last executing test programs: 1m36.12631587s ago: executing program 4 (id=2164): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fallocate(r0, 0x3, 0x0, 0x8003) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) write$UHID_INPUT(r3, &(0x7f0000000b00)={0x8, {"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", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000006c0), 0x1, 0x509, &(0x7f0000001500)="$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") 1m35.537715069s ago: executing program 4 (id=2169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}}, 0x4004000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001600850000005900000095"], 0x0, 0x0, 0x3c, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000280)={@dev}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000008010300000000000000000000000a060002406558000006000240600100000600024088a2000005000300840000000600024060020000060002400011000034000480080008400000000608000340000000010800044000000004080002400000000008000940000007ff0807074000000001090001"], 0x84}}, 0x8000) 1m34.617861533s ago: executing program 4 (id=2172): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x20000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 1m34.481991775s ago: executing program 4 (id=2175): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setresuid(0x0, 0x0, 0xee00) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xa, 0x7f, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x1, 0x1, 0x2, 0xff}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x9, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x61, 0x61, 0x0]}}, &(0x7f0000000500)=""/120, 0x39, 0x78, 0x1, 0x5}, 0x28) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x1, &(0x7f0000000000)=@raw=[@generic={0x2, 0xf, 0x8, 0x4, 0x7fff}], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x9, 0xfffffff9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, r0, r0, r6, r7, r8, r0, r2, r0], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r10}, 0x18) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.185831879s ago: executing program 4 (id=2180): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8400, 0xa, 0x20}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noblock_validity}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x0, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r7, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r7) mkdirat(r7, &(0x7f0000000200)='./bus\x00', 0x108) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000", @ANYRES16=r6, @ANYBLOB="000126bd7000fbdbdf25090000002000018014000200766c616e30000000000000000000000008000300020000004c000180080003000200000014000200677265746170300000000000000000000800030001000000140002007767320000000000000000000000000008000300000000001d000100", @ANYRES32=r2, @ANYBLOB="14000180080003000000000008000100", @ANYRES32=r2, @ANYBLOB="068c0fdd7466a624a3f6457f021a80a8b32524000001dca3d8893fdf7b1c2325f7d4433b8b310b0000000000000049227588f0cf46fb1dae2a8d0c4d588f7e5653c0"], 0x94}}, 0x24000) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x0) 1m34.084368591s ago: executing program 4 (id=2182): inotify_init() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockname(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 1m34.052925412s ago: executing program 32 (id=2182): inotify_init() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000009900"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockname(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000008"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) 2.63017925s ago: executing program 1 (id=3731): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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") (async, rerun: 32) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) connect$vsock_stream(r1, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setresuid(0x0, r6, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 32) chown(&(0x7f0000000000)='./file0\x00', r6, r7) (async) setreuid(0x0, 0xee01) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 64) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x1) 2.594256031s ago: executing program 1 (id=3732): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, &(0x7f00000005c0)=r3}, 0x20) unshare(0x20000400) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba88", 0x4}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 2.563696482s ago: executing program 1 (id=3734): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001400010000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x49, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r5 = io_uring_setup(0x6ecc, &(0x7f0000000140)={0x0, 0xae60, 0x2, 0x20002, 0x10a}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r6, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40001}, 0x1) close_range(r5, 0xffffffffffffffff, 0x0) clock_settime(0x4, &(0x7f0000000000)={r1, r2+10000000}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4458, 0x10000, 0xfffffffc, 0x1, 0x88, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, 0x0, 0xc8140, 0x20) 2.428375963s ago: executing program 1 (id=3741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000045a9bb12d685b6b6e000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRESHEX, @ANYRES64=r0, @ANYRESHEX=r1, @ANYRESDEC=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x934, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x108) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r8 = socket(0x10, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000"], &(0x7f0000001b80)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r10}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r9, &(0x7f0000000780)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r8, r9, 0x10000000) 2.221437516s ago: executing program 3 (id=3745): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18f213f98300000018110000f6f4fd9506880000000000000000", @ANYRES8=r0, @ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 1.525947717s ago: executing program 1 (id=3763): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close_range(0xffffffffffffffff, r0, 0x0) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, "01d7"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010102}}]}, 0x60}, 0x1, 0x7}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r1, 0x0, r3, 0x0, 0x88000cc, 0x1000000000000000) fcntl$setpipe(r2, 0x407, 0x100004) write$eventfd(r2, &(0x7f0000000240), 0xffffff14) 1.36103539s ago: executing program 3 (id=3765): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000010b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x4014, 0x0) 1.34101744s ago: executing program 3 (id=3766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xd}, 0xb008, 0x10000, 0x1, 0x1, 0x8, 0x20006, 0x2b, 0x0, 0x0, 0x0, 0xc88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) setreuid(0x0, 0xee01) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x292}]}]}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r7], 0x378}}, 0x0) r8 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000180)='cpu~=0||!') 1.33516751s ago: executing program 5 (id=3767): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 1.31955738s ago: executing program 5 (id=3768): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003812c00038014000100776732000000000000000000000000001400010076657468315f766972745f77696669000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 1.2872501s ago: executing program 3 (id=3769): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x200000000000000) creat(&(0x7f0000000200)='./file0\x00', 0x117) 1.284845271s ago: executing program 5 (id=3770): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88240, 0x0) 1.262973951s ago: executing program 5 (id=3771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, 0x0, 0x0, 0x734, 0x0, 0x0) 1.156601613s ago: executing program 5 (id=3772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1000000}, 0x18) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0xfffffffe, 0x25}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) 1.016874475s ago: executing program 5 (id=3773): r0 = socket(0x23, 0x803, 0x0) ioperm(0x83, 0x4, 0x7fffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc098, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x4, 0x3}, 0x8, 0xa88, 0x8409, 0x5, 0x0, 0xe0d, 0xef7e}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) pipe(&(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4000002}, 0x2}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x4, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x40004}}, 0x10) close(r1) io_setup(0x2, &(0x7f0000002400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x2, 0x7fff7ffc}]}) setregid(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r8, 0x0, 0x178}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 924.643446ms ago: executing program 0 (id=3774): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='loginuid\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000140)={0x7, {{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x88) 914.207326ms ago: executing program 0 (id=3775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10003}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000002800)=@in4={0x21, 0x0, 0xa, 0x10}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) 875.687857ms ago: executing program 0 (id=3776): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000010b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x4014, 0x0) 857.297747ms ago: executing program 0 (id=3777): r0 = syz_io_uring_setup(0x7871, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x10007b0f, 0x86f0, 0x5, 0x0, 0xfff4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 795.476518ms ago: executing program 0 (id=3778): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000085e28de5cd00000000af0000000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd"], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x0, &(0x7f0000000000)) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0xaa, 0x2, 0x8, 0x20, @loopback, @remote, 0x0, 0x87, 0xe, 0xb5}}) socket$inet6(0xa, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) waitid(0x1, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r6, @ANYBLOB="801400530421"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 691.774229ms ago: executing program 2 (id=3779): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=prefer=relative']) (async, rerun: 32) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) (async, rerun: 32) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0xa4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3, 0xfffffffffffffffe}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080100000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) r9 = socket(0x2, 0x3, 0xff) bind$inet(r9, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) r10 = socket$netlink(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r11, 0x1, 0x0, 0x25d7dbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) 681.82204ms ago: executing program 1 (id=3780): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) syz_io_uring_setup(0x832, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x5b43, 0x0, 0x0, 0x0, 0x0) pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (fail_nth: 4) 617.884101ms ago: executing program 2 (id=3781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x4004000) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="840000000008010300000000000000000000000a060002406558000006000240600100000600024088a2000005000300840000000600024060020000060002400011000034000480080008400000000608000340000000010800044000000004080002400000000008000940000007ff08070740000000010900"], 0x84}}, 0x8000) 612.207881ms ago: executing program 2 (id=3782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, 0x0, 0x0, 0x734, 0x0, 0x0) 599.057981ms ago: executing program 0 (id=3783): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}}, 0x200c4004) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="2b8d35e5c6067fcc45428d0428d71e48c5", 0x11}], 0x1, 0x105405, 0x0, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1a, 0x9, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x58000000}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @generic={0x78, 0x4, 0x1, 0x800, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x5e, &(0x7f0000000480)=""/94, 0x41100, 0x1, '\x00', r2, @fallback=0xd, r3, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x10, 0xeee2}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x3, 0x1, 0xcf, 0x80000000, 0xdd2, 0xfffffffffffffff8, 0x4, 0x4040c405}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) getsockopt(r5, 0x2, 0x3, &(0x7f0000000040)=""/207, &(0x7f0000000200)=0xcf) 309.976625ms ago: executing program 2 (id=3784): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x7, 0x3, 0x1, 0xcf, 0x80000000, 0xdd2, 0xfffffffffffffff8, 0x4, 0x4040c405}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.swap.events\x00', 0x275a, 0x0) (fail_nth: 4) 81.248749ms ago: executing program 3 (id=3785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x800, 0x20, 0x0, 0x0, 0xc, 0x2, 0x9e8e, 0x5, 0x4, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0x890) 59.663849ms ago: executing program 2 (id=3786): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10, 0x0, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10003}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$rxrpc(0xffffffffffffffff, &(0x7f0000002800)=@in4={0x21, 0x0, 0xa, 0x10}, 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) 840.8µs ago: executing program 2 (id=3787): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x600a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000010b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f00000006c0)='./file0\x00', 0x0, 0x4014, 0x0) 0s ago: executing program 3 (id=3788): r0 = syz_io_uring_setup(0x7871, &(0x7f0000000140)={0x0, 0xd883, 0x1000, 0x8003, 0x1c2}, 0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x10007b0f, 0x86f0, 0x5, 0x0, 0xfff4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 194.006927][ T29] audit: type=1326 audit(194.945:233279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 194.030379][ T29] audit: type=1326 audit(194.945:233280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 194.053427][ T29] audit: type=1326 audit(194.945:233281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14951 comm="syz.5.3011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 194.087916][T14600] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.149673][ T29] audit: type=1326 audit(195.135:233282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.172879][ T29] audit: type=1326 audit(195.135:233283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.185550][T14600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.197004][ T29] audit: type=1326 audit(195.135:233284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.225933][ T29] audit: type=1326 audit(195.135:233285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.249172][ T29] audit: type=1326 audit(195.135:233286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.278551][T14600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.290876][T14600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.300464][T14600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 194.364244][ T29] audit: type=1326 audit(195.215:233287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15012 comm="syz.3.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 194.415845][T15049] FAULT_INJECTION: forcing a failure. [ 194.415845][T15049] name failslab, interval 1, probability 0, space 0, times 0 [ 194.428532][T15049] CPU: 0 UID: 0 PID: 15049 Comm: syz.5.3028 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 194.428589][T15049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.428604][T15049] Call Trace: [ 194.428610][T15049] [ 194.428617][T15049] __dump_stack+0x1d/0x30 [ 194.428638][T15049] dump_stack_lvl+0xe8/0x140 [ 194.428733][T15049] dump_stack+0x15/0x1b [ 194.428755][T15049] should_fail_ex+0x265/0x280 [ 194.428792][T15049] should_failslab+0x8c/0xb0 [ 194.428827][T15049] __kmalloc_noprof+0xa5/0x3e0 [ 194.428851][T15049] ? alloc_pipe_info+0x1c9/0x350 [ 194.428888][T15049] alloc_pipe_info+0x1c9/0x350 [ 194.428930][T15049] splice_direct_to_actor+0x592/0x680 [ 194.428966][T15049] ? kstrtouint_from_user+0x9f/0xf0 [ 194.428997][T15049] ? __pfx_direct_splice_actor+0x10/0x10 [ 194.429034][T15049] ? __rcu_read_unlock+0x4f/0x70 [ 194.429072][T15049] ? get_pid_task+0x96/0xd0 [ 194.429094][T15049] ? avc_policy_seqno+0x15/0x30 [ 194.429155][T15049] ? selinux_file_permission+0x1e4/0x320 [ 194.429184][T15049] do_splice_direct+0xda/0x150 [ 194.429229][T15049] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 194.429270][T15049] do_sendfile+0x380/0x650 [ 194.429305][T15049] __x64_sys_sendfile64+0x105/0x150 [ 194.429399][T15049] x64_sys_call+0xb39/0x2fb0 [ 194.429422][T15049] do_syscall_64+0xd2/0x200 [ 194.429439][T15049] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.429467][T15049] ? clear_bhb_loop+0x40/0x90 [ 194.429508][T15049] ? clear_bhb_loop+0x40/0x90 [ 194.429529][T15049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.429580][T15049] RIP: 0033:0x7fb0c147e929 [ 194.429595][T15049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.429613][T15049] RSP: 002b:00007fb0bfae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 194.429635][T15049] RAX: ffffffffffffffda RBX: 00007fb0c16a5fa0 RCX: 00007fb0c147e929 [ 194.429652][T15049] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 194.429668][T15049] RBP: 00007fb0bfae7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.429681][T15049] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 194.429692][T15049] R13: 0000000000000000 R14: 00007fb0c16a5fa0 R15: 00007ffe3f91b668 [ 194.429785][T15049] [ 194.672900][T14600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.685648][T14600] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.704162][T11975] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.711530][T11975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.725733][T11975] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.732906][T11975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.762877][T14600] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.773408][T14600] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.832917][T15066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3027'. [ 194.880292][T14600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.924028][T15068] loop5: detected capacity change from 0 to 2048 [ 194.939336][T15083] FAULT_INJECTION: forcing a failure. [ 194.939336][T15083] name failslab, interval 1, probability 0, space 0, times 0 [ 194.952141][T15083] CPU: 0 UID: 0 PID: 15083 Comm: syz.1.3037 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 194.952179][T15083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.952196][T15083] Call Trace: [ 194.952204][T15083] [ 194.952214][T15083] __dump_stack+0x1d/0x30 [ 194.952313][T15083] dump_stack_lvl+0xe8/0x140 [ 194.952340][T15083] dump_stack+0x15/0x1b [ 194.952362][T15083] should_fail_ex+0x265/0x280 [ 194.952407][T15083] ? kobject_uevent_env+0x1c0/0x570 [ 194.952433][T15083] should_failslab+0x8c/0xb0 [ 194.952482][T15083] __kmalloc_cache_noprof+0x4c/0x320 [ 194.952521][T15083] kobject_uevent_env+0x1c0/0x570 [ 194.952551][T15083] ? device_pm_check_callbacks+0x683/0x6a0 [ 194.952596][T15083] kobject_uevent+0x1d/0x30 [ 194.952629][T15083] device_del+0x710/0x790 [ 194.952662][T15083] device_unregister+0x15/0x40 [ 194.952690][T15083] bdi_unregister+0x307/0x3a0 [ 194.952759][T15083] __del_gendisk+0x2c3/0x570 [ 194.952803][T15083] del_gendisk+0xac/0xf0 [ 194.952921][T15083] loop_remove+0x26/0x80 [ 194.952957][T15083] loop_control_ioctl+0x3b3/0x3f0 [ 194.953035][T15083] ? __pfx_loop_control_ioctl+0x10/0x10 [ 194.953071][T15083] __se_sys_ioctl+0xcb/0x140 [ 194.953130][T15083] __x64_sys_ioctl+0x43/0x50 [ 194.953166][T15083] x64_sys_call+0x19a8/0x2fb0 [ 194.953194][T15083] do_syscall_64+0xd2/0x200 [ 194.953217][T15083] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.953280][T15083] ? clear_bhb_loop+0x40/0x90 [ 194.953307][T15083] ? clear_bhb_loop+0x40/0x90 [ 194.953336][T15083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.953364][T15083] RIP: 0033:0x7f12d9bee929 [ 194.953384][T15083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.953474][T15083] RSP: 002b:00007f12d8257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.953499][T15083] RAX: ffffffffffffffda RBX: 00007f12d9e15fa0 RCX: 00007f12d9bee929 [ 194.953516][T15083] RDX: 0000000000000003 RSI: 0000000000004c81 RDI: 0000000000000003 [ 194.953532][T15083] RBP: 00007f12d8257090 R08: 0000000000000000 R09: 0000000000000000 [ 194.953549][T15083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.953637][T15083] R13: 0000000000000000 R14: 00007f12d9e15fa0 R15: 00007ffd680086b8 [ 194.953663][T15083] [ 194.954807][T15077] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 195.207928][T15068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.244602][T15090] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15090 comm=syz.1.3038 [ 195.309375][T10253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.338515][T14600] veth0_vlan: entered promiscuous mode [ 195.359338][T14600] veth1_vlan: entered promiscuous mode [ 195.386132][T14600] veth0_macvtap: entered promiscuous mode [ 195.394948][T14600] veth1_macvtap: entered promiscuous mode [ 195.434141][T14600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.755012][T14600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.777879][T14600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.786828][T14600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.795583][T14600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.804528][T14600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.623732][T15146] lo speed is unknown, defaulting to 1000 [ 196.666613][T15179] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3058'. [ 196.920425][T15295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3066'. [ 197.023523][T15208] syzkaller0: entered promiscuous mode [ 197.029892][T15208] syzkaller0: entered allmulticast mode [ 197.085153][T15146] chnl_net:caif_netlink_parms(): no params data found [ 197.207032][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.214138][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.220726][T15372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3077'. [ 197.230490][T15146] bridge_slave_0: entered allmulticast mode [ 197.239028][T15146] bridge_slave_0: entered promiscuous mode [ 197.247650][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.254837][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.264063][T15146] bridge_slave_1: entered allmulticast mode [ 197.270913][T15146] bridge_slave_1: entered promiscuous mode [ 197.295304][T15146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.306121][T15146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.339284][T15146] team0: Port device team_slave_0 added [ 197.356624][T15146] team0: Port device team_slave_1 added [ 197.388588][T15146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.395667][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.421758][T15146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.434210][T15146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.441224][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.467306][T15146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.529572][T15146] hsr_slave_0: entered promiscuous mode [ 197.545213][T15146] hsr_slave_1: entered promiscuous mode [ 197.558360][T15146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.576805][T15146] Cannot create hsr debugfs directory [ 198.390457][T15514] syzkaller0: entered promiscuous mode [ 198.397387][T15514] syzkaller0: entered allmulticast mode [ 198.477121][T15547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3095'. [ 198.536946][T15146] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.597390][T15579] FAULT_INJECTION: forcing a failure. [ 198.597390][T15579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.610636][T15579] CPU: 0 UID: 0 PID: 15579 Comm: syz.5.3098 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 198.610707][T15579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.610718][T15579] Call Trace: [ 198.610724][T15579] [ 198.610731][T15579] __dump_stack+0x1d/0x30 [ 198.610755][T15579] dump_stack_lvl+0xe8/0x140 [ 198.610814][T15579] dump_stack+0x15/0x1b [ 198.610836][T15579] should_fail_ex+0x265/0x280 [ 198.610873][T15579] should_fail+0xb/0x20 [ 198.610915][T15579] should_fail_usercopy+0x1a/0x20 [ 198.610948][T15579] _copy_from_user+0x1c/0xb0 [ 198.610974][T15579] sel_write_load+0x192/0x380 [ 198.611003][T15579] ? __pfx_sel_write_load+0x10/0x10 [ 198.611031][T15579] vfs_write+0x269/0x8e0 [ 198.611190][T15579] ? __rcu_read_unlock+0x4f/0x70 [ 198.611214][T15579] ? __fget_files+0x184/0x1c0 [ 198.611237][T15579] ksys_write+0xda/0x1a0 [ 198.611267][T15579] __x64_sys_write+0x40/0x50 [ 198.611342][T15579] x64_sys_call+0x2cdd/0x2fb0 [ 198.611366][T15579] do_syscall_64+0xd2/0x200 [ 198.611385][T15579] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 198.611486][T15579] ? clear_bhb_loop+0x40/0x90 [ 198.611517][T15579] ? clear_bhb_loop+0x40/0x90 [ 198.611541][T15579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.611569][T15579] RIP: 0033:0x7fb0c147e929 [ 198.611582][T15579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.611600][T15579] RSP: 002b:00007fb0bfae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.611621][T15579] RAX: ffffffffffffffda RBX: 00007fb0c16a5fa0 RCX: 00007fb0c147e929 [ 198.611700][T15579] RDX: 000000000000ffa8 RSI: 0000200000000000 RDI: 0000000000000008 [ 198.611714][T15579] RBP: 00007fb0bfae7090 R08: 0000000000000000 R09: 0000000000000000 [ 198.611728][T15579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.611742][T15579] R13: 0000000000000000 R14: 00007fb0c16a5fa0 R15: 00007ffe3f91b668 [ 198.611763][T15579] [ 198.853676][T15146] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.871995][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.879491][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.887124][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.894542][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.902154][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.909637][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.917104][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.924779][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.932383][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.940019][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.947473][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.955027][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.962571][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.970008][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.977439][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.984924][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 198.992501][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.000032][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.007619][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.015117][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.022595][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.030058][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.037632][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.045037][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.052514][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.059947][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.067391][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.074814][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.082371][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.089887][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.097388][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.104804][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.112294][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.119722][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.127170][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.134579][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.142024][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.149623][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.157068][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.164465][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.172017][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.179445][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.186910][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.194331][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.201771][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.209248][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.216720][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.224182][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.231811][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.239347][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.246847][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.254306][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.261768][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.269267][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.276814][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.284269][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.291762][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.299229][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.306749][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.314162][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.321637][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.329132][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.336592][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.344033][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.351493][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.359010][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.366477][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.373889][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.381354][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.388850][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.396366][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.403835][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.411378][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.418898][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.426357][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.433786][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.441291][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.448782][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.456266][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.463736][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.471350][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.479197][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.486696][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.494215][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.501749][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.509209][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.516673][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.524089][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.531551][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.539047][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.546622][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.554045][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.561556][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.569040][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.576493][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.583932][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.591443][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.599037][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.606548][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.613991][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.621484][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.629202][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.636880][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.644440][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.651952][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.659451][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.666923][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.674386][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.681849][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.689353][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.696824][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.704257][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.711993][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.719521][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.727028][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.734496][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.741981][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.749492][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.757179][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.764886][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.772458][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.779986][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.787501][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.795042][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.802590][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.810107][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.817628][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.825043][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.832776][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.840333][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.847794][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.855219][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.862797][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.870276][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.877814][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.885264][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.892725][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.900489][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.908067][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.915519][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.923254][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.930765][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.938439][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.945846][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.953395][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.959960][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 199.959978][ T29] audit: type=1326 audit(200.945:233361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 199.960851][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.976827][ T29] audit: type=1326 audit(200.955:233362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 199.989955][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 199.997359][ T29] audit: type=1326 audit(200.955:233363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.020528][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.058578][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.066047][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.073513][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.080980][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.088473][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.095963][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.103394][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.111035][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.118482][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.125949][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.133457][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.140957][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.148394][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.155878][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.163317][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.170818][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.178323][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.185745][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.193265][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.196665][ T29] audit: type=1326 audit(201.015:233364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.200764][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.224060][ T29] audit: type=1326 audit(201.015:233365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.231451][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.254449][ T29] audit: type=1326 audit(201.015:233366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.261847][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.285191][ T29] audit: type=1326 audit(201.015:233367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.292277][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292305][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292338][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292365][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292390][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292457][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.292480][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.315502][ T29] audit: type=1326 audit(201.015:233368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.322904][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.330261][ T29] audit: type=1326 audit(201.015:233369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.337675][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.345029][ T29] audit: type=1326 audit(201.015:233370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15645 comm="syz.3.3107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 200.352497][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.352527][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.466511][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.474085][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.481561][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.489012][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.496479][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.503978][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.511542][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.519108][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.526610][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.534031][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.541475][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.548923][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.556374][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.563815][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.571310][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.578818][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.586274][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.593872][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.601451][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.609013][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.616449][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.623877][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.631416][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.638880][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.646343][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.653838][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.661356][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.669140][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.676618][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.684086][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.691831][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.699378][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.707084][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.714906][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.722389][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.729860][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.737348][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.744907][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.752414][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.759871][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.767463][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.774973][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.782426][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.789887][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.797454][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.804962][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.812488][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.820029][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.827662][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.835102][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.842653][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.850106][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.857756][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.865179][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.872650][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.880136][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.887652][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.895196][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.902679][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.910201][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.917742][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.925162][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.932616][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.940112][ T36] hid-generic 01FF:0001:0008.0001: unknown main item tag 0x0 [ 200.948920][ T36] hid-generic 01FF:0001:0008.0001: hidraw0: HID v4.b6 Device [syz1] on syz1 [ 200.991524][T15146] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.069718][T15146] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.152936][T15146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.189768][T15146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.200637][T15740] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 201.219725][T15146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.235472][T15146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 202.289978][T15146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.302856][T15146] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.325121][T15146] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.335732][T15146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.358690][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.365944][T11976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.360673][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.367903][T11976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.472176][T15146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.488440][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 205.488458][ T29] audit: type=1326 audit(206.475:233454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.517893][ T29] audit: type=1326 audit(206.475:233455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.549526][ T29] audit: type=1326 audit(206.475:233456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.572798][ T29] audit: type=1326 audit(206.475:233457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.595962][ T29] audit: type=1326 audit(206.475:233458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.619105][ T29] audit: type=1326 audit(206.475:233459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.642310][ T29] audit: type=1326 audit(206.475:233460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.665513][ T29] audit: type=1326 audit(206.475:233461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.688738][ T29] audit: type=1326 audit(206.475:233462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.711886][ T29] audit: type=1326 audit(206.475:233463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15790 comm="syz.2.3120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f0e3e929 code=0x7ffc0000 [ 205.849712][T15146] veth0_vlan: entered promiscuous mode [ 205.877424][T15146] veth1_vlan: entered promiscuous mode [ 205.908629][T15146] veth0_macvtap: entered promiscuous mode [ 205.919538][T15146] veth1_macvtap: entered promiscuous mode [ 205.947950][T15146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.966909][T15146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.986490][T15146] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.995288][T15146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.004170][T15146] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.013044][T15146] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.068275][T15834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3129'. [ 206.541577][T15854] syzkaller0: entered promiscuous mode [ 206.547225][T15854] syzkaller0: entered allmulticast mode [ 206.661970][T15872] Â: renamed from pim6reg1 [ 206.686612][T15872] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 206.693293][T15872] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 206.701022][T15872] vhci_hcd vhci_hcd.0: Device attached [ 206.710087][T15878] vhci_hcd: connection closed [ 206.710711][T11976] vhci_hcd: stop threads [ 206.719724][T11976] vhci_hcd: release socket [ 206.724290][T11976] vhci_hcd: disconnect device [ 207.046213][T15884] syzkaller0: entered promiscuous mode [ 207.053582][T15884] syzkaller0: entered allmulticast mode [ 207.597624][T15912] loop5: detected capacity change from 0 to 512 [ 207.632988][T15902] syzkaller0: entered promiscuous mode [ 207.640205][T15902] syzkaller0: entered allmulticast mode [ 207.754345][T15927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3156'. [ 207.802076][T15930] FAULT_INJECTION: forcing a failure. [ 207.802076][T15930] name failslab, interval 1, probability 0, space 0, times 0 [ 207.814802][T15930] CPU: 0 UID: 0 PID: 15930 Comm: syz.3.3157 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 207.814835][T15930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.814849][T15930] Call Trace: [ 207.814857][T15930] [ 207.814936][T15930] __dump_stack+0x1d/0x30 [ 207.814956][T15930] dump_stack_lvl+0xe8/0x140 [ 207.815031][T15930] dump_stack+0x15/0x1b [ 207.815051][T15930] should_fail_ex+0x265/0x280 [ 207.815087][T15930] ? sctp_add_bind_addr+0x71/0x1e0 [ 207.815110][T15930] should_failslab+0x8c/0xb0 [ 207.815137][T15930] __kmalloc_cache_noprof+0x4c/0x320 [ 207.815237][T15930] sctp_add_bind_addr+0x71/0x1e0 [ 207.815258][T15930] sctp_copy_local_addr_list+0x199/0x220 [ 207.815285][T15930] sctp_copy_one_addr+0x7f/0x280 [ 207.815305][T15930] sctp_bind_addr_copy+0x79/0x290 [ 207.815326][T15930] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 207.815425][T15930] sctp_connect_new_asoc+0x1c3/0x3a0 [ 207.815464][T15930] __sctp_connect+0x424/0x7a0 [ 207.815551][T15930] ? selinux_sctp_bind_connect+0x20d/0x250 [ 207.815603][T15930] sctp_getsockopt_connectx3+0x220/0x300 [ 207.815674][T15930] sctp_getsockopt+0x910/0xaa0 [ 207.815706][T15930] sock_common_getsockopt+0x5d/0x70 [ 207.815731][T15930] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 207.815819][T15930] do_sock_getsockopt+0x1fd/0x240 [ 207.815863][T15930] __x64_sys_getsockopt+0x11e/0x1a0 [ 207.815920][T15930] x64_sys_call+0x12aa/0x2fb0 [ 207.815947][T15930] do_syscall_64+0xd2/0x200 [ 207.815970][T15930] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 207.815999][T15930] ? clear_bhb_loop+0x40/0x90 [ 207.816019][T15930] ? clear_bhb_loop+0x40/0x90 [ 207.816113][T15930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.816140][T15930] RIP: 0033:0x7efd0bc1e929 [ 207.816158][T15930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.816181][T15930] RSP: 002b:00007efd0a287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 207.816271][T15930] RAX: ffffffffffffffda RBX: 00007efd0be45fa0 RCX: 00007efd0bc1e929 [ 207.816284][T15930] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000006 [ 207.816364][T15930] RBP: 00007efd0a287090 R08: 0000200000000180 R09: 0000000000000000 [ 207.816380][T15930] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.816396][T15930] R13: 0000000000000000 R14: 00007efd0be45fa0 R15: 00007ffd5643f028 [ 207.816420][T15930] [ 207.949565][T15931] lo speed is unknown, defaulting to 1000 [ 208.421266][T15962] lo speed is unknown, defaulting to 1000 [ 208.551293][T16072] loop0: detected capacity change from 0 to 1024 [ 208.572179][T15962] chnl_net:caif_netlink_parms(): no params data found [ 208.617375][T16072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.653638][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.660908][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.708843][T15962] bridge_slave_0: entered allmulticast mode [ 209.038679][T15962] bridge_slave_0: entered promiscuous mode [ 209.054428][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.061590][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.069729][T15962] bridge_slave_1: entered allmulticast mode [ 209.076539][T15962] bridge_slave_1: entered promiscuous mode [ 209.084455][T16145] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3163'. [ 209.133294][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.145524][T14600] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.160849][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.194778][T16178] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3167'. [ 209.212553][T15962] team0: Port device team_slave_0 added [ 209.220345][T15962] team0: Port device team_slave_1 added [ 209.264092][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.271179][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.297252][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.309057][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.316041][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.342092][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.471156][T16177] syzkaller0: entered promiscuous mode [ 209.477200][T16177] syzkaller0: entered allmulticast mode [ 209.504486][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 209.528363][T15962] hsr_slave_0: entered promiscuous mode [ 209.534834][T15962] hsr_slave_1: entered promiscuous mode [ 209.542315][T15962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.550565][T15962] Cannot create hsr debugfs directory [ 210.175033][T16350] SELinux: Context ÁS is not valid (left unmapped). [ 210.208625][T16351] syzkaller0: entered promiscuous mode [ 210.215015][T16351] syzkaller0: entered allmulticast mode [ 210.271641][T16359] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3180'. [ 210.317447][T15962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.329979][T15962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.344234][T15962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.363652][T15962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.800811][T16374] syzkaller0: entered promiscuous mode [ 210.812193][T16374] syzkaller0: entered allmulticast mode [ 210.923372][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.941709][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.959078][T11973] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.966269][T11973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.977962][T11973] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.985161][T11973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.096076][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 211.096094][ T29] audit: type=1326 audit(212.075:233577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.096641][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 211.102983][ T29] audit: type=1326 audit(212.085:233578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.125541][T16409] netlink: 'syz.1.3187': attribute type 30 has an invalid length. [ 211.148826][T16402] infiniband syz!: set active [ 211.161926][T16409] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.165456][T16402] infiniband syz!: added team_slave_0 [ 211.184486][T16409] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.193265][T16409] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.202126][T16409] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.211082][ T29] audit: type=1326 audit(212.185:233579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.214309][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3187'. [ 211.234424][ T29] audit: type=1326 audit(212.185:233580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.234469][ T29] audit: type=1326 audit(212.185:233581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.234524][ T29] audit: type=1326 audit(212.195:233582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.243536][T16409] netlink: 'syz.1.3187': attribute type 30 has an invalid length. [ 211.266571][ T29] audit: type=1326 audit(212.195:233583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.343662][ T29] audit: type=1326 audit(212.195:233584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.366866][ T29] audit: type=1326 audit(212.195:233585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.390080][ T29] audit: type=1326 audit(212.195:233586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16406 comm="syz.3.3188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 211.432159][T16402] RDS/IB: syz!: added [ 211.456369][T16402] smc: adding ib device syz! with port count 1 [ 211.475184][T15962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.485778][T16402] smc: ib device syz! port 1 has pnetid [ 211.592827][T15962] veth0_vlan: entered promiscuous mode [ 211.603233][T15962] veth1_vlan: entered promiscuous mode [ 211.637272][T15962] veth0_macvtap: entered promiscuous mode [ 211.675798][T15962] veth1_macvtap: entered promiscuous mode [ 211.724106][T15962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.874433][T16444] syzkaller0: entered promiscuous mode [ 211.881103][T16444] syzkaller0: entered allmulticast mode [ 211.898279][T15962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.908995][T15962] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.917864][T15962] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.926675][T15962] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.928538][T16459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3196'. [ 211.935463][T15962] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.153240][T16454] syzkaller0: entered promiscuous mode [ 212.158885][T16454] syzkaller0: entered allmulticast mode [ 212.412751][T16496] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.510021][T16496] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.145841][T16496] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.243212][T16496] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.592555][T16524] syzkaller0: entered promiscuous mode [ 213.599038][T16524] syzkaller0: entered allmulticast mode [ 213.668276][T16496] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.699924][T16496] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.721932][T16496] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.746149][T16496] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.810822][T16597] loop5: detected capacity change from 0 to 2048 [ 213.833252][T16597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.923674][T16597] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 213.931122][T16597] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 213.960650][T10253] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.294210][T16618] syzkaller0: entered promiscuous mode [ 214.300562][T16618] syzkaller0: entered allmulticast mode [ 214.316789][T16633] FAULT_INJECTION: forcing a failure. [ 214.316789][T16633] name failslab, interval 1, probability 0, space 0, times 0 [ 214.329559][T16633] CPU: 1 UID: 0 PID: 16633 Comm: syz.1.3247 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 214.329689][T16633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.329796][T16633] Call Trace: [ 214.329805][T16633] [ 214.329815][T16633] __dump_stack+0x1d/0x30 [ 214.329888][T16633] dump_stack_lvl+0xe8/0x140 [ 214.329921][T16633] dump_stack+0x15/0x1b [ 214.329942][T16633] should_fail_ex+0x265/0x280 [ 214.329974][T16633] should_failslab+0x8c/0xb0 [ 214.330002][T16633] __kmalloc_noprof+0xa5/0x3e0 [ 214.330026][T16633] ? tcf_idr_create+0x41/0x4a0 [ 214.330055][T16633] tcf_idr_create+0x41/0x4a0 [ 214.330118][T16633] tcf_ife_init+0x441/0x880 [ 214.330193][T16633] tcf_action_init_1+0x367/0x4a0 [ 214.330366][T16633] tcf_action_init+0x267/0x6d0 [ 214.330516][T16633] ? enqueue_task_fair+0x891/0x980 [ 214.330630][T16633] tc_ctl_action+0x291/0x830 [ 214.330752][T16633] ? __pfx_tc_ctl_action+0x10/0x10 [ 214.330775][T16633] rtnetlink_rcv_msg+0x657/0x6d0 [ 214.330800][T16633] netlink_rcv_skb+0x120/0x220 [ 214.330835][T16633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.330883][T16633] rtnetlink_rcv+0x1c/0x30 [ 214.330909][T16633] netlink_unicast+0x5a5/0x680 [ 214.330963][T16633] netlink_sendmsg+0x58b/0x6b0 [ 214.330983][T16633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.331000][T16633] __sock_sendmsg+0x145/0x180 [ 214.331089][T16633] ____sys_sendmsg+0x31e/0x4e0 [ 214.331124][T16633] ___sys_sendmsg+0x17b/0x1d0 [ 214.331206][T16633] __x64_sys_sendmsg+0xd4/0x160 [ 214.331250][T16633] x64_sys_call+0x2999/0x2fb0 [ 214.331271][T16633] do_syscall_64+0xd2/0x200 [ 214.331333][T16633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.331366][T16633] ? clear_bhb_loop+0x40/0x90 [ 214.331392][T16633] ? clear_bhb_loop+0x40/0x90 [ 214.331418][T16633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.331485][T16633] RIP: 0033:0x7f00c780e929 [ 214.331504][T16633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.331524][T16633] RSP: 002b:00007f00c5e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.331542][T16633] RAX: ffffffffffffffda RBX: 00007f00c7a35fa0 RCX: 00007f00c780e929 [ 214.331554][T16633] RDX: 0000000004040800 RSI: 0000200000000680 RDI: 0000000000000003 [ 214.331567][T16633] RBP: 00007f00c5e77090 R08: 0000000000000000 R09: 0000000000000000 [ 214.331580][T16633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.331666][T16633] R13: 0000000000000000 R14: 00007f00c7a35fa0 R15: 00007ffd9d77bf08 [ 214.331728][T16633] [ 214.707345][T16652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3254'. [ 214.813514][T16640] syzkaller0: entered promiscuous mode [ 214.819143][T16640] syzkaller0: entered allmulticast mode [ 215.266166][T16698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3268'. [ 215.276436][T16698] netlink: 'syz.0.3268': attribute type 1 has an invalid length. [ 215.655546][T16719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3276'. [ 215.772092][T16724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3272'. [ 216.052721][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3287'. [ 216.062281][T16756] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3286'. [ 216.071442][T16756] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 216.080999][T16754] sit0: entered promiscuous mode [ 216.085987][T16754] sit0: entered allmulticast mode [ 216.201945][T16770] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3294'. [ 216.333228][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 216.333243][ T29] audit: type=1400 audit(217.315:233776): avc: denied { write } for pid=16774 comm="syz.0.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 216.397172][ T29] audit: type=1400 audit(217.315:233777): avc: denied { connect } for pid=16774 comm="syz.0.3296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 216.455433][ T29] audit: type=1326 audit(217.425:233778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.478823][ T29] audit: type=1326 audit(217.425:233779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.502064][ T29] audit: type=1326 audit(217.435:233780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.515891][T16789] audit: audit_backlog=65 > audit_backlog_limit=64 [ 216.525144][ T29] audit: type=1326 audit(217.435:233781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.525226][ T29] audit: type=1326 audit(217.435:233782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.525281][ T29] audit: type=1326 audit(217.435:233783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.525310][ T29] audit: type=1326 audit(217.435:233784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16783 comm="syz.0.3299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeba9e929 code=0x7ffc0000 [ 216.535665][T16789] FAULT_INJECTION: forcing a failure. [ 216.535665][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 216.637364][T16789] CPU: 0 UID: 0 PID: 16789 Comm: syz.3.3300 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 216.637400][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.637529][T16789] Call Trace: [ 216.637538][T16789] [ 216.637548][T16789] __dump_stack+0x1d/0x30 [ 216.637618][T16789] dump_stack_lvl+0xe8/0x140 [ 216.637636][T16789] dump_stack+0x15/0x1b [ 216.637682][T16789] should_fail_ex+0x265/0x280 [ 216.637762][T16789] should_failslab+0x8c/0xb0 [ 216.637789][T16789] kmem_cache_alloc_noprof+0x50/0x310 [ 216.637813][T16789] ? p9_client_prepare_req+0xef/0x820 [ 216.637922][T16789] ? should_fail_ex+0xdb/0x280 [ 216.637959][T16789] p9_client_prepare_req+0xef/0x820 [ 216.637993][T16789] ? try_get_folio+0x379/0x3c0 [ 216.638018][T16789] ? __account_obj_stock+0x211/0x350 [ 216.638089][T16789] ? __rcu_read_unlock+0x4f/0x70 [ 216.638113][T16789] p9_client_rpc+0xdf/0x6c0 [ 216.638218][T16789] p9_client_write+0x1e4/0x4c0 [ 216.638358][T16789] ? mempool_alloc_noprof+0xb0/0x2a0 [ 216.638387][T16789] v9fs_issue_write+0x72/0x100 [ 216.638409][T16789] netfs_issue_write+0x95/0x180 [ 216.638488][T16789] netfs_unbuffered_write+0x18f/0x240 [ 216.638509][T16789] netfs_unbuffered_write_iter_locked+0x2ae/0x400 [ 216.638572][T16789] netfs_unbuffered_write_iter+0x2a0/0x380 [ 216.638605][T16789] v9fs_file_write_iter+0x61/0x80 [ 216.638725][T16789] ? __pfx_v9fs_file_write_iter+0x10/0x10 [ 216.638750][T16789] vfs_write+0x49d/0x8e0 [ 216.638808][T16789] ksys_write+0xda/0x1a0 [ 216.638841][T16789] __x64_sys_write+0x40/0x50 [ 216.638881][T16789] x64_sys_call+0x2cdd/0x2fb0 [ 216.638903][T16789] do_syscall_64+0xd2/0x200 [ 216.639053][T16789] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.639094][T16789] ? clear_bhb_loop+0x40/0x90 [ 216.639116][T16789] ? clear_bhb_loop+0x40/0x90 [ 216.639138][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.639160][T16789] RIP: 0033:0x7efd0bc1e929 [ 216.639175][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.639206][T16789] RSP: 002b:00007efd0a287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 216.639225][T16789] RAX: ffffffffffffffda RBX: 00007efd0be45fa0 RCX: 00007efd0bc1e929 [ 216.639249][T16789] RDX: 0000000000000020 RSI: 0000200000000700 RDI: 0000000000000007 [ 216.639261][T16789] RBP: 00007efd0a287090 R08: 0000000000000000 R09: 0000000000000000 [ 216.639273][T16789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.639286][T16789] R13: 0000000000000000 R14: 00007efd0be45fa0 R15: 00007ffd5643f028 [ 216.639306][T16789] [ 216.986013][T16807] sit0: left promiscuous mode [ 216.991308][T16807] sit0: left allmulticast mode [ 217.015208][T16807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.187875][T16832] netlink: 'syz.1.3313': attribute type 39 has an invalid length. [ 217.610592][T16871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3321'. [ 218.156580][T16898] FAULT_INJECTION: forcing a failure. [ 218.156580][T16898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.169758][T16898] CPU: 1 UID: 0 PID: 16898 Comm: syz.1.3334 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 218.169859][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.169873][T16898] Call Trace: [ 218.169889][T16898] [ 218.169899][T16898] __dump_stack+0x1d/0x30 [ 218.169937][T16898] dump_stack_lvl+0xe8/0x140 [ 218.170030][T16898] dump_stack+0x15/0x1b [ 218.170050][T16898] should_fail_ex+0x265/0x280 [ 218.170088][T16898] should_fail+0xb/0x20 [ 218.170121][T16898] should_fail_usercopy+0x1a/0x20 [ 218.170175][T16898] _copy_from_iter+0xcf/0xe40 [ 218.170214][T16898] ? __build_skb_around+0x1a0/0x200 [ 218.170257][T16898] ? __alloc_skb+0x223/0x320 [ 218.170295][T16898] netlink_sendmsg+0x471/0x6b0 [ 218.170321][T16898] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.170344][T16898] __sock_sendmsg+0x145/0x180 [ 218.170429][T16898] ____sys_sendmsg+0x31e/0x4e0 [ 218.170469][T16898] ___sys_sendmsg+0x17b/0x1d0 [ 218.170589][T16898] __x64_sys_sendmsg+0xd4/0x160 [ 218.170633][T16898] x64_sys_call+0x2999/0x2fb0 [ 218.170660][T16898] do_syscall_64+0xd2/0x200 [ 218.170722][T16898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 218.170750][T16898] ? clear_bhb_loop+0x40/0x90 [ 218.170771][T16898] ? clear_bhb_loop+0x40/0x90 [ 218.170791][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.170876][T16898] RIP: 0033:0x7f00c780e929 [ 218.170902][T16898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.170924][T16898] RSP: 002b:00007f00c5e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.170948][T16898] RAX: ffffffffffffffda RBX: 00007f00c7a35fa0 RCX: 00007f00c780e929 [ 218.170964][T16898] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000003 [ 218.170980][T16898] RBP: 00007f00c5e77090 R08: 0000000000000000 R09: 0000000000000000 [ 218.170995][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.171013][T16898] R13: 0000000000000000 R14: 00007f00c7a35fa0 R15: 00007ffd9d77bf08 [ 218.171036][T16898] [ 218.599003][T16915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 218.650412][T16889] ieee802154 phy0 wpan0: encryption failed: -22 [ 218.679208][T16889] loop5: detected capacity change from 0 to 512 [ 218.698454][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3337'. [ 218.729657][T16889] EXT4-fs (loop5): too many log groups per flexible block group [ 218.737580][T16889] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 218.762552][T16889] EXT4-fs (loop5): mount failed [ 219.295895][T16942] lo speed is unknown, defaulting to 1000 [ 219.370955][T16956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3349'. [ 219.456152][T16983] FAULT_INJECTION: forcing a failure. [ 219.456152][T16983] name failslab, interval 1, probability 0, space 0, times 0 [ 219.468979][T16983] CPU: 1 UID: 0 PID: 16983 Comm: syz.1.3351 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 219.469087][T16983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.469099][T16983] Call Trace: [ 219.469105][T16983] [ 219.469111][T16983] __dump_stack+0x1d/0x30 [ 219.469262][T16983] dump_stack_lvl+0xe8/0x140 [ 219.469288][T16983] dump_stack+0x15/0x1b [ 219.469310][T16983] should_fail_ex+0x265/0x280 [ 219.469348][T16983] should_failslab+0x8c/0xb0 [ 219.469376][T16983] kmem_cache_alloc_node_noprof+0x57/0x320 [ 219.469461][T16983] ? __alloc_skb+0x101/0x320 [ 219.469499][T16983] __alloc_skb+0x101/0x320 [ 219.469535][T16983] netlink_alloc_large_skb+0xba/0xf0 [ 219.469638][T16983] netlink_sendmsg+0x3cf/0x6b0 [ 219.469670][T16983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.469695][T16983] __sock_sendmsg+0x145/0x180 [ 219.469726][T16983] ____sys_sendmsg+0x31e/0x4e0 [ 219.469817][T16983] ___sys_sendmsg+0x17b/0x1d0 [ 219.469875][T16983] __x64_sys_sendmsg+0xd4/0x160 [ 219.469922][T16983] x64_sys_call+0x2999/0x2fb0 [ 219.470011][T16983] do_syscall_64+0xd2/0x200 [ 219.470033][T16983] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.470068][T16983] ? clear_bhb_loop+0x40/0x90 [ 219.470095][T16983] ? clear_bhb_loop+0x40/0x90 [ 219.470123][T16983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.470209][T16983] RIP: 0033:0x7f00c780e929 [ 219.470229][T16983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.470252][T16983] RSP: 002b:00007f00c5e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.470275][T16983] RAX: ffffffffffffffda RBX: 00007f00c7a35fa0 RCX: 00007f00c780e929 [ 219.470291][T16983] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 219.470305][T16983] RBP: 00007f00c5e77090 R08: 0000000000000000 R09: 0000000000000000 [ 219.470317][T16983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.470458][T16983] R13: 0000000000000000 R14: 00007f00c7a35fa0 R15: 00007ffd9d77bf08 [ 219.470482][T16983] [ 219.703283][T16985] program syz.2.3341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.936933][T17025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3353'. [ 219.952710][T17026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3366'. [ 220.054370][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 220.088237][T17033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.095771][T17033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.109788][T17033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.117334][T17033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.185571][T17027] lo speed is unknown, defaulting to 1000 [ 220.769297][T17082] netlink: 'syz.0.3378': attribute type 39 has an invalid length. [ 220.863697][T17093] netlink: 'syz.3.3380': attribute type 2 has an invalid length. [ 220.971481][T17098] loop5: detected capacity change from 0 to 764 [ 221.032418][T17108] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3385'. [ 221.064606][T17108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3385'. [ 221.113155][T17118] SELinux: syz.5.3388 (17118) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 221.291423][T17132] netlink: 'syz.0.3394': attribute type 39 has an invalid length. [ 221.325185][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3397'. [ 221.488443][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 221.488462][ T29] audit: type=1400 audit(222.475:234047): avc: denied { write } for pid=17148 comm="syz.3.3402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 221.595992][T17143] syzkaller0: entered promiscuous mode [ 221.602797][T17143] syzkaller0: entered allmulticast mode [ 221.625070][T17149] vlan2: entered promiscuous mode [ 221.630288][T17149] bond0: entered promiscuous mode [ 221.635503][T17149] bond_slave_0: entered promiscuous mode [ 221.641314][T17149] bond_slave_1: entered promiscuous mode [ 221.647232][T17149] vlan2: entered allmulticast mode [ 221.652369][T17149] bond0: entered allmulticast mode [ 221.657582][T17149] bond_slave_0: entered allmulticast mode [ 221.663346][T17149] bond_slave_1: entered allmulticast mode [ 221.707540][ T29] audit: type=1326 audit(222.695:234048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.751799][ T29] audit: type=1326 audit(222.715:234049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.774904][ T29] audit: type=1326 audit(222.715:234050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.798256][ T29] audit: type=1326 audit(222.715:234051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.821392][ T29] audit: type=1326 audit(222.715:234052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.844633][ T29] audit: type=1326 audit(222.715:234053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.869215][ T29] audit: type=1326 audit(222.715:234054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.892657][ T29] audit: type=1326 audit(222.715:234055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 221.915858][ T29] audit: type=1326 audit(222.715:234056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17170 comm="syz.5.3407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 222.039118][T17184] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3412'. [ 222.162227][T17196] hub 9-0:1.0: USB hub found [ 222.167162][T17196] hub 9-0:1.0: 8 ports detected [ 222.491708][T17211] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1728) [ 222.501480][T17211] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 223.559521][T17227] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3428'. [ 223.906455][T17233] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3430'. [ 224.854254][T17247] netlink: 'syz.0.3436': attribute type 1 has an invalid length. [ 224.932498][T17247] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.027558][T17255] netlink: 'syz.0.3440': attribute type 10 has an invalid length. [ 225.060616][T17255] team0 (unregistering): Port device team_slave_0 removed [ 225.078527][T17255] team0 (unregistering): Port device team_slave_1 removed [ 225.252868][T17256] pim6reg1: entered promiscuous mode [ 225.284923][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3439'. [ 225.293997][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3439'. [ 225.459365][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3445'. [ 225.675134][T17322] xt_policy: neither incoming nor outgoing policy selected [ 226.705426][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 226.705440][ T29] audit: type=1326 audit(227.685:234276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.743527][ T29] audit: type=1326 audit(227.725:234277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.766720][ T29] audit: type=1326 audit(227.725:234278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.789950][ T29] audit: type=1326 audit(227.725:234279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.813140][ T29] audit: type=1326 audit(227.725:234280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.836398][ T29] audit: type=1326 audit(227.725:234281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.859606][ T29] audit: type=1326 audit(227.725:234282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.882746][ T29] audit: type=1326 audit(227.725:234283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.905955][ T29] audit: type=1326 audit(227.725:234284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.929450][ T29] audit: type=1326 audit(227.725:234285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17363 comm="syz.5.3465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 226.997992][T17372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3468'. [ 227.031194][T17372] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 227.242330][T17399] FAULT_INJECTION: forcing a failure. [ 227.242330][T17399] name failslab, interval 1, probability 0, space 0, times 0 [ 227.255246][T17399] CPU: 0 UID: 0 PID: 17399 Comm: syz.2.3476 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 227.255300][T17399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.255314][T17399] Call Trace: [ 227.255320][T17399] [ 227.255329][T17399] __dump_stack+0x1d/0x30 [ 227.255357][T17399] dump_stack_lvl+0xe8/0x140 [ 227.255414][T17399] dump_stack+0x15/0x1b [ 227.255495][T17399] should_fail_ex+0x265/0x280 [ 227.255530][T17399] ? nft_trans_table_add+0x36/0x190 [ 227.255555][T17399] should_failslab+0x8c/0xb0 [ 227.255578][T17399] __kmalloc_cache_noprof+0x4c/0x320 [ 227.255621][T17399] nft_trans_table_add+0x36/0x190 [ 227.255651][T17399] nf_tables_newtable+0x955/0xea0 [ 227.255714][T17399] nfnetlink_rcv+0xb96/0x1690 [ 227.255796][T17399] netlink_unicast+0x5a5/0x680 [ 227.255976][T17399] netlink_sendmsg+0x58b/0x6b0 [ 227.256006][T17399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.256033][T17399] __sock_sendmsg+0x145/0x180 [ 227.256081][T17399] ____sys_sendmsg+0x31e/0x4e0 [ 227.256118][T17399] ___sys_sendmsg+0x17b/0x1d0 [ 227.256176][T17399] __x64_sys_sendmsg+0xd4/0x160 [ 227.256326][T17399] x64_sys_call+0x2999/0x2fb0 [ 227.256356][T17399] do_syscall_64+0xd2/0x200 [ 227.256445][T17399] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 227.256550][T17399] ? clear_bhb_loop+0x40/0x90 [ 227.256600][T17399] ? clear_bhb_loop+0x40/0x90 [ 227.256632][T17399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.256668][T17399] RIP: 0033:0x7fd32c58e929 [ 227.256686][T17399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.256727][T17399] RSP: 002b:00007fd32abf7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.256753][T17399] RAX: ffffffffffffffda RBX: 00007fd32c7b5fa0 RCX: 00007fd32c58e929 [ 227.256770][T17399] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 227.256783][T17399] RBP: 00007fd32abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.256796][T17399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.256809][T17399] R13: 0000000000000000 R14: 00007fd32c7b5fa0 R15: 00007ffc89bd81c8 [ 227.256831][T17399] [ 227.560462][T17403] netlink: 'syz.2.3477': attribute type 39 has an invalid length. [ 227.739996][T17413] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 227.769040][T17415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3482'. [ 228.023027][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3484'. [ 228.301919][T17423] syzkaller0: entered promiscuous mode [ 228.307612][T17423] syzkaller0: entered allmulticast mode [ 228.372696][T17421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 228.457700][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 228.481211][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3491'. [ 228.491462][T17455] RDS: rds_bind could not find a transport for ::8001:0:20:0, load rds_tcp or rds_rdma? [ 228.653574][T17471] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 228.683428][T17474] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3500'. [ 228.762898][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3503'. [ 228.876701][T17485] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3505'. [ 228.996930][T17494] loop5: detected capacity change from 0 to 512 [ 229.015457][T17494] ext4: Unknown parameter 'hash' [ 229.040500][T17494] loop5: detected capacity change from 0 to 512 [ 229.369921][T17512] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3512'. [ 229.496186][T17519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3516'. [ 229.603208][T17521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.613768][T17521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.692357][T17528] netlink: 'syz.0.3519': attribute type 21 has an invalid length. [ 229.715532][T17532] netlink: zone id is out of range [ 229.767278][T17521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.777780][T17521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.839860][T17521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.850284][T17521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.900041][T17521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.910573][T17521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.973228][T17521] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.981662][T17521] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.994577][T17521] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.002931][T17521] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.015457][T17521] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.023809][T17521] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.036131][T17521] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 230.044519][T17521] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.146536][T17568] syzkaller0: entered promiscuous mode [ 230.152128][T17568] syzkaller0: entered allmulticast mode [ 230.533217][T17580] netlink: 'syz.0.3531': attribute type 39 has an invalid length. [ 231.600499][T17641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 231.790628][T17643] syzkaller0: entered promiscuous mode [ 231.797649][T17643] syzkaller0: entered allmulticast mode [ 232.413419][T17675] __nla_validate_parse: 7 callbacks suppressed [ 232.413438][T17675] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3564'. [ 232.449844][T17677] netlink: 'syz.5.3565': attribute type 39 has an invalid length. [ 232.507240][T17668] Set syz1 is full, maxelem 65536 reached [ 232.599489][T17683] FAULT_INJECTION: forcing a failure. [ 232.599489][T17683] name failslab, interval 1, probability 0, space 0, times 0 [ 232.612374][T17683] CPU: 1 UID: 0 PID: 17683 Comm: syz.3.3567 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 232.612409][T17683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 232.612423][T17683] Call Trace: [ 232.612429][T17683] [ 232.612437][T17683] __dump_stack+0x1d/0x30 [ 232.612464][T17683] dump_stack_lvl+0xe8/0x140 [ 232.612570][T17683] dump_stack+0x15/0x1b [ 232.612596][T17683] should_fail_ex+0x265/0x280 [ 232.612637][T17683] should_failslab+0x8c/0xb0 [ 232.612668][T17683] kmem_cache_alloc_node_noprof+0x57/0x320 [ 232.612705][T17683] ? __alloc_skb+0x101/0x320 [ 232.612838][T17683] __alloc_skb+0x101/0x320 [ 232.612880][T17683] _sctp_make_chunk+0x59/0x210 [ 232.612915][T17683] sctp_make_shutdown+0x67/0x210 [ 232.612987][T17683] sctp_sf_do_9_2_start_shutdown+0x27/0x280 [ 232.613151][T17683] sctp_sf_do_9_2_prm_shutdown+0x95/0xc0 [ 232.613199][T17683] sctp_do_sm+0xbe/0x3230 [ 232.613223][T17683] ? mntput_no_expire+0x6f/0x3c0 [ 232.613384][T17683] sctp_primitive_SHUTDOWN+0x74/0x90 [ 232.613427][T17683] sctp_close+0x273/0x550 [ 232.613460][T17683] ? ip_mc_drop_socket+0x1b6/0x1e0 [ 232.613519][T17683] ? inet_release+0x20/0xf0 [ 232.613564][T17683] inet_release+0xcb/0xf0 [ 232.613608][T17683] inet6_release+0x3e/0x60 [ 232.613716][T17683] sock_close+0x68/0x150 [ 232.613747][T17683] ? __pfx_sock_close+0x10/0x10 [ 232.613875][T17683] __fput+0x29b/0x650 [ 232.613913][T17683] ____fput+0x1c/0x30 [ 232.613968][T17683] task_work_run+0x131/0x1a0 [ 232.614002][T17683] exit_to_user_mode_loop+0xe4/0x100 [ 232.614035][T17683] do_syscall_64+0x1d6/0x200 [ 232.614112][T17683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.614154][T17683] ? clear_bhb_loop+0x40/0x90 [ 232.614185][T17683] ? clear_bhb_loop+0x40/0x90 [ 232.614219][T17683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.614249][T17683] RIP: 0033:0x7efd0bc1e929 [ 232.614270][T17683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.614304][T17683] RSP: 002b:00007efd0a287038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.614332][T17683] RAX: 0000000000000000 RBX: 00007efd0be45fa0 RCX: 00007efd0bc1e929 [ 232.614431][T17683] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000005 [ 232.614450][T17683] RBP: 00007efd0a287090 R08: 0000000000000000 R09: 0000000000000000 [ 232.614468][T17683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.614487][T17683] R13: 0000000000000000 R14: 00007efd0be45fa0 R15: 00007ffd5643f028 [ 232.614516][T17683] [ 232.888540][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 232.888560][ T29] audit: type=1326 audit(233.865:234610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 232.917946][ T29] audit: type=1326 audit(233.865:234611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 232.941166][ T29] audit: type=1326 audit(233.865:234612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 232.944645][T17689] Cannot find del_set index 0 as target [ 232.964292][ T29] audit: type=1326 audit(233.865:234613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 232.964336][ T29] audit: type=1326 audit(233.865:234614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.016103][ T29] audit: type=1326 audit(233.865:234615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.039198][ T29] audit: type=1326 audit(233.865:234616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.062256][ T29] audit: type=1326 audit(233.865:234617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.085338][ T29] audit: type=1326 audit(233.865:234618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.108489][ T29] audit: type=1326 audit(233.865:234619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17686 comm="syz.5.3568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0c147e929 code=0x7ffc0000 [ 233.372125][T17701] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.379503][T17701] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.409242][T17701] geneve1: entered promiscuous mode [ 233.415120][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3571'. [ 233.444474][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3572'. [ 233.487097][T17710] netlink: 'syz.0.3573': attribute type 6 has an invalid length. [ 233.530914][T17716] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3576'. [ 233.578861][T17720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=17720 comm=syz.0.3575 [ 233.624264][T17730] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3580'. [ 233.742990][T17738] loop5: detected capacity change from 0 to 764 [ 233.793951][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3584'. [ 233.821184][T17745] loop5: detected capacity change from 0 to 1024 [ 233.835485][T17745] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 233.846480][T17745] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 233.866960][T17745] JBD2: no valid journal superblock found [ 233.872893][T17745] EXT4-fs (loop5): Could not load journal inode [ 234.033610][T17757] netlink: 'syz.5.3588': attribute type 1 has an invalid length. [ 234.041732][T17757] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3588'. [ 234.461415][T17765] 9pnet_fd: Insufficient options for proto=fd [ 234.524202][T17770] 8021q: VLANs not supported on wg2 [ 234.550169][T17770] SET target dimension over the limit! [ 234.609690][T17772] FAULT_INJECTION: forcing a failure. [ 234.609690][T17772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 234.623143][T17772] CPU: 1 UID: 0 PID: 17772 Comm: syz.1.3591 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 234.623176][T17772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.623192][T17772] Call Trace: [ 234.623199][T17772] [ 234.623208][T17772] __dump_stack+0x1d/0x30 [ 234.623234][T17772] dump_stack_lvl+0xe8/0x140 [ 234.623305][T17772] dump_stack+0x15/0x1b [ 234.623320][T17772] should_fail_ex+0x265/0x280 [ 234.623350][T17772] should_fail_alloc_page+0xf2/0x100 [ 234.623380][T17772] __alloc_frozen_pages_noprof+0xff/0x360 [ 234.623478][T17772] alloc_pages_mpol+0xb3/0x250 [ 234.623514][T17772] alloc_pages_noprof+0x90/0x130 [ 234.623542][T17772] __pmd_alloc+0x47/0x470 [ 234.623639][T17772] handle_mm_fault+0x19d1/0x2be0 [ 234.623734][T17772] ? check_vma_flags+0x26e/0x340 [ 234.623770][T17772] __get_user_pages+0x1036/0x1fb0 [ 234.623812][T17772] get_user_pages_remote+0x1dc/0x7a0 [ 234.623840][T17772] get_arg_page+0x8e/0x1e0 [ 234.623867][T17772] copy_string_kernel+0x134/0x340 [ 234.623916][T17772] do_execveat_common+0x5ad/0x750 [ 234.623955][T17772] ? getname_flags+0x154/0x3b0 [ 234.624037][T17772] __x64_sys_execveat+0x73/0x90 [ 234.624075][T17772] x64_sys_call+0x2dae/0x2fb0 [ 234.624101][T17772] do_syscall_64+0xd2/0x200 [ 234.624120][T17772] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.624158][T17772] ? clear_bhb_loop+0x40/0x90 [ 234.624180][T17772] ? clear_bhb_loop+0x40/0x90 [ 234.624207][T17772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.624234][T17772] RIP: 0033:0x7f00c780e929 [ 234.624295][T17772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.624389][T17772] RSP: 002b:00007f00c5e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 234.624413][T17772] RAX: ffffffffffffffda RBX: 00007f00c7a35fa0 RCX: 00007f00c780e929 [ 234.624429][T17772] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 234.624445][T17772] RBP: 00007f00c5e77090 R08: 0000000000001000 R09: 0000000000000000 [ 234.624459][T17772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 234.624494][T17772] R13: 0000000000000000 R14: 00007f00c7a35fa0 R15: 00007ffd9d77bf08 [ 234.624513][T17772] [ 234.885511][T17776] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3592'. [ 235.025142][T17783] netlink: 'syz.1.3596': attribute type 39 has an invalid length. [ 235.130447][T17788] dummy0: entered allmulticast mode [ 235.135840][T17788] dummy0: left allmulticast mode [ 235.178479][T17790] can0: slcan on ttyS3. [ 235.321511][T17734] syz.0.3582 (17734) used greatest stack depth: 6824 bytes left [ 235.359366][T17803] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3599'. [ 235.441141][T17812] loop5: detected capacity change from 0 to 128 [ 235.451253][T17812] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.484855][T10253] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.504785][T17821] loop5: detected capacity change from 0 to 128 [ 235.557022][T17829] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3610'. [ 235.909455][T17868] netlink: 'syz.5.3621': attribute type 39 has an invalid length. [ 236.246809][T17789] can0 (unregistered): slcan off ttyS3. [ 236.268434][T17879] loop5: detected capacity change from 0 to 764 [ 236.633551][T17909] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 236.668820][T17911] FAULT_INJECTION: forcing a failure. [ 236.668820][T17911] name failslab, interval 1, probability 0, space 0, times 0 [ 236.681533][T17911] CPU: 0 UID: 0 PID: 17911 Comm: syz.0.3635 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 236.681557][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.681568][T17911] Call Trace: [ 236.681637][T17911] [ 236.681646][T17911] __dump_stack+0x1d/0x30 [ 236.681667][T17911] dump_stack_lvl+0xe8/0x140 [ 236.681685][T17911] dump_stack+0x15/0x1b [ 236.681701][T17911] should_fail_ex+0x265/0x280 [ 236.681751][T17911] should_failslab+0x8c/0xb0 [ 236.681773][T17911] kmem_cache_alloc_noprof+0x50/0x310 [ 236.681800][T17911] ? skb_clone+0x151/0x1f0 [ 236.681821][T17911] skb_clone+0x151/0x1f0 [ 236.681838][T17911] __netlink_deliver_tap+0x2c9/0x500 [ 236.682004][T17911] ? netlink_attachskb+0x2d1/0x610 [ 236.682095][T17911] netlink_sendskb+0x126/0x150 [ 236.682125][T17911] netlink_unicast+0x28a/0x680 [ 236.682160][T17911] netlink_ack+0x4c8/0x500 [ 236.682213][T17911] netlink_rcv_skb+0x192/0x220 [ 236.682301][T17911] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 236.682332][T17911] nfnetlink_rcv+0x16b/0x1690 [ 236.682354][T17911] ? __kfree_skb+0x109/0x150 [ 236.682442][T17911] ? nlmon_xmit+0x4f/0x60 [ 236.682466][T17911] ? consume_skb+0x49/0x150 [ 236.682536][T17911] ? nlmon_xmit+0x4f/0x60 [ 236.682618][T17911] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 236.682653][T17911] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 236.682692][T17911] ? __dev_queue_xmit+0x182/0x1fb0 [ 236.682797][T17911] ? ref_tracker_free+0x37d/0x3e0 [ 236.682838][T17911] ? __netlink_deliver_tap+0x4dc/0x500 [ 236.682882][T17911] netlink_unicast+0x5a5/0x680 [ 236.682970][T17911] netlink_sendmsg+0x58b/0x6b0 [ 236.682995][T17911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.683017][T17911] __sock_sendmsg+0x145/0x180 [ 236.683064][T17911] ____sys_sendmsg+0x31e/0x4e0 [ 236.683129][T17911] ___sys_sendmsg+0x17b/0x1d0 [ 236.683180][T17911] __x64_sys_sendmsg+0xd4/0x160 [ 236.683307][T17911] x64_sys_call+0x2999/0x2fb0 [ 236.683328][T17911] do_syscall_64+0xd2/0x200 [ 236.683349][T17911] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 236.683374][T17911] ? clear_bhb_loop+0x40/0x90 [ 236.683439][T17911] ? clear_bhb_loop+0x40/0x90 [ 236.683467][T17911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.683510][T17911] RIP: 0033:0x7ffaeba9e929 [ 236.683528][T17911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.683550][T17911] RSP: 002b:00007ffaea107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 236.683567][T17911] RAX: ffffffffffffffda RBX: 00007ffaebcc5fa0 RCX: 00007ffaeba9e929 [ 236.683579][T17911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 236.683648][T17911] RBP: 00007ffaea107090 R08: 0000000000000000 R09: 0000000000000000 [ 236.683660][T17911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.683703][T17911] R13: 0000000000000000 R14: 00007ffaebcc5fa0 R15: 00007ffdb7929628 [ 236.683758][T17911] [ 237.247601][T17941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.263004][T17941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.272988][T17941] random: crng reseeded on system resumption [ 237.463711][T17989] __nla_validate_parse: 3 callbacks suppressed [ 237.463729][T17989] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3642'. [ 237.534315][T17992] loop5: detected capacity change from 0 to 764 [ 237.896639][T18010] netlink: 'syz.2.3649': attribute type 13 has an invalid length. [ 238.041047][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 238.041066][ T29] audit: type=1326 audit(239.025:234965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17998 comm="syz.3.3645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 238.187219][ T29] audit: type=1400 audit(239.175:234966): avc: denied { name_bind } for pid=18018 comm="syz.1.3650" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 238.238942][ T29] audit: type=1400 audit(239.185:234967): avc: denied { connect } for pid=18020 comm="syz.2.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.258235][ T29] audit: type=1400 audit(239.195:234968): avc: denied { write } for pid=18020 comm="syz.2.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 238.293808][T18034] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3654'. [ 238.354820][T18036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3655'. [ 238.371421][T18041] FAULT_INJECTION: forcing a failure. [ 238.371421][T18041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.379698][ T29] audit: type=1326 audit(239.345:234969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c780e929 code=0x7ffc0000 [ 238.384589][T18041] CPU: 1 UID: 0 PID: 18041 Comm: syz.3.3651 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 238.384639][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.384725][T18041] Call Trace: [ 238.384732][T18041] [ 238.384742][T18041] __dump_stack+0x1d/0x30 [ 238.384771][T18041] dump_stack_lvl+0xe8/0x140 [ 238.384797][T18041] dump_stack+0x15/0x1b [ 238.384887][T18041] should_fail_ex+0x265/0x280 [ 238.384927][T18041] should_fail+0xb/0x20 [ 238.385011][T18041] should_fail_usercopy+0x1a/0x20 [ 238.385052][T18041] _copy_to_user+0x20/0xa0 [ 238.385125][T18041] simple_read_from_buffer+0xb5/0x130 [ 238.385168][T18041] proc_fail_nth_read+0x100/0x140 [ 238.385215][T18041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 238.385301][T18041] vfs_read+0x19d/0x6f0 [ 238.385339][T18041] ? __rcu_read_unlock+0x4f/0x70 [ 238.385369][T18041] ? __fget_files+0x184/0x1c0 [ 238.385399][T18041] ksys_read+0xda/0x1a0 [ 238.385516][T18041] __x64_sys_read+0x40/0x50 [ 238.385575][T18041] x64_sys_call+0x2d77/0x2fb0 [ 238.385606][T18041] do_syscall_64+0xd2/0x200 [ 238.385641][T18041] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 238.385718][T18041] ? clear_bhb_loop+0x40/0x90 [ 238.385748][T18041] ? clear_bhb_loop+0x40/0x90 [ 238.385801][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.385836][T18041] RIP: 0033:0x7efd0bc1d33c [ 238.385857][T18041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.385884][T18041] RSP: 002b:00007efd0a245030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.385929][T18041] RAX: ffffffffffffffda RBX: 00007efd0be46160 RCX: 00007efd0bc1d33c [ 238.385947][T18041] RDX: 000000000000000f RSI: 00007efd0a2450a0 RDI: 0000000000000003 [ 238.385965][T18041] RBP: 00007efd0a245090 R08: 0000000000000000 R09: 0000000000000000 [ 238.385984][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.386002][T18041] R13: 0000000000000001 R14: 00007efd0be46160 R15: 00007ffd5643f028 [ 238.386062][T18041] [ 238.433263][T18043] program syz.2.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.433518][ T29] audit: type=1326 audit(239.345:234970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c780e929 code=0x7ffc0000 [ 238.464401][T18040] FAULT_INJECTION: forcing a failure. [ 238.464401][T18040] name failslab, interval 1, probability 0, space 0, times 0 [ 238.467970][ T29] audit: type=1326 audit(239.345:234971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00c780e929 code=0x7ffc0000 [ 238.473422][T18040] CPU: 1 UID: 0 PID: 18040 Comm: syz.1.3657 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 238.473465][T18040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.473485][T18040] Call Trace: [ 238.473495][T18040] [ 238.473506][T18040] __dump_stack+0x1d/0x30 [ 238.473615][T18040] dump_stack_lvl+0xe8/0x140 [ 238.473643][T18040] dump_stack+0x15/0x1b [ 238.473719][T18040] should_fail_ex+0x265/0x280 [ 238.473760][T18040] should_failslab+0x8c/0xb0 [ 238.473867][T18040] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 238.473907][T18040] ? sidtab_sid2str_get+0xa0/0x130 [ 238.473949][T18040] kmemdup_noprof+0x2b/0x70 [ 238.473982][T18040] sidtab_sid2str_get+0xa0/0x130 [ 238.474013][T18040] security_sid_to_context_core+0x1eb/0x2e0 [ 238.474046][T18040] security_sid_to_context+0x27/0x40 [ 238.474141][T18040] selinux_lsmprop_to_secctx+0x67/0xf0 [ 238.474222][T18040] security_lsmprop_to_secctx+0x43/0x80 [ 238.474271][T18040] audit_log_task_context+0x77/0x190 [ 238.474400][T18040] audit_log_task+0xf4/0x250 [ 238.474487][T18040] audit_seccomp+0x61/0x100 [ 238.474522][T18040] ? __seccomp_filter+0x68c/0x10d0 [ 238.474631][T18040] __seccomp_filter+0x69d/0x10d0 [ 238.474676][T18040] __secure_computing+0x82/0x150 [ 238.474765][T18040] syscall_trace_enter+0xcf/0x1e0 [ 238.474824][T18040] do_syscall_64+0xac/0x200 [ 238.474860][T18040] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 238.474898][T18040] ? clear_bhb_loop+0x40/0x90 [ 238.474968][T18040] ? clear_bhb_loop+0x40/0x90 [ 238.475000][T18040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.475029][T18040] RIP: 0033:0x7f00c780d33c [ 238.475053][T18040] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 238.475078][T18040] RSP: 002b:00007f00c5e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 238.475107][T18040] RAX: ffffffffffffffda RBX: 00007f00c7a35fa0 RCX: 00007f00c780d33c [ 238.475144][T18040] RDX: 000000000000000f RSI: 00007f00c5e770a0 RDI: 0000000000000007 [ 238.475212][T18040] RBP: 00007f00c5e77090 R08: 0000000000000000 R09: 0000000000000000 [ 238.475245][T18040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.475263][T18040] R13: 0000000000000000 R14: 00007f00c7a35fa0 R15: 00007ffd9d77bf08 [ 238.475358][T18040] [ 238.475371][T18040] audit: error in audit_log_task_context [ 238.478490][ T29] audit: type=1326 audit(239.345:234972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c780e929 code=0x7ffc0000 [ 238.940559][ T29] audit: type=1326 audit(239.345:234973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18039 comm="syz.1.3657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00c780e929 code=0x7ffc0000 [ 239.240201][T18072] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3668'. [ 239.342860][T18082] FAULT_INJECTION: forcing a failure. [ 239.342860][T18082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.355970][T18082] CPU: 0 UID: 0 PID: 18082 Comm: syz.3.3671 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 239.356063][T18082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.356079][T18082] Call Trace: [ 239.356088][T18082] [ 239.356098][T18082] __dump_stack+0x1d/0x30 [ 239.356123][T18082] dump_stack_lvl+0xe8/0x140 [ 239.356148][T18082] dump_stack+0x15/0x1b [ 239.356168][T18082] should_fail_ex+0x265/0x280 [ 239.356269][T18082] should_fail+0xb/0x20 [ 239.356301][T18082] should_fail_usercopy+0x1a/0x20 [ 239.356338][T18082] _copy_to_user+0x20/0xa0 [ 239.356382][T18082] rng_dev_read+0x3ef/0x740 [ 239.356415][T18082] ? __pfx_rng_dev_read+0x10/0x10 [ 239.356448][T18082] vfs_readv+0x3fb/0x690 [ 239.356488][T18082] __x64_sys_preadv+0xfd/0x1c0 [ 239.356578][T18082] x64_sys_call+0x1503/0x2fb0 [ 239.356605][T18082] do_syscall_64+0xd2/0x200 [ 239.356626][T18082] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 239.356653][T18082] ? clear_bhb_loop+0x40/0x90 [ 239.356697][T18082] ? clear_bhb_loop+0x40/0x90 [ 239.356724][T18082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.356750][T18082] RIP: 0033:0x7efd0bc1e929 [ 239.356768][T18082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.356791][T18082] RSP: 002b:00007efd0a287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 239.356813][T18082] RAX: ffffffffffffffda RBX: 00007efd0be45fa0 RCX: 00007efd0bc1e929 [ 239.356906][T18082] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 239.356921][T18082] RBP: 00007efd0a287090 R08: 0000000000000000 R09: 0000000000000000 [ 239.356936][T18082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.356950][T18082] R13: 0000000000000000 R14: 00007efd0be45fa0 R15: 00007ffd5643f028 [ 239.356975][T18082] [ 239.589293][T18088] netlink: 'syz.5.3674': attribute type 2 has an invalid length. [ 239.616167][T18088] bridge0: port 3(team0) entered disabled state [ 239.640145][T18088] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.650928][T18088] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.746067][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3678'. [ 239.755186][T18103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 239.830921][T18103] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 240.071259][T18119] lo speed is unknown, defaulting to 1000 [ 240.099667][T18138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 240.232972][T18163] netlink: 'syz.1.3690': attribute type 3 has an invalid length. [ 240.240944][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3690'. [ 240.581792][T18197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3699'. [ 240.644674][T18202] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3701'. [ 240.930831][T18230] FAULT_INJECTION: forcing a failure. [ 240.930831][T18230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.944102][T18230] CPU: 0 UID: 0 PID: 18230 Comm: syz.0.3713 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 240.944143][T18230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.944161][T18230] Call Trace: [ 240.944171][T18230] [ 240.944182][T18230] __dump_stack+0x1d/0x30 [ 240.944211][T18230] dump_stack_lvl+0xe8/0x140 [ 240.944238][T18230] dump_stack+0x15/0x1b [ 240.944317][T18230] should_fail_ex+0x265/0x280 [ 240.944358][T18230] should_fail+0xb/0x20 [ 240.944395][T18230] should_fail_usercopy+0x1a/0x20 [ 240.944451][T18230] _copy_from_iter+0x38a/0xe40 [ 240.944503][T18230] ? should_failslab+0x8c/0xb0 [ 240.944526][T18230] ? __kmalloc_noprof+0x1dd/0x3e0 [ 240.944556][T18230] ? sctp_make_abort_user+0x17b/0x3a0 [ 240.944608][T18230] sctp_make_abort_user+0x1c6/0x3a0 [ 240.944652][T18230] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 240.944694][T18230] sctp_sendmsg+0x10bb/0x18d0 [ 240.944733][T18230] ? __pfx_sctp_sendmsg+0x10/0x10 [ 240.944892][T18230] inet_sendmsg+0xc2/0xd0 [ 240.944944][T18230] __sock_sendmsg+0x102/0x180 [ 240.944978][T18230] ____sys_sendmsg+0x31e/0x4e0 [ 240.945043][T18230] ___sys_sendmsg+0x17b/0x1d0 [ 240.945107][T18230] __x64_sys_sendmsg+0xd4/0x160 [ 240.945158][T18230] x64_sys_call+0x2999/0x2fb0 [ 240.945189][T18230] do_syscall_64+0xd2/0x200 [ 240.945211][T18230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.945289][T18230] ? clear_bhb_loop+0x40/0x90 [ 240.945319][T18230] ? clear_bhb_loop+0x40/0x90 [ 240.945349][T18230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.945385][T18230] RIP: 0033:0x7ffaeba9e929 [ 240.945470][T18230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.945497][T18230] RSP: 002b:00007ffaea0e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.945524][T18230] RAX: ffffffffffffffda RBX: 00007ffaebcc6080 RCX: 00007ffaeba9e929 [ 240.945541][T18230] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 240.945556][T18230] RBP: 00007ffaea0e6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.945570][T18230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.945592][T18230] R13: 0000000000000000 R14: 00007ffaebcc6080 R15: 00007ffdb7929628 [ 240.945621][T18230] [ 241.370122][T18252] FAULT_INJECTION: forcing a failure. [ 241.370122][T18252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.383441][T18252] CPU: 0 UID: 0 PID: 18252 Comm: syz.3.3724 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 241.383469][T18252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.383483][T18252] Call Trace: [ 241.383491][T18252] [ 241.383500][T18252] __dump_stack+0x1d/0x30 [ 241.383535][T18252] dump_stack_lvl+0xe8/0x140 [ 241.383560][T18252] dump_stack+0x15/0x1b [ 241.383580][T18252] should_fail_ex+0x265/0x280 [ 241.383615][T18252] should_fail+0xb/0x20 [ 241.383644][T18252] should_fail_usercopy+0x1a/0x20 [ 241.383685][T18252] _copy_from_user+0x1c/0xb0 [ 241.383703][T18252] ___sys_sendmsg+0xc1/0x1d0 [ 241.383783][T18252] __x64_sys_sendmsg+0xd4/0x160 [ 241.383829][T18252] x64_sys_call+0x2999/0x2fb0 [ 241.383850][T18252] do_syscall_64+0xd2/0x200 [ 241.383934][T18252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.384001][T18252] ? clear_bhb_loop+0x40/0x90 [ 241.384026][T18252] ? clear_bhb_loop+0x40/0x90 [ 241.384144][T18252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.384172][T18252] RIP: 0033:0x7efd0bc1e929 [ 241.384191][T18252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.384272][T18252] RSP: 002b:00007efd0a287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.384293][T18252] RAX: ffffffffffffffda RBX: 00007efd0be45fa0 RCX: 00007efd0bc1e929 [ 241.384305][T18252] RDX: 0000000000000000 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 241.384317][T18252] RBP: 00007efd0a287090 R08: 0000000000000000 R09: 0000000000000000 [ 241.384329][T18252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.384340][T18252] R13: 0000000000000000 R14: 00007efd0be45fa0 R15: 00007ffd5643f028 [ 241.384359][T18252] [ 241.597208][T18256] netlink: 'syz.1.3726': attribute type 27 has an invalid length. [ 241.635595][T18256] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.642862][T18256] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.690075][T18256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.697721][T18260] loop5: detected capacity change from 0 to 2048 [ 241.703500][T18256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.719524][T18260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.741908][T18260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.765707][T18256] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.774241][T18256] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.782835][T18256] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.791493][T18256] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.819681][T18256] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.828310][T18256] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.836810][T18256] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.845263][T18256] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 241.879886][T18277] netlink: 'syz.0.3729': attribute type 1 has an invalid length. [ 241.926901][T18259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.935733][T18259] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.947703][T18259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.968160][T18257] uprobe: syz.5.3727:18257 failed to unregister, leaking uprobe [ 242.145290][T18305] loop5: detected capacity change from 0 to 764 [ 242.222941][T18312] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 242.324718][T18316] lo speed is unknown, defaulting to 1000 [ 242.522805][T18361] tipc: Started in network mode [ 242.527915][T18361] tipc: Node identity 6ea66233c20b, cluster identity 4711 [ 242.535236][T18361] tipc: Enabled bearer , priority 0 [ 242.551222][T18360] tipc: Disabling bearer [ 243.088105][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 243.088179][ T29] audit: type=1400 audit(244.075:235103): avc: denied { bind } for pid=18396 comm="syz.2.3762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 243.346948][ T29] audit: type=1326 audit(244.335:235104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.371776][ T29] audit: type=1326 audit(244.335:235105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.394954][ T29] audit: type=1326 audit(244.335:235106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.418237][ T29] audit: type=1326 audit(244.335:235107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.441453][ T29] audit: type=1326 audit(244.335:235108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.464571][ T29] audit: type=1326 audit(244.335:235109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.487710][ T29] audit: type=1326 audit(244.335:235110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.510928][ T29] audit: type=1326 audit(244.335:235111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.534026][ T29] audit: type=1326 audit(244.335:235112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18413 comm="syz.3.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7efd0bc1e929 code=0x7ffc0000 [ 243.735928][T18426] netlink: 'syz.0.3775': attribute type 39 has an invalid length. [ 244.056062][T18445] FAULT_INJECTION: forcing a failure. [ 244.056062][T18445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 244.069570][T18445] CPU: 1 UID: 0 PID: 18445 Comm: syz.1.3780 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 244.069606][T18445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.069627][T18445] Call Trace: [ 244.069635][T18445] [ 244.069645][T18445] __dump_stack+0x1d/0x30 [ 244.069680][T18445] dump_stack_lvl+0xe8/0x140 [ 244.069734][T18445] dump_stack+0x15/0x1b [ 244.069756][T18445] should_fail_ex+0x265/0x280 [ 244.069814][T18445] should_fail_alloc_page+0xf2/0x100 [ 244.069846][T18445] __alloc_frozen_pages_noprof+0xff/0x360 [ 244.069886][T18445] alloc_pages_mpol+0xb3/0x250 [ 244.069928][T18445] folio_alloc_mpol_noprof+0x39/0x80 [ 244.070033][T18445] shmem_get_folio_gfp+0x3cf/0xd60 [ 244.070113][T18445] shmem_write_begin+0xa8/0x190 [ 244.070153][T18445] generic_perform_write+0x181/0x490 [ 244.070184][T18445] shmem_file_write_iter+0xc5/0xf0 [ 244.070232][T18445] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 244.070275][T18445] vfs_write+0x49d/0x8e0 [ 244.070376][T18445] __x64_sys_pwrite64+0xfd/0x150 [ 244.070418][T18445] x64_sys_call+0xe45/0x2fb0 [ 244.070507][T18445] do_syscall_64+0xd2/0x200 [ 244.070526][T18445] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.070559][T18445] ? clear_bhb_loop+0x40/0x90 [ 244.070585][T18445] ? clear_bhb_loop+0x40/0x90 [ 244.070616][T18445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.070661][T18445] RIP: 0033:0x7f00c780e929 [ 244.070685][T18445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.070760][T18445] RSP: 002b:00007f00c5e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 244.070788][T18445] RAX: ffffffffffffffda RBX: 00007f00c7a36080 RCX: 00007f00c780e929 [ 244.070800][T18445] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 244.070814][T18445] RBP: 00007f00c5e56090 R08: 0000000000000000 R09: 0000000000000000 [ 244.070830][T18445] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 244.070909][T18445] R13: 0000000000000000 R14: 00007f00c7a36080 R15: 00007ffd9d77bf08 [ 244.070933][T18445] [ 244.307643][T18452] FAULT_INJECTION: forcing a failure. [ 244.307643][T18452] name failslab, interval 1, probability 0, space 0, times 0 [ 244.320527][T18452] CPU: 0 UID: 0 PID: 18452 Comm: syz.2.3784 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 244.320556][T18452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.320573][T18452] Call Trace: [ 244.320580][T18452] [ 244.320649][T18452] __dump_stack+0x1d/0x30 [ 244.320700][T18452] dump_stack_lvl+0xe8/0x140 [ 244.320723][T18452] dump_stack+0x15/0x1b [ 244.320743][T18452] should_fail_ex+0x265/0x280 [ 244.320835][T18452] should_failslab+0x8c/0xb0 [ 244.320863][T18452] kmem_cache_alloc_noprof+0x50/0x310 [ 244.320913][T18452] ? security_file_alloc+0x32/0x100 [ 244.320957][T18452] security_file_alloc+0x32/0x100 [ 244.320997][T18452] init_file+0x5c/0x1d0 [ 244.321093][T18452] alloc_empty_file+0x8b/0x200 [ 244.321155][T18452] path_openat+0x68/0x2170 [ 244.321189][T18452] ? _parse_integer_limit+0x170/0x190 [ 244.321226][T18452] ? kstrtoull+0x111/0x140 [ 244.321327][T18452] ? kstrtouint+0x76/0xc0 [ 244.321368][T18452] do_filp_open+0x109/0x230 [ 244.321414][T18452] do_sys_openat2+0xa6/0x110 [ 244.321446][T18452] __x64_sys_openat+0xf2/0x120 [ 244.321480][T18452] x64_sys_call+0x1af/0x2fb0 [ 244.321517][T18452] do_syscall_64+0xd2/0x200 [ 244.321578][T18452] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.321608][T18452] ? clear_bhb_loop+0x40/0x90 [ 244.321633][T18452] ? clear_bhb_loop+0x40/0x90 [ 244.321730][T18452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.321767][T18452] RIP: 0033:0x7fd32c58e929 [ 244.321786][T18452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.321831][T18452] RSP: 002b:00007fd32abf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 244.321855][T18452] RAX: ffffffffffffffda RBX: 00007fd32c7b5fa0 RCX: 00007fd32c58e929 [ 244.321871][T18452] RDX: 000000000000275a RSI: 0000200000000440 RDI: ffffffffffffff9c [ 244.321887][T18452] RBP: 00007fd32abf7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.321904][T18452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.321919][T18452] R13: 0000000000000000 R14: 00007fd32c7b5fa0 R15: 00007ffc89bd81c8 [ 244.322009][T18452] [ 244.587723][T18458] netlink: 'syz.2.3786': attribute type 39 has an invalid length. [ 244.606398][T18442] ================================================================== [ 244.614547][T18442] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 244.624403][T18442] [ 244.626768][T18442] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 244.634860][T18442] tick_do_update_jiffies64+0x113/0x1c0 [ 244.640452][T18442] tick_nohz_handler+0x7f/0x2d0 [ 244.645346][T18442] __hrtimer_run_queues+0x20f/0x5a0 [ 244.650581][T18442] hrtimer_interrupt+0x21a/0x460 [ 244.655536][T18442] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 244.661458][T18442] sysvec_apic_timer_interrupt+0x6f/0x80 [ 244.667121][T18442] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.673130][T18442] __tsan_read4+0xb7/0x190 [ 244.677570][T18442] __tlb_remove_folio_pages+0x89/0x220 [ 244.683053][T18442] unmap_page_range+0x158a/0x2740 [ 244.688105][T18442] unmap_vmas+0x23d/0x3a0 [ 244.692464][T18442] exit_mmap+0x1b0/0x6c0 [ 244.696720][T18442] __mmput+0x28/0x1c0 [ 244.700750][T18442] mmput+0x40/0x50 [ 244.704488][T18442] exit_mm+0xe4/0x190 [ 244.708496][T18442] do_exit+0x417/0x1590 [ 244.712671][T18442] do_group_exit+0xff/0x140 [ 244.717194][T18442] get_signal+0xe59/0xf70 [ 244.721545][T18442] arch_do_signal_or_restart+0x96/0x480 [ 244.727106][T18442] exit_to_user_mode_loop+0x7a/0x100 [ 244.732406][T18442] do_syscall_64+0x1d6/0x200 [ 244.737003][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.742912][T18442] [ 244.745253][T18442] read to 0xffffffff868099c0 of 8 bytes by task 18442 on cpu 0: [ 244.752907][T18442] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 244.759175][T18442] count_shadow_nodes+0x6a/0x230 [ 244.764151][T18442] do_shrink_slab+0x63/0x680 [ 244.768774][T18442] shrink_slab+0x448/0x760 [ 244.773212][T18442] shrink_node+0x6c3/0x2120 [ 244.777735][T18442] do_try_to_free_pages+0x3f6/0xcd0 [ 244.782949][T18442] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 244.788881][T18442] try_charge_memcg+0x358/0x9e0 [ 244.793757][T18442] obj_cgroup_charge_pages+0xa6/0x150 [ 244.799149][T18442] __memcg_kmem_charge_page+0x9f/0x170 [ 244.804630][T18442] __alloc_frozen_pages_noprof+0x188/0x360 [ 244.810461][T18442] alloc_pages_mpol+0xb3/0x250 [ 244.815251][T18442] alloc_pages_noprof+0x90/0x130 [ 244.820227][T18442] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 244.826166][T18442] __kvmalloc_node_noprof+0x30f/0x4e0 [ 244.831567][T18442] ip_set_alloc+0x1f/0x30 [ 244.835941][T18442] hash_netiface_create+0x282/0x740 [ 244.841174][T18442] ip_set_create+0x3c9/0x960 [ 244.845849][T18442] nfnetlink_rcv_msg+0x4c3/0x590 [ 244.850811][T18442] netlink_rcv_skb+0x120/0x220 [ 244.855625][T18442] nfnetlink_rcv+0x16b/0x1690 [ 244.860337][T18442] netlink_unicast+0x5a5/0x680 [ 244.865124][T18442] netlink_sendmsg+0x58b/0x6b0 [ 244.869900][T18442] __sock_sendmsg+0x145/0x180 [ 244.874596][T18442] ____sys_sendmsg+0x31e/0x4e0 [ 244.879516][T18442] ___sys_sendmsg+0x17b/0x1d0 [ 244.884234][T18442] __x64_sys_sendmsg+0xd4/0x160 [ 244.889113][T18442] x64_sys_call+0x2999/0x2fb0 [ 244.893809][T18442] do_syscall_64+0xd2/0x200 [ 244.898330][T18442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.904244][T18442] [ 244.906574][T18442] value changed: 0x00000000ffffea21 -> 0x00000000ffffea22 [ 244.913687][T18442] [ 244.916017][T18442] Reported by Kernel Concurrency Sanitizer on: [ 244.922196][T18442] CPU: 0 UID: 0 PID: 18442 Comm: syz.1.3780 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 244.934738][T18442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.944811][T18442] ==================================================================