29] audit: type=1326 audit(1754545540.328:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16345 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.125952][ T29] audit: type=1326 audit(1754545540.328:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16345 comm="syz.3.4555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.228800][T16348] netlink: 'syz.4.4556': attribute type 10 has an invalid length. [ 448.249912][T16355] loop5: detected capacity change from 0 to 128 [ 448.268405][T16355] vfat: Unknown parameter '' [ 448.463651][ T29] audit: type=1326 audit(1754545540.488:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.487296][ T29] audit: type=1326 audit(1754545540.488:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.511027][ T29] audit: type=1326 audit(1754545540.488:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.534691][ T29] audit: type=1326 audit(1754545540.488:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.558308][ T29] audit: type=1326 audit(1754545540.488:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.581938][ T29] audit: type=1326 audit(1754545540.488:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16351 comm="syz.3.4557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5724febe9 code=0x7ffc0000 [ 448.687577][T16338] lo speed is unknown, defaulting to 1000 [ 448.716849][T16363] lo speed is unknown, defaulting to 1000 [ 448.837138][T15535] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.907679][T15535] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.952094][T15535] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.004071][T15535] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.034601][T16338] chnl_net:caif_netlink_parms(): no params data found [ 449.222865][T16338] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.230452][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.238926][T16338] bridge_slave_0: entered allmulticast mode [ 449.245464][T16338] bridge_slave_0: entered promiscuous mode [ 449.252890][T16338] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.252917][T16384] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4563'. [ 449.269326][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.276628][T16338] bridge_slave_1: entered allmulticast mode [ 449.283176][T16338] bridge_slave_1: entered promiscuous mode [ 449.338313][T15535] bridge0: port 3(team0) entered disabled state [ 449.363455][T15535] bridge_slave_1: left allmulticast mode [ 449.369293][T15535] bridge_slave_1: left promiscuous mode [ 449.375755][T15535] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.390720][T15535] bridge_slave_0: left allmulticast mode [ 449.396456][T15535] bridge_slave_0: left promiscuous mode [ 449.402224][T15535] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.533797][T16396] FAULT_INJECTION: forcing a failure. [ 449.533797][T16396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.546996][T16396] CPU: 0 UID: 0 PID: 16396 Comm: syz.3.4568 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 449.547034][T16396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.547051][T16396] Call Trace: [ 449.547127][T16396] [ 449.547135][T16396] __dump_stack+0x1d/0x30 [ 449.547157][T16396] dump_stack_lvl+0xe8/0x140 [ 449.547179][T16396] dump_stack+0x15/0x1b [ 449.547200][T16396] should_fail_ex+0x265/0x280 [ 449.547244][T16396] should_fail+0xb/0x20 [ 449.547314][T16396] should_fail_usercopy+0x1a/0x20 [ 449.547338][T16396] strncpy_from_user+0x25/0x230 [ 449.547376][T16396] strncpy_from_bpfptr+0x43/0x50 [ 449.547419][T16396] bpf_prog_load+0x884/0x1070 [ 449.547601][T16396] ? security_bpf+0x2b/0x90 [ 449.547635][T16396] __sys_bpf+0x462/0x7b0 [ 449.547684][T16396] __x64_sys_bpf+0x41/0x50 [ 449.547751][T16396] x64_sys_call+0x2aea/0x2ff0 [ 449.547775][T16396] do_syscall_64+0xd2/0x200 [ 449.547799][T16396] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 449.547825][T16396] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 449.547892][T16396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.547914][T16396] RIP: 0033:0x7fe5724febe9 [ 449.547932][T16396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.547956][T16396] RSP: 002b:00007fe570f5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.547981][T16396] RAX: ffffffffffffffda RBX: 00007fe572725fa0 RCX: 00007fe5724febe9 [ 449.548036][T16396] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 449.548050][T16396] RBP: 00007fe570f5f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.548063][T16396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.548080][T16396] R13: 00007fe572726038 R14: 00007fe572725fa0 R15: 00007ffebde39c68 [ 449.548104][T16396] [ 449.832454][ T3392] kernel write not supported for file /857/sched (pid: 3392 comm: kworker/0:6) [ 449.851611][T15535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.861990][T15535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.872720][T15535] bond0 (unregistering): Released all slaves [ 449.887245][T15535] bond1 (unregistering): Released all slaves [ 449.907880][T16338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.946614][T16338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.036338][T16408] netlink: 'syz.4.4571': attribute type 1 has an invalid length. [ 450.044258][T16408] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4571'. [ 450.059343][T15535] hsr_slave_0: left promiscuous mode [ 450.065147][T15535] hsr_slave_1: left promiscuous mode [ 450.075322][T15535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.082819][T15535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.118453][T15535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.126021][T15535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.130141][T16413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4571'. [ 450.165861][T15535] veth1_macvtap: left promiscuous mode [ 450.179018][T15535] veth0_macvtap: left promiscuous mode [ 450.356346][T16419] netlink: 'syz.3.4572': attribute type 10 has an invalid length. [ 450.364392][T16419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'. [ 450.395451][T15535] team_slave_1 (unregistering): left promiscuous mode [ 450.402466][T15535] team_slave_1 (unregistering): left allmulticast mode [ 450.489319][T15535] team0 (unregistering): Port device team_slave_1 removed [ 450.540388][T15535] dummy0 (unregistering): left promiscuous mode [ 450.552328][T15535] dummy0 (unregistering): left allmulticast mode [ 450.565856][T15535] team0 (unregistering): Port device dummy0 removed [ 450.596641][T16338] team0: Port device team_slave_0 added [ 450.603552][T16338] team0: Port device team_slave_1 added [ 450.609610][ T4135] lo speed is unknown, defaulting to 1000 [ 450.615598][ T4135] infiniband syz0: ib_query_port failed (-19) [ 450.658301][T16338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.665459][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.691494][T16338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.749870][T16338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.756857][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.783269][T16338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.912809][T16338] hsr_slave_0: entered promiscuous mode [ 450.921865][T16338] hsr_slave_1: entered promiscuous mode [ 450.938833][T16338] debugfs: 'hsr0' already exists in 'hsr' [ 450.944645][T16338] Cannot create hsr debugfs directory [ 451.100532][T16338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 451.118570][T16433] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4577'. [ 451.159000][T16338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 451.169947][T16338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 451.216096][T16338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 451.274688][T16338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.313952][T16338] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.342297][T15543] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.349428][T15543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.378960][T15543] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.386098][T15543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.433892][T16338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 451.444718][T16338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 451.531688][T16458] netlink: 'syz.4.4584': attribute type 10 has an invalid length. [ 451.554658][T16338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.815920][T16338] veth0_vlan: entered promiscuous mode [ 451.835158][T16338] veth1_vlan: entered promiscuous mode [ 451.865348][T16338] veth0_macvtap: entered promiscuous mode [ 451.881792][T16338] veth1_macvtap: entered promiscuous mode [ 451.905682][T16338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.924074][T16338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.944058][T15535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.975028][T15535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.003720][T15535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.021262][T16483] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4551'. [ 452.028795][T15535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.128009][T16485] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4588'. [ 452.166448][T16487] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.186854][T16487] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.198800][T16487] bond0 (unregistering): Released all slaves [ 452.216480][T16488] ================================================================== [ 452.224604][T16488] BUG: KCSAN: data-race in mas_replace_node / mas_state_walk [ 452.232007][T16488] [ 452.234347][T16488] write to 0xffff888105ba3b00 of 8 bytes by task 16491 on cpu 1: [ 452.242074][T16488] mas_replace_node+0x1a6/0x410 [ 452.247121][T16488] mas_wr_store_entry+0x2406/0x2b50 [ 452.252424][T16488] mas_store_prealloc+0x74d/0x9e0 [ 452.257469][T16488] vma_iter_store_new+0x1c5/0x200 [ 452.262515][T16488] mmap_region+0x1100/0x1630 [ 452.267133][T16488] do_mmap+0x9b3/0xbe0 [ 452.271399][T16488] vm_mmap_pgoff+0x17a/0x2e0 [ 452.276025][T16488] ksys_mmap_pgoff+0xc2/0x310 [ 452.280729][T16488] x64_sys_call+0x14a3/0x2ff0 [ 452.285422][T16488] do_syscall_64+0xd2/0x200 [ 452.290029][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.296022][T16488] [ 452.298369][T16488] read to 0xffff888105ba3b00 of 8 bytes by task 16488 on cpu 0: [ 452.306009][T16488] mas_state_walk+0x485/0x650 [ 452.310702][T16488] mas_walk+0x60/0x150 [ 452.314788][T16488] lock_vma_under_rcu+0x8d/0x160 [ 452.319773][T16488] do_user_addr_fault+0x233/0x1090 [ 452.324919][T16488] exc_page_fault+0x62/0xa0 [ 452.329436][T16488] asm_exc_page_fault+0x26/0x30 [ 452.334306][T16488] [ 452.336645][T16488] value changed: 0xffff888105ba3d06 -> 0xffff888105ba3b00 [ 452.343760][T16488] [ 452.346102][T16488] Reported by Kernel Concurrency Sanitizer on: [ 452.352262][T16488] CPU: 0 UID: 0 PID: 16488 Comm: syz.6.4590 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895 #0 PREEMPT(voluntary) [ 452.364438][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.374516][T16488] ================================================================== [ 452.398353][T16494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'. [ 452.417924][T16494] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4590'.