last executing test programs: 3m3.805560534s ago: executing program 2 (id=1774): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e3"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r10}, 0x18) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 3m3.669556135s ago: executing program 2 (id=1777): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000640)={[{@delalloc}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007ae}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40095505, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) close_range(r2, 0xffffffffffffffff, 0x0) fcntl$setflags(r0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x30a, 0x9, 0x0, 0x1, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m1.79468538s ago: executing program 2 (id=1795): r0 = getpid() ioprio_set$pid(0x2, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(0x0) 3m1.732275255s ago: executing program 2 (id=1796): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r0) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf251b00000008000100", @ANYRES32=0x0, @ANYBLOB="0be4e44275aeed12a174b6283dff8a0b34bf9923bea6770e2ff542c919e059b8f45c5fba16a148e4464573f3231bfc1bc8a399dc062ae2612f1b7599792dfdded98b815a85dff4476934c5ba2db1300d689e57b5a3a4e45f32fc3d15a5fe827e75ec586f352034e37ad24eb4c409dd3dad8892f6eb453f13407faa8f32310ccac00e444277e1c229e6dec6bb24b2fd7259016d28cf68f39a2d6a93c6d546a1275fa819e1"], 0x1c}, 0x1, 0x0, 0x0, 0x44050}, 0x2400cc84) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[], 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) cachestat(r4, &(0x7f00000001c0)={0xb0, 0xf5}, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m1.495141654s ago: executing program 2 (id=1798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) uname(&(0x7f00000002c0)=""/229) 3m1.198067939s ago: executing program 2 (id=1802): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e324bb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r10}, 0x18) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 3m1.197503249s ago: executing program 32 (id=1802): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)='4', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r4, r5+10000000}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/28], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r0, 0x20, &(0x7f0000000440)={&(0x7f0000000300)=""/12, 0xc, 0x0, &(0x7f0000000c00)=""/4096, 0x1000}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018640000000000000000020003000000012f0600080000009500000000000000254002000000000018460000fdffffff000000000000000085100000f9ffffff9500000000000000e59f38ba34b7727c1d63e754236166dc7ac979c2be32f9e5661e639a05f9e324bb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rss_stat\x00', r9}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aa8000/0x2000)=nil, 0x2000, 0x10, 0x4, 0x40000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap(&(0x7f0000106000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x1010, 0xffffffffffffffff, 0xdf8b9000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r10}, 0x18) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000140a03000000000000000000010000040900010073797a30000000000900000073797a310000000000000800bdcee228aaceb9fdfd80b12cd2514909c4f3c4c7653e94517e86e7027b67a4d715221d6075e5bc52fa8f0c486243d9dda1ef97939fceeeae794caf79e1374a28354c57904af228f6c78fb174b9f9d4f16a1d12cd040ba3bb0e9ed184aad3402bb623179666f04857b6b09339ef31b5b128383124bbffea2a92d98dfedc8b56baeaf77d8c9a7f30d5344cd279c4051a8b02958418be4ccb92b0e236e340faf351bdb4d16e1acffd00000900020073797a30000000000500064000000000000000030900020054797a3200000000140000001100010000000000000000dd0100003fad46223542249a302544de355baa7a7abd903b66c7e641fe5235263e7c638f3d9bb1fac98190aa357538032206d280782cba1121b75daa1bd2cec5f63444bd21c75350ea4627f367108168669f6b9f52278bf282b01c967583c02587d6fa7c094943f87f10fc86cc25b9eebe1230ddc726e937af1edefe59d904103016b70a4a0ce79cce78c10944ccb336d2b0bc0da7bbc9987673d32c01ee36a4a0477fa437f9003f862f777dd84b7e73309ecd91041bcc74e10269005edd4954ac47e441f0fab813dd602ba537c5ccf5c7e70e72593b4fc7bf2283681a410d0355f450a4719492e0ba9fbe4b81b8fb05dc6b"], 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0x0, &(0x7f00000002c0)) 2m15.856080655s ago: executing program 5 (id=2475): r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xd8, 0x10d, 0x5, "ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6"}], 0xd8}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 2m15.823916598s ago: executing program 5 (id=2476): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a00100000000280000012", 0x2d}], 0x1}, 0x20008800) 2m15.772605502s ago: executing program 5 (id=2478): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x3, 0x80000, 0x2, 0x2, 0xf1b, 0x0, 0x0, 0x2000000000000, 0x2, 0x4, 0x1, 0x0, 0x7639, 0x3, 0xfff, 0x0, 0x8000000000001, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9d}}, @common=@ah={{0x30}, {[0x4380, 0x4], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x5, 0x2, [0x3f, 0x38, 0x28, 0x3b, 0x11, 0x1d, 0x13, 0x3, 0xb, 0x5, 0x16, 0xf, 0x3c, 0x1d, 0x14, 0x3a], 0x2, 0x62423f3, 0x5e9}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0x0, 'veth1\x00', 'bond0\x00', {0xff}, {0xff}, 0x1, 0x0, 0x4b}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0xf538, 0x2, 0x1, 'syz1\x00', 0x9}}, @common=@addrtype={{0x30}, {0x44, 0x28, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, 0xff, 0xffffff00, 'pim6reg1\x00', 'ip6_vti0\x00', {}, {}, 0x73, 0x1, 0x42}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x4, 0x3, 0x2, 0xc, 0x1], 0x4, 0x1}}}, @common=@ah={{0x30}, {[0xfff, 0xb0]}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xe3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) dup3(r4, 0xffffffffffffffff, 0x80000) 2m14.880723046s ago: executing program 5 (id=2485): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380), 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) 2m14.681915952s ago: executing program 5 (id=2491): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0xfff2, 0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="16ce4a3967", 0x5}], 0x1}, 0x4000009) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) fcntl$setlease(r6, 0x400, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x44, r8, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x67, 0x67}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c5}, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x8, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff4}, 0x8010, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r4], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x800000009) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) fsetxattr(r9, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='@\x00', 0x7c8, 0x0) 2m14.083253171s ago: executing program 5 (id=2497): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2m14.052464974s ago: executing program 33 (id=2497): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 1.678404802s ago: executing program 6 (id=4803): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r0, 0x0, 0x400}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.652127234s ago: executing program 4 (id=4806): sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="09005d9646d2f9015430ee97af0000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fcdbdf252000000008000300", @ANYRES32=r0, @ANYBLOB="0c0099000700000001000000"], 0x28}, 0x1, 0x0, 0x0, 0x24010004}, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000240), 0x3, 0x4e6, &(0x7f0000001240)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000300)='./file0/file0/file0\x00', 0x4040, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f00000007c0)) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0)={0x0, 0x22, 0x2}, 0x18) r6 = openat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x2, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb6500, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r10}, 0x10) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007e4ff00f8ffffffb703000008000000b704000000000000850000000d0000009589bdab2e22cc4bfda0f6a5bae5c56e8e6392e604deb3bc004f9472ad"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r7, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r11], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYRESDEC=r10, @ANYRES32=r1, @ANYRES32=r9, @ANYRESOCT=0x0, @ANYRESHEX=r10, @ANYRES32=r4], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.635111695s ago: executing program 6 (id=4807): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306050000010000000000000000"], 0x1c}}, 0x8d0) 1.523353975s ago: executing program 6 (id=4809): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRES64], 0x8, 0x2f6, &(0x7f0000001cc0)="$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") bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x80000000002f423f, 0xfffffffffffffffc, 0x9704, 0x0, 0x9, 0x0, 0x4, 0x3, 0x80000, 0x2, 0x2, 0xf1b, 0x0, 0x0, 0x2000000000000, 0x2, 0x4, 0x1, 0x0, 0x7639, 0x3, 0xfff, 0x0, 0x8000000000001, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x488, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000000300), {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x9d}}, @common=@ah={{0x30}, {[0x4380, 0x4], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x5, 0x2, [0x3f, 0x38, 0x28, 0x3b, 0x11, 0x1d, 0x13, 0x3, 0xb, 0x5, 0x16, 0xf, 0x3c, 0x1d, 0x14, 0x3a], 0x2, 0x62423f3, 0x5e9}}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0xe}, 0xff000000, 0x0, 'veth1\x00', 'bond0\x00', {0xff}, {0xff}, 0x1, 0x0, 0x4b}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x1, 0xf538, 0x2, 0x1, 'syz1\x00', 0x9}}, @common=@addrtype={{0x30}, {0x44, 0x28, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, 0xff, 0xffffff00, 'pim6reg1\x00', 'ip6_vti0\x00', {}, {}, 0x73, 0x1, 0x42}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x1, 0x4, 0x3, 0x2, 0xc, 0x1], 0x4, 0x1}}}, @common=@ah={{0x30}, {[0xfff, 0xb0]}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xe3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r5 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}) io_uring_enter(r5, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) dup3(r5, r3, 0x80000) 1.434334552s ago: executing program 4 (id=4811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000004c0), 0xffffff81, r2}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.317087142s ago: executing program 6 (id=4814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e0101000000000000000000000000dc0b140d00000000000000aa040000000000000000000000000000002c000000a9e53faf2af7b8a7fbd44d80c9", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.195332942s ago: executing program 4 (id=4818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e0101000000000000000000000000dc0b140d00000000000000aa040000000000000000000000000000002c000000a9e53faf2af7b8a7fbd44d80c9", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.193688372s ago: executing program 6 (id=4820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.175775993s ago: executing program 4 (id=4821): r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x8, 0x6, 0x80000000, 0x6ed2, 0x0, 0x1}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x7, 0x4, 0x10, 0x7, 0xf72a, 0x1}) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x81, 0x7, 0xade1, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x67, 0x0, 0xf4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @lsrr={0x83, 0xb, 0x53, [@broadcast, @remote]}, @end, @rr={0x7, 0x2b, 0x23, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @empty, @remote, @loopback, @remote]}, @noop, @generic={0x89, 0x9, "2b00ca817236c9"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r1, 0x10, 0x80, 0x9, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@end, @rr={0x7, 0x17, 0x34, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x8}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000340)=""/251, 0x28, 0xfb, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4f9, 0x0, r3, 0x7f, '\x00', r2, r4, 0x0, 0x4, 0x1}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', r1, 0x10, 0x40, 0xc338, 0xffffffff, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@end, @rr={0x7, 0xf, 0x97, [@broadcast, @local, @multicast1]}]}}}}}) capset(&(0x7f00000005c0)={0x19980330, r0}, &(0x7f0000000600)={0xfffffffe, 0x7, 0xe90d, 0xffffffff, 0x10, 0x4d11}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) shutdown(r6, 0x1) sched_getaffinity(r0, 0x8, &(0x7f0000000640)) r7 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000006c0)={0x4}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000800), &(0x7f0000000840)={0x0, 0xfb, 0xcb, 0x0, 0xd, "d96da13d61f5b14d8f405b74b39dbe61", "29033b422c7a6a95d9580ee689f4850584594288c1d3b1dcaa33e06c615bcaaa7121d7229ca9f638821aa5f93823fc61fee25f90d949af139d5607656e71b5448f0b3ffcab9e694785a780d31b477cb191cd9f9de0f76cec8a55e701b534f4f4a38077caf0ce37f0e340ce14b2f40456ea846b9f04587e8493a5c01237f3ff26485cd84c59820b2a0cbed08e474341c09b541f92d276103d4886d97080b80bb30a161b20ec9f59f5f17015ecd64755e79de8fb7db04e"}, 0xcb, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000a40)={&(0x7f0000000940)="645429045ca31dac911d264321e4bfc9e7f5c75f89f9b5341711508367b27ef047808d4a67db24704b36e01a8927c958ddfdf4240ed9535089f294094a2ad018f2cf7247b23d7bc262b47a95276499c51173c57043a415beb0e957b745089df73d43d66eb96e7cbf42186f669a8849fe075f39f83ff7f346efb4cf565eba264cb0bc7449e061ac7c15bfbe8ef6c17a0b49a3e3073242262118d522a6f42eae7a15a49a8583d2957b82749ccdabe45c785629f96e7c7b9c92c337a554ed87adbc82b72c4ec06db7cb80762b65760223959fcdd150537eb53a", 0xd8}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x94a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x647b}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x8c}}, 0x804) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000c40)) capget(&(0x7f0000000c80)={0x19980330, r0}, &(0x7f0000000cc0)={0x8, 0x8, 0x7, 0x3, 0x1, 0xfffffbad}) sendmsg$802154_dgram(r8, &(0x7f0000001d80)={&(0x7f0000000d00)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000001d40)={&(0x7f0000000d40)="e46c12342a53b5aa63650b785cae592e191076c5df00f5aa0341436e83a376ac62a7dcbdbd8ba91785e3bcbeb14e3210050f3b25ad0ce75a117dc852315328c81b594cc79717fc956b747b014d68f0205e664b3f2afa1c3389a8e5a19b8274be9f59173dc79d04b75108a7e83eccd3e8308d63c3991fc04150ac9cb788e5621fc133b1de400c593a4fb9cdac1b42d87229fc6f48f0a3cebaacb0878c9fb71663725b80a5ab3a4d2f058d085d3ba64dbb94aef9caab737deeb821faceedef7cf93c0c943899a6cafd328f400827fdfe5847469df46ee18315b25cbd1d0574542dbb5dfa4f3b32efdbb17feba7f90f0229f139f05bebbab189a46403fc77572cdfff84269cc00dda82d9a28b1dd005bf9ab934c091e965227de4856a555dfc0f05baf190f449b4e320baacd49883f6024b885851467b16dbac545c7e409e27ab4be48b466a259c796e2d7aac2783c4180209da736134bba1f1202bc476516567e0aa84ec564363e871a1b0d6a17a5ee89fea0df842adbbaa855f1fa3a286a8eb4a98427e316b08b47b2cc70a177bfcd6b710e5ad1c49b85289956c476bb546dade357071354e12dcf3379bcd1abadcc92513d5fead5e2dab3a4dc6027c5225e2b6107ef4c902fa2f204045d9c63e3d3f68f8ddd0de2e1f7cefa37a11bdcf26628a83eb2181133e367d57365e7df6251041f4f28c745a53c81749867093ed556ab8e3c4f11dea25a37c25b82ba7c8b320ee93d6715051fe80dbcc204f7ed18469ff046b7c81fc29f5d946d3dc6595e71de77c37984662b0c994607d496b4482eecdbf69a87934cd14ebc2c82719eac6fae1b0139488c4314ab68348271c4850adfd6f1b0e9eb5ea6604562ba32025aa9380f1214acc56380debb2e41e5a44f10b4b47c7cbb5ce57d32f681cdd54f0b8b8f05ad3682b3d5262c5f8f4193b6ba3c5f2105cad4534464dbdfd106e94d4a566394581af9b306a45669b1d3d689c2f9a687f2a12c54b62e4fc42f4ae4148250e124373428ee8c33c7fccdcfd61aba15c019caabb10eb885acca870262dffa8998c87f3341125e1f8e22ddfc3fd340c89839c749838aea782cea551e3ab393a11ff66dc8f9c9168135b9e2087189645ad5cfa270e0af71bfbb26b0d28767ccfdcb045a25fea63803ea73504f0e2d9e915d8457686d379518c7a134b25437a46abdf06afc49333e556b950c5c59e7016a5fa65d6af54969eb323590f65f72207ea663130adf803d7674a8ac181011d34af4e72811594803958c898867da151473c93a3980d46ccaa03278ce75d7c7c9c049d7ba03e8dc8b6c19040a51c9d0084a5cfcc84bee100d5376ee9c287bff93b8611be31d7f3ff18dbe71672beb7c785ce8576776dc081f5e8441be69635ea3470a655c2a4ad969d3e6847d7f4795e82586ce649c705c93d11ef39efdcdb74d987cefcf929822401d5307efaf97dd9fd329c589a22f6655ae2d095a8cd36d11bf1217e5ba59197c08853a177e7c555d6aea53acb063d29730a9e2c7ccaf89dde5a609c6724722999fd95de9381e608ea2b09cbd1ebe1264169d50084de1299e5fe8fa4f7cdafb8d6627c717c6c8d52900538d0d6270153167a7f43a88d377c8b07efd2aeb1aa21f9b0ad1d672616e83a1c2c860ac8774549ceb946e1f1c2233f14fcfc4c124114e196c5f0b3004742777db4b10f2903be126d44d968c164edad8115ebdb2273cb67da8e998de2ac698dbc773208fe2d2c0d048dcb35cd03a9d2d0154c412d3c1754255161f93a87eda324ca7abdede200f963375d60135f1c247569c9938ffb4b17fb0f00a784b081db12cc50ac9559ec6a68704dbb6396ad7466b1c76a606e594a5625c444e9165ce02d3494c0e98e54d33f55309fd99367b2d74a4ff5dcf1c58340b30f53aac9a1366be254d1784954217c2b75a191b6f2916dc77e630a9a89a90f0e27e430174daae4656b33945e17cc32019cf99403d3ffed0060dfe01e1c4fc9e58c6c1f0907593c4c913299142a60a1e6b10e490000fd1361a30cde41c9d1c3e1046b256b08cf1f1aabc1df45276b9ae68bb552715ee871e28b6164bfa17136c7533f5fe36cd714b34598d3264a33b1644f1b8e00e119dc2ef9489d7e6785d69c1349d61e4ae66674ae5988fae61b7cb238be76b623f141a06bb94ab699c18aa3dc79fe14e3c2f342ed877590d08385e4d287667deb07ecd1fe27a09572c8517fe30b732a1b7bf9dc29352be163418f720b5b79d34bcc8683f6396d802c933c862d24183716bf1fbe9417fba52fd77379a3eb2e1ea3280567dc7e539d4b2952fb266e1e6bb4242dc662a15a70f46b7aa5b6f41b02333ecb63c111c52b1ea020d37884bfead981a528cb671c0a9127edf5625765bce861bad8b3b5a5c2ae28f57f7a33f452ea2b07df338fee048232a7c466e27dbe51075ec4117971981c8ae70c62f843a401632042b9b262b8d61cf17a6fe176dc6f73c7e662f742f51ffbe1cfcc7531773afd466239c1c0e2c8353e1c7e050bfa5e5ee263c0c09a9cdb7ce06d653805b82ea0a6f2af95bc09c90606630b9edeecc265d7de1d10fb41f7ab111f71b534d00ba87f1fd9fc55cca276561db4b00e1dfdec91451e577142368993f06c46e367766f970140e41b6e7a8fca99e74184345b8b29e852231246bc2ae77320279cb0f9b6f5551471d74007b39a9fb68904cbdf1ad6f531c20fb3ba4b903fe99f0b77e261736023aba01aff5ef650725117269cb1ccf51ea859e28ed1dbfd480c2106f354440fa92cfef9e42b546a200be9e7e358f286423d2977ae9241cea896faca68366dcaf7a6d788644e8b8405f7fb17a4ef6481219ad07f079f027ee78eeb7d36abc05818fb0b6d55c0e292dd167631754e5ee96f170289b48b174287a37113ca7e798e25a006c10875636c23b8a963a09f83325414555e7b00cd5aa26b824bc3d6181d77f1364575a90f603a00b516e9e8d67867777bbd5178126a668bce590363603f9fa651585db33bcbafe2fd0658b71002ba8b9bb4300533a613e65568f64fcd1770c8b4e2ca420eb9fb86a588b7e587f37db406490958327dab2ab32047d9f7002a5ca473f549be9c9a6273564469e46a9a912cccad3be424758a892de6bc70600c194d88b9014a7ee9772bc52ef8bc208dfdca492336267ad93f769d0b111f55289cad1ee32837f7c3c3982d0934992fdcbdd2f62984220408c4e1d599491830e83ea462a7f59564d64c4ad4dff083740ebdbeba964b3f5cc6d268615c7d2d91785d1c85bc5c507d250562c21b28428b079638234cf082c664665cabc7c1e13ce4b6cc2b7a6d7a3d3c1948f1be8bbd7a14bae655415678dcd66c77f013304a1039275943f28f95916f71852db7e6c7210039432cd53e20a104b49b2ba7ffaac097769464bb36693f45f1d217cdce2eea276b0aac8ddb61806f2f57b030370561f0d280a9c05f76e72db947b10cd91f15579c9fdbfc883a2ae27ec9eac6db6a244fb6ffa75c77d5cc65f9bfe5b80fa5c3841e600ab2a1746ba58527247b244ed091643ed1fdbed6dd03de0b56b8e20650173750686973672097cf3b7a8e7c95bcda7cd8d25420d4945620ea7e86653f36d84220333482f2de71f7533e2823ff2da00cb7a2e5eab65f67b0b94bb94f0370cfa2d5cb18fd2bf8141fd0cbf989f33a31df1f9c71d77487be5f7d019b2b4303d7b535d4cb7cec62cc27967e9c7ee3d67620273c1523e956f24c9ded3e7119ba273cb10ece0ad21c35e0854fab3174ecc107fb4ba239aa4459ad183bca2a31fed4ecd5106489910caac73d96eee6eba5dc5eb17f559d3b9c802445419907af6cd86b8fd222d3c9dc72fc124b146c19bebca8f4fd8e3854e90cdf8422a2d6dd24afea6b2fac8f1ee8b2bb61b6348627158b38012a4cc15a6ff24a0edf0a0317cc8598ae472a2f3b8107b7fe5230b0e231acbcab46b2271002830b267fe472e6304d0649850d39444a1fe04dd13af7c64b4f25cada347f00db569cbc8236e4438c2a6a56dbd90c648f9ede4ec55cd8a42b0d7cc0b8f34ff5efbcac4dd90092b8cff704d5482093dc7d4c9f35164ab35b2c427c18ddc961e1c2af17fc766f20f2f19334dabe875480af285aadfa6a6c03921843c16d6a1e88f72197a3a078edbc7c82f92a473b24ff0faab559dffdac6716b5a1184f7ddfc7cd25f3b8fb21ab600060c2b3f3d5ce791208f8145971e417e99432ae8261b764384df729ca31db8d19f8ffd5c93bafd9589ea70b2c224d96759b444e266616cf64da84d32f8563704e8195e48f05ae41c99f49fb3e160f65079e06426fa6a017693b4e680a2c4fc639cd4c97a7cfec51f2804cf5ec5a4e9735e64daea5fde305aa43dfc506e0dfba4a69b0307d7ba8eaa6617ec038a685b5d5f1683c5399afe9686da93506a76329bc635de52a2c5b708cbef727dc56964f924bd0d62a68f528339d371dbc7c89e9336e62af4c5fbc4052b9025525996e4d93fe4bd7c0a83db4e85fe1a5674a6edcd235ed0ed96b95179c17f1629c2a6b27ed5ba1959c1fb0acbe6f28b6f40b40af3fcceb75e3cc694193f5bc71557a0481d72087fec917be246c5fa6e553cb8b9e3e2546407d8d34d49919d247d4fba5c74f20f34b7803e6f33206b7e3d556534b6b617055b3b0f7227a2b171ac11571094cac33143a2c414bc1eee48a9446c57c3d722ed86442707c89654e997d77450e82e2c24926e023d65ed2056f98c338724720517d5a351cccb766a595fa8c07f445836bda7c3ed618dcf06f5dcb3bbe513a6ea0b06683d531f0206cfc65b68a94d5790ea497513c5ef497e5770b4f3cc69d999556e363ad3f4813eb0858b342d53959383de3cc609796ee75858c0addfb77fe5526b1cc0dcd53c6ada70240ee9aea4ff5a602296085d44965cb632fe23a1ff131e9b630fc2df85da43f01a7676cf2bbe4c83f45ae2bf0abf132e0756df6150bfb45861e976e4dc60da150c0ce1eb682e7b4ab9c152bf631bc73bfc2b7214a484b3b869d03f69ee85f97e082be6a000c79c0d29277c4476de4133b6d7571690f6026ea08a65453b9033efb795daf117021b03a1ca6a9ca818f18ca59055f0682b88c85d6b97c7406dd3191e55aad0d8b6e78e3700480a73b39d41a5dfd5676db68fae02b7fa0b726ecae74daa0c5f041b00f57079b3e6c3f887629b47cc3622211b67384a32fdf408dd2d159e672acea473b53c768588327d8f1e8376d8d3fe989b5b98cb606f914afad2b12bfb2ede03aa9c061b6763afdfbb44e6669abfe47341fd25e9aed43cc704121f97e7486efc75b52ac582fcb2f7b60bc8b919bda556a3128fb8500e5f30116cc4fc201f461e3bbeec4d27fcd2f6c74ebbe9da153a491c01f41b4b242e793599d2be9a57debdee75b3649c165c79f53a22132fd37ec825d8d3cd30bb904de398d3fef4d91f10e293da82d12b3fa9f570987179cd457b09e3e6ef040c29dc8641470215480facd318f6cc9ec822be9b388e531c50e7de12228db937eacbe55fbe98c664903a9f0a2272176418f9cb081f43a57de381e191551c78424a4bad905ee6ec3ffa6246b3796975a0202e4b025950acc2d92fe68a27170931fbe28bdd27df02cb310aac406f490a493f768727ae9e964fa208d90a12d9592a696a7fa616bd8fa3f240deccc710ebc8e8429437b905ebf1b0e1b45abbe00eba142b737d414fe60cbf413924dfe88931cef5a788d20aa4a3aff4a889488fc9125467bd66fb5d95987f1484a93ea80c688fba7b3f68880650897", 0x1000}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) mq_notify(r8, &(0x7f0000001dc0)={0x0, 0x3e, 0x0, @tid=r0}) 1.171898743s ago: executing program 6 (id=4822): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r1, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getrlimit(0x1, 0x0) setreuid(0xee00, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0xa4, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) unshare(0x64000600) 1.123049658s ago: executing program 4 (id=4824): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) r0 = msgget$private(0x0, 0x480) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRESOCT], 0x401, 0x800) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) msgsnd(r0, &(0x7f0000000900)={0x3, "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"}, 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgsnd(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008418333539263dd85da0e923ac41e49e01f528699fa3fc5d9536c78cdb4f185f6487387ad4b48080008df06fe3595d87d4f9a1751d0aa977eb599a09e4207ccb4039ef8115e20b7f44c977c262d9a606d4521bb9b64d3aa5798fa83a14c798edfc1c26caf084f6440bce0af30d4c207fc11c47ee4f85009fc8399ec25b61a6992b412a4cbf5d2e2354a6e0f6a221547458672448a07e13c9aa7f89b1448f57beb9ee689fd742a6da7784d9d26ae65de3b59cfdd800009fc88ee253d084e7e0e698f83ac85ebeec28ef191fd74e78015481f1"], 0xda, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) r3 = dup2(r1, r2) fcntl$setown(r1, 0x8, 0x0) tkill(0x0, 0x13) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000001c0)={0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) 1.114999978s ago: executing program 0 (id=4825): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000e40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @remote, 0x0}, &(0x7f00000001c0)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x1, 0x3, 0x3a9, 0x1, 0x8}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/193, 0xc1, 0x0, &(0x7f00000003c0)=""/67, 0x43}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x1, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0x40000000, 0x7ffd}}}, 0x118) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc43}, @jmp={0x5, 0x0, 0xc, 0x1, 0x4, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x92}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}]}, 0x0, 0x0, 0x53, &(0x7f00000000c0)=""/83, 0x41000, 0x10, '\x00', r1, @fallback=0x1b, r2, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0xb4a}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r7, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x5, 0xf}, {0x3, 0x1, 0x4, 0x1}, {0x3, 0x5, 0x7, 0x4}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x1, 0x6, 0xa}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x3}, 0x94) getcwd(&(0x7f0000000740)=""/229, 0xe5) 1.09647811s ago: executing program 0 (id=4826): r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x8, 0x6, 0x80000000, 0x6ed2, 0x0, 0x1}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x7, 0x4, 0x10, 0x7, 0xf72a, 0x1}) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x81, 0x7, 0xade1, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x67, 0x0, 0xf4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @lsrr={0x83, 0xb, 0x53, [@broadcast, @remote]}, @end, @rr={0x7, 0x2b, 0x23, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @empty, @remote, @loopback, @remote]}, @noop, @generic={0x89, 0x9, "2b00ca817236c9"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r1, 0x10, 0x80, 0x9, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@end, @rr={0x7, 0x17, 0x34, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x8}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000340)=""/251, 0x28, 0xfb, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4f9, 0x0, r3, 0x7f, '\x00', r2, r4, 0x0, 0x4, 0x1}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', r1, 0x10, 0x40, 0xc338, 0xffffffff, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@end, @rr={0x7, 0xf, 0x97, [@broadcast, @local, @multicast1]}]}}}}}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) shutdown(r6, 0x1) sched_getaffinity(r0, 0x8, &(0x7f0000000640)) r7 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000006c0)={0x4}) syz_open_dev$sg(&(0x7f0000000700), 0x2, 0x600040) capget(&(0x7f0000000740)={0x19980330, r0}, &(0x7f0000000780)={0xa, 0x1, 0x2, 0x6, 0x4, 0x1}) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000007c0)={'veth0_macvtap\x00', 0xd0}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000800), &(0x7f0000000840)={0x0, 0xfb, 0xcb, 0x0, 0xd, "d96da13d61f5b14d8f405b74b39dbe61", "29033b422c7a6a95d9580ee689f4850584594288c1d3b1dcaa33e06c615bcaaa7121d7229ca9f638821aa5f93823fc61fee25f90d949af139d5607656e71b5448f0b3ffcab9e694785a780d31b477cb191cd9f9de0f76cec8a55e701b534f4f4a38077caf0ce37f0e340ce14b2f40456ea846b9f04587e8493a5c01237f3ff26485cd84c59820b2a0cbed08e474341c09b541f92d276103d4886d97080b80bb30a161b20ec9f59f5f17015ecd64755e79de8fb7db04e"}, 0xcb, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000a40)={&(0x7f0000000940)="645429045ca31dac911d264321e4bfc9e7f5c75f89f9b5341711508367b27ef047808d4a67db24704b36e01a8927c958ddfdf4240ed9535089f294094a2ad018f2cf7247b23d7bc262b47a95276499c51173c57043a415beb0e957b745089df73d43d66eb96e7cbf42186f669a8849fe075f39f83ff7f346efb4cf565eba264cb0bc7449e061ac7c15bfbe8ef6c17a0b49a3e3073242262118d522a6f42eae7a15a49a8583d2957b82749ccdabe45c785629f96e7c7b9c92c337a554ed87adbc82b72c4ec06db7cb80762b65760223959fcdd150537eb53a", 0xd8}) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r8) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, r9, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x94a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x647b}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x8c}}, 0x804) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000c40)) capget(&(0x7f0000000c80)={0x19980330, r0}, &(0x7f0000000cc0)={0x8, 0x8, 0x7, 0x3, 0x1, 0xfffffbad}) sendmsg$802154_dgram(r8, &(0x7f0000001d80)={&(0x7f0000000d00)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000001d40)={&(0x7f0000000d40)="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", 0x1000}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) mq_notify(r8, &(0x7f0000001dc0)={0x0, 0x3e, 0x0, @tid=r0}) 1.029884135s ago: executing program 0 (id=4829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 747.554428ms ago: executing program 3 (id=4831): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e0101000000000000000000000000dc0b140d00000000000000aa040000000000000000000000000000002c000000a9e53faf2af7b8a7fbd44d80c9", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 733.36639ms ago: executing program 3 (id=4833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 696.005043ms ago: executing program 1 (id=4834): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a30000000000800054000000000080008400000000014000000110001"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x84, 0x0}, 0x0) (fail_nth: 3) 695.471813ms ago: executing program 1 (id=4835): r0 = getpid() capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x8, 0x6, 0x80000000, 0x6ed2, 0x0, 0x1}) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x7, 0x4, 0x10, 0x7, 0xf72a, 0x1}) socket$key(0xf, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x1, 0x81, 0x7, 0xade1, {{0x17, 0x4, 0x2, 0x3, 0x5c, 0x67, 0x0, 0xf4, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2e}, {[@rr={0x7, 0x7, 0x2f, [@remote]}, @lsrr={0x83, 0xb, 0x53, [@broadcast, @remote]}, @end, @rr={0x7, 0x2b, 0x23, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @empty, @remote, @loopback, @remote]}, @noop, @generic={0x89, 0x9, "2b00ca817236c9"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', r1, 0x10, 0x80, 0x9, 0x3, {{0xc, 0x4, 0x0, 0x4, 0x30, 0x65, 0x0, 0x4, 0x29, 0x0, @remote, @empty, {[@end, @rr={0x7, 0x17, 0x34, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100]}, @noop]}}}}}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', r1, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x8}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000340)=""/251, 0x28, 0xfb, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x4f9, 0x0, r3, 0x7f, '\x00', r2, r4, 0x0, 0x4, 0x1}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', r1, 0x10, 0x40, 0xc338, 0xffffffff, {{0x9, 0x4, 0x3, 0x7, 0x24, 0x65, 0x0, 0x6, 0x4, 0x0, @remote, @local, {[@end, @rr={0x7, 0xf, 0x97, [@broadcast, @local, @multicast1]}]}}}}}) capset(&(0x7f00000005c0)={0x19980330, r0}, &(0x7f0000000600)={0xfffffffe, 0x7, 0xe90d, 0xffffffff, 0x10, 0x4d11}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x5) shutdown(r6, 0x1) sched_getaffinity(r0, 0x8, &(0x7f0000000640)) r7 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {0x9}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000006c0)={0x4}) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000800), &(0x7f0000000840)={0x0, 0xfb, 0xcb, 0x0, 0xd, "d96da13d61f5b14d8f405b74b39dbe61", "29033b422c7a6a95d9580ee689f4850584594288c1d3b1dcaa33e06c615bcaaa7121d7229ca9f638821aa5f93823fc61fee25f90d949af139d5607656e71b5448f0b3ffcab9e694785a780d31b477cb191cd9f9de0f76cec8a55e701b534f4f4a38077caf0ce37f0e340ce14b2f40456ea846b9f04587e8493a5c01237f3ff26485cd84c59820b2a0cbed08e474341c09b541f92d276103d4886d97080b80bb30a161b20ec9f59f5f17015ecd64755e79de8fb7db04e"}, 0xcb, 0x0) ptrace$setregset(0x4205, r0, 0x4, &(0x7f0000000a40)={&(0x7f0000000940)="645429045ca31dac911d264321e4bfc9e7f5c75f89f9b5341711508367b27ef047808d4a67db24704b36e01a8927c958ddfdf4240ed9535089f294094a2ad018f2cf7247b23d7bc262b47a95276499c51173c57043a415beb0e957b745089df73d43d66eb96e7cbf42186f669a8849fe075f39f83ff7f346efb4cf565eba264cb0bc7449e061ac7c15bfbe8ef6c17a0b49a3e3073242262118d522a6f42eae7a15a49a8583d2957b82749ccdabe45c785629f96e7c7b9c92c337a554ed87adbc82b72c4ec06db7cb80762b65760223959fcdd150537eb53a", 0xd8}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x8c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x94a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x647b}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8}]}]}]}, 0x8c}}, 0x804) ioctl$KDGKBTYPE(r8, 0x4b33, &(0x7f0000000c40)) capget(&(0x7f0000000c80)={0x19980330, r0}, &(0x7f0000000cc0)={0x8, 0x8, 0x7, 0x3, 0x1, 0xfffffbad}) sendmsg$802154_dgram(r8, &(0x7f0000001d80)={&(0x7f0000000d00)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000001d40)={&(0x7f0000000d40)="e46c12342a53b5aa63650b785cae592e191076c5df00f5aa0341436e83a376ac62a7dcbdbd8ba91785e3bcbeb14e3210050f3b25ad0ce75a117dc852315328c81b594cc79717fc956b747b014d68f0205e664b3f2afa1c3389a8e5a19b8274be9f59173dc79d04b75108a7e83eccd3e8308d63c3991fc04150ac9cb788e5621fc133b1de400c593a4fb9cdac1b42d87229fc6f48f0a3cebaacb0878c9fb71663725b80a5ab3a4d2f058d085d3ba64dbb94aef9caab737deeb821faceedef7cf93c0c943899a6cafd328f400827fdfe5847469df46ee18315b25cbd1d0574542dbb5dfa4f3b32efdbb17feba7f90f0229f139f05bebbab189a46403fc77572cdfff84269cc00dda82d9a28b1dd005bf9ab934c091e965227de4856a555dfc0f05baf190f449b4e320baacd49883f6024b885851467b16dbac545c7e409e27ab4be48b466a259c796e2d7aac2783c4180209da736134bba1f1202bc476516567e0aa84ec564363e871a1b0d6a17a5ee89fea0df842adbbaa855f1fa3a286a8eb4a98427e316b08b47b2cc70a177bfcd6b710e5ad1c49b85289956c476bb546dade357071354e12dcf3379bcd1abadcc92513d5fead5e2dab3a4dc6027c5225e2b6107ef4c902fa2f204045d9c63e3d3f68f8ddd0de2e1f7cefa37a11bdcf26628a83eb2181133e367d57365e7df6251041f4f28c745a53c81749867093ed556ab8e3c4f11dea25a37c25b82ba7c8b320ee93d6715051fe80dbcc204f7ed18469ff046b7c81fc29f5d946d3dc6595e71de77c37984662b0c994607d496b4482eecdbf69a87934cd14ebc2c82719eac6fae1b0139488c4314ab68348271c4850adfd6f1b0e9eb5ea6604562ba32025aa9380f1214acc56380debb2e41e5a44f10b4b47c7cbb5ce57d32f681cdd54f0b8b8f05ad3682b3d5262c5f8f4193b6ba3c5f2105cad4534464dbdfd106e94d4a566394581af9b306a45669b1d3d689c2f9a687f2a12c54b62e4fc42f4ae4148250e124373428ee8c33c7fccdcfd61aba15c019caabb10eb885acca870262dffa8998c87f3341125e1f8e22ddfc3fd340c89839c749838aea782cea551e3ab393a11ff66dc8f9c9168135b9e2087189645ad5cfa270e0af71bfbb26b0d28767ccfdcb045a25fea63803ea73504f0e2d9e915d8457686d379518c7a134b25437a46abdf06afc49333e556b950c5c59e7016a5fa65d6af54969eb323590f65f72207ea663130adf803d7674a8ac181011d34af4e72811594803958c898867da151473c93a3980d46ccaa03278ce75d7c7c9c049d7ba03e8dc8b6c19040a51c9d0084a5cfcc84bee100d5376ee9c287bff93b8611be31d7f3ff18dbe71672beb7c785ce8576776dc081f5e8441be69635ea3470a655c2a4ad969d3e6847d7f4795e82586ce649c705c93d11ef39efdcdb74d987cefcf929822401d5307efaf97dd9fd329c589a22f6655ae2d095a8cd36d11bf1217e5ba59197c08853a177e7c555d6aea53acb063d29730a9e2c7ccaf89dde5a609c6724722999fd95de9381e608ea2b09cbd1ebe1264169d50084de1299e5fe8fa4f7cdafb8d6627c717c6c8d52900538d0d6270153167a7f43a88d377c8b07efd2aeb1aa21f9b0ad1d672616e83a1c2c860ac8774549ceb946e1f1c2233f14fcfc4c124114e196c5f0b3004742777db4b10f2903be126d44d968c164edad8115ebdb2273cb67da8e998de2ac698dbc773208fe2d2c0d048dcb35cd03a9d2d0154c412d3c1754255161f93a87eda324ca7abdede200f963375d60135f1c247569c9938ffb4b17fb0f00a784b081db12cc50ac9559ec6a68704dbb6396ad7466b1c76a606e594a5625c444e9165ce02d3494c0e98e54d33f55309fd99367b2d74a4ff5dcf1c58340b30f53aac9a1366be254d1784954217c2b75a191b6f2916dc77e630a9a89a90f0e27e430174daae4656b33945e17cc32019cf99403d3ffed0060dfe01e1c4fc9e58c6c1f0907593c4c913299142a60a1e6b10e490000fd1361a30cde41c9d1c3e1046b256b08cf1f1aabc1df45276b9ae68bb552715ee871e28b6164bfa17136c7533f5fe36cd714b34598d3264a33b1644f1b8e00e119dc2ef9489d7e6785d69c1349d61e4ae66674ae5988fae61b7cb238be76b623f141a06bb94ab699c18aa3dc79fe14e3c2f342ed877590d08385e4d287667deb07ecd1fe27a09572c8517fe30b732a1b7bf9dc29352be163418f720b5b79d34bcc8683f6396d802c933c862d24183716bf1fbe9417fba52fd77379a3eb2e1ea3280567dc7e539d4b2952fb266e1e6bb4242dc662a15a70f46b7aa5b6f41b02333ecb63c111c52b1ea020d37884bfead981a528cb671c0a9127edf5625765bce861bad8b3b5a5c2ae28f57f7a33f452ea2b07df338fee048232a7c466e27dbe51075ec4117971981c8ae70c62f843a401632042b9b262b8d61cf17a6fe176dc6f73c7e662f742f51ffbe1cfcc7531773afd466239c1c0e2c8353e1c7e050bfa5e5ee263c0c09a9cdb7ce06d653805b82ea0a6f2af95bc09c90606630b9edeecc265d7de1d10fb41f7ab111f71b534d00ba87f1fd9fc55cca276561db4b00e1dfdec91451e577142368993f06c46e367766f970140e41b6e7a8fca99e74184345b8b29e852231246bc2ae77320279cb0f9b6f5551471d74007b39a9fb68904cbdf1ad6f531c20fb3ba4b903fe99f0b77e261736023aba01aff5ef650725117269cb1ccf51ea859e28ed1dbfd480c2106f354440fa92cfef9e42b546a200be9e7e358f286423d2977ae9241cea896faca68366dcaf7a6d788644e8b8405f7fb17a4ef6481219ad07f079f027ee78eeb7d36abc05818fb0b6d55c0e292dd167631754e5ee96f170289b48b174287a37113ca7e798e25a006c10875636c23b8a963a09f83325414555e7b00cd5aa26b824bc3d6181d77f1364575a90f603a00b516e9e8d67867777bbd5178126a668bce590363603f9fa651585db33bcbafe2fd0658b71002ba8b9bb4300533a613e65568f64fcd1770c8b4e2ca420eb9fb86a588b7e587f37db406490958327dab2ab32047d9f7002a5ca473f549be9c9a6273564469e46a9a912cccad3be424758a892de6bc70600c194d88b9014a7ee9772bc52ef8bc208dfdca492336267ad93f769d0b111f55289cad1ee32837f7c3c3982d0934992fdcbdd2f62984220408c4e1d599491830e83ea462a7f59564d64c4ad4dff083740ebdbeba964b3f5cc6d268615c7d2d91785d1c85bc5c507d250562c21b28428b079638234cf082c664665cabc7c1e13ce4b6cc2b7a6d7a3d3c1948f1be8bbd7a14bae655415678dcd66c77f013304a1039275943f28f95916f71852db7e6c7210039432cd53e20a104b49b2ba7ffaac097769464bb36693f45f1d217cdce2eea276b0aac8ddb61806f2f57b030370561f0d280a9c05f76e72db947b10cd91f15579c9fdbfc883a2ae27ec9eac6db6a244fb6ffa75c77d5cc65f9bfe5b80fa5c3841e600ab2a1746ba58527247b244ed091643ed1fdbed6dd03de0b56b8e20650173750686973672097cf3b7a8e7c95bcda7cd8d25420d4945620ea7e86653f36d84220333482f2de71f7533e2823ff2da00cb7a2e5eab65f67b0b94bb94f0370cfa2d5cb18fd2bf8141fd0cbf989f33a31df1f9c71d77487be5f7d019b2b4303d7b535d4cb7cec62cc27967e9c7ee3d67620273c1523e956f24c9ded3e7119ba273cb10ece0ad21c35e0854fab3174ecc107fb4ba239aa4459ad183bca2a31fed4ecd5106489910caac73d96eee6eba5dc5eb17f559d3b9c802445419907af6cd86b8fd222d3c9dc72fc124b146c19bebca8f4fd8e3854e90cdf8422a2d6dd24afea6b2fac8f1ee8b2bb61b6348627158b38012a4cc15a6ff24a0edf0a0317cc8598ae472a2f3b8107b7fe5230b0e231acbcab46b2271002830b267fe472e6304d0649850d39444a1fe04dd13af7c64b4f25cada347f00db569cbc8236e4438c2a6a56dbd90c648f9ede4ec55cd8a42b0d7cc0b8f34ff5efbcac4dd90092b8cff704d5482093dc7d4c9f35164ab35b2c427c18ddc961e1c2af17fc766f20f2f19334dabe875480af285aadfa6a6c03921843c16d6a1e88f72197a3a078edbc7c82f92a473b24ff0faab559dffdac6716b5a1184f7ddfc7cd25f3b8fb21ab600060c2b3f3d5ce791208f8145971e417e99432ae8261b764384df729ca31db8d19f8ffd5c93bafd9589ea70b2c224d96759b444e266616cf64da84d32f8563704e8195e48f05ae41c99f49fb3e160f65079e06426fa6a017693b4e680a2c4fc639cd4c97a7cfec51f2804cf5ec5a4e9735e64daea5fde305aa43dfc506e0dfba4a69b0307d7ba8eaa6617ec038a685b5d5f1683c5399afe9686da93506a76329bc635de52a2c5b708cbef727dc56964f924bd0d62a68f528339d371dbc7c89e9336e62af4c5fbc4052b9025525996e4d93fe4bd7c0a83db4e85fe1a5674a6edcd235ed0ed96b95179c17f1629c2a6b27ed5ba1959c1fb0acbe6f28b6f40b40af3fcceb75e3cc694193f5bc71557a0481d72087fec917be246c5fa6e553cb8b9e3e2546407d8d34d49919d247d4fba5c74f20f34b7803e6f33206b7e3d556534b6b617055b3b0f7227a2b171ac11571094cac33143a2c414bc1eee48a9446c57c3d722ed86442707c89654e997d77450e82e2c24926e023d65ed2056f98c338724720517d5a351cccb766a595fa8c07f445836bda7c3ed618dcf06f5dcb3bbe513a6ea0b06683d531f0206cfc65b68a94d5790ea497513c5ef497e5770b4f3cc69d999556e363ad3f4813eb0858b342d53959383de3cc609796ee75858c0addfb77fe5526b1cc0dcd53c6ada70240ee9aea4ff5a602296085d44965cb632fe23a1ff131e9b630fc2df85da43f01a7676cf2bbe4c83f45ae2bf0abf132e0756df6150bfb45861e976e4dc60da150c0ce1eb682e7b4ab9c152bf631bc73bfc2b7214a484b3b869d03f69ee85f97e082be6a000c79c0d29277c4476de4133b6d7571690f6026ea08a65453b9033efb795daf117021b03a1ca6a9ca818f18ca59055f0682b88c85d6b97c7406dd3191e55aad0d8b6e78e3700480a73b39d41a5dfd5676db68fae02b7fa0b726ecae74daa0c5f041b00f57079b3e6c3f887629b47cc3622211b67384a32fdf408dd2d159e672acea473b53c768588327d8f1e8376d8d3fe989b5b98cb606f914afad2b12bfb2ede03aa9c061b6763afdfbb44e6669abfe47341fd25e9aed43cc704121f97e7486efc75b52ac582fcb2f7b60bc8b919bda556a3128fb8500e5f30116cc4fc201f461e3bbeec4d27fcd2f6c74ebbe9da153a491c01f41b4b242e793599d2be9a57debdee75b3649c165c79f53a22132fd37ec825d8d3cd30bb904de398d3fef4d91f10e293da82d12b3fa9f570987179cd457b09e3e6ef040c29dc8641470215480facd318f6cc9ec822be9b388e531c50e7de12228db937eacbe55fbe98c664903a9f0a2272176418f9cb081f43a57de381e191551c78424a4bad905ee6ec3ffa6246b3796975a0202e4b025950acc2d92fe68a27170931fbe28bdd27df02cb310aac406f490a493f768727ae9e964fa208d90a12d9592a696a7fa616bd8fa3f240deccc710ebc8e8429437b905ebf1b0e1b45abbe00eba142b737d414fe60cbf413924dfe88931cef5a788d20aa4a3aff4a889488fc9125467bd66fb5d95987f1484a93ea80c688fba7b3f68880650897", 0x1000}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) mq_notify(r8, &(0x7f0000001dc0)={0x0, 0x3e, 0x0, @tid=r0}) 691.324293ms ago: executing program 3 (id=4836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x4024) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000640)=0x0) sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000000680)=@nfc_llcp={0x27, r4, 0x0, 0x5, 0x9, 0x1b, "1830184e192fb9b6990a2d5b0237bd0448b4c58c5fb1d425f750de266c88d87faf0670a251ff4a90e1ef4694e2c9945277ff85cc6cb34aa6ee9e4501efc366", 0x29}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000700)="69dbb670ae6234c0f3b5de8c4fc3ae592265933422d7e444761f087519338fb40d8aa4004808b6bd4918ad0ffe8659f60c5506e52e8b74fd429aee3ef23bfdc6694f41ef0541c2c05f334adba5f6c573a170e9b4cc56871c083d67028684daa428a44895a41da62518d76486b19f120c2b2ccd7181b1dc991d07d008a3f42b8c292a97923c86a244", 0x88}, {&(0x7f00000007c0)="95", 0x1}, {&(0x7f0000000800)="75ba121158f3d508e43e19766b85eeee5506f8e13fd8550d3f21094dc0e348eb1d233e655bcbeaf9355a840a471301a7c31de403eb364971ed25d8a145858cce613db59c50ebb699237805bf22f1b1c73490b897a4a228fa2a44c2458843a5d1e1c5e75c70161eed277f20623ac97954c1ea7709f9a29f6ce223ddf3d881ebe8750c21fd2f6182e66b62e2fc7ee27d2d996c8971c468d868f9e238934e483bc139e9c6eb572b4710e6dac96d40686d51286a48cadfdeafd1b759f6152b257c908113b44404", 0xc5}, {&(0x7f0000000900)="6c5871d3d60340b4cbff1e77d02926f747360515bef4d298bd8eb9f96a7e9b8c459bb50eeda7e2edeef4b4f40ee12fa489b49f0113bebd916b3fc192e48f5485df3f56d6411e77e40633f00080d8d4d2c977c4308072eafe24023539a5890ff35d3b9c3c82de1ccc8b777a9c5210b09fb5014f1684bcb6ebaf1c84b578df1c166e79ddcb784b96dd71c55b41bf4a0e9491a041bfa38871e9edbded4d239ee01fe6a5896c14d68ec8284e92196d2d7bcfc6310dc82264010646f9cc1a212abbee8511dd948ce2af46eaadca25", 0xcc}, {&(0x7f0000000a00)="0f451c3607f4cec1a39a22450820cad97bb9f92dc9753d8ed0a4027d186357b0147d9a246f5bde", 0x27}, {&(0x7f0000000a40)="ecd05797f5606df890118139cff205fa5dc924f36725cabf2237fe2299b199d63093539aa70e6b6e673f7a2ff18486a54732b942723459d55d48c40d7400d9fa", 0x40}], 0x6}, 0x40040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r3, 0x2a3d6000) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x3) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r6, 0x20049549e2a2d659) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000000)=""/175, 0xaf, 0x8, 0xfffffffc}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="69b6056b033200d9274500280600fc020000000000000000000000000000200100000000000000000000000000010000000000000000000000000000000100004e2100004e21000000040000000400000000000000ffd627a454d90feb54aaa9d40aeaad0da4d0765d3fe4036af7bef64995f74b6da2c31cb271c18f4ab8ef6fb4ce54629485b7c203493ad47b447b7f68b52cdceb527b1c508d9a6d0ed5aea0ae78ed1b6ae4df6e24e026e143dd34a1137963e3060715f739a0f84fd859d34e8a0bd8ff00000000000000216a2326441d6bcd0152402aed61862a710c76e808b7f5fb418a2a1550edf1ff4e3fb555492e3cad62fadc54"], 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0x1, 0x7f5, 0x0, @private2, @empty, 0x8000, 0x80, 0xc}}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b1f41eff349505cc23eeb66b4eee45726b12a4a3c54dc230cc5232bfcb7516b9ba8135eb3221a19b11084a0491a10fc7d4b874bdc58f8a596f63353b9e9ed2f0300d7949dfc5f39d433aa49c404bf7c"], 0x34}}, 0x4004010) r8 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) fstat(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000380)='./file0\x00', &(0x7f0000000540), &(0x7f0000000600)=@v3={0x3000000, [{0x7fffffff, 0x80000001}, {0x401, 0x4}], r9}, 0x18, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r10}, 0x9) r11 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r12 = openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff) write$binfmt_elf64(r12, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4682010505fcffffffffffffff02003e0005000000fd040000000000004000000053f3d3aa17000000004401000000000000080000003e00380001000700250001000300000007000000010000000100000005000000000000000100000000000000e14500000000000009000000000000019d5400"], 0x78) close(r12) 689.196434ms ago: executing program 0 (id=4837): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000100001000000000000000000fc0000000000000000005dd800000001fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000004000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @multicast}) 651.823936ms ago: executing program 3 (id=4838): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000e40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast1, @remote, 0x0}, &(0x7f00000001c0)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x18, 0x0, 0xfffffffe}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000000c0)={0x1, 0x3, 0x3a9, 0x1, 0x8}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r2, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/193, 0xc1, 0x0, &(0x7f00000003c0)=""/67, 0x43}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x1, @loopback, 0x3ff}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0x40000000, 0x7ffd}}}, 0x118) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc43}, @jmp={0x5, 0x0, 0xc, 0x1, 0x4, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x92}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}]}, 0x0, 0x0, 0x53, &(0x7f00000000c0)=""/83, 0x41000, 0x10, '\x00', r1, @fallback=0x1b, r2, 0x8, &(0x7f0000000200)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0xb4a}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f0000000680)=[r7, 0xffffffffffffffff], &(0x7f0000000840)=[{0x3, 0x5, 0xf}, {0x3, 0x1, 0x4, 0x1}, {0x3, 0x5, 0x7, 0x4}, {0x5, 0x1, 0x2, 0xc}, {0x0, 0x1, 0x6, 0xa}, {0x5, 0x4, 0xe, 0x3}], 0x10, 0x3}, 0x94) getcwd(&(0x7f0000000740)=""/229, 0xe5) 635.094988ms ago: executing program 3 (id=4839): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0", 0x28}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 615.287579ms ago: executing program 3 (id=4840): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3375cbbe, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x2007, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0x10001, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x2, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000500)={r7, 0x7}, 0xc) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000e3ffffff0100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900f7bc2bf60055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000073abfad759a7419f007f73afd362a43bc8dc90461dbc22413634ea00a8ef38ab21dfa56b3e3af255bf90b19b64e89732824767d59b6a87ab1dc88cb8cd3f426a22442bf5fb492dd91dce9cb112b2c9371c1502a475d94d6f68ff147d03d356ec7fbf1c0ccf0eaef0084801d39e6547bf0f2cf2746f398c9fe7d5a2fc256780cdeb98d33bc0275b8df8ccdf48021f2b1154f97d51fb26b598f65409522dbefa35d8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, 0x0, 0x0) unshare(0x64000680) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 600.987161ms ago: executing program 1 (id=4841): r0 = fsopen(&(0x7f0000000080)='nfs4\x00', 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x1, @ANYBLOB="7b8b0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000400"/28], 0x50) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000000c0)='syzkaller0\x00', 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183640, 0x40) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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") sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0100c2000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001400048008000140000000000800"], 0xa4}}, 0x24000001) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000002000)={[{@utf8}, {@overriderock}, {@check_strict}, {@hide}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@hide}, {@dmode={'dmode', 0x3d, 0x9}}, {@hide}, {@sbsector={'sbsector', 0x3d, 0x6}}, {@unhide}, {@map_acorn}, {@map_normal}, {@map_normal}, {@sbsector={'sbsector', 0x3d, 0xc}}, {@nocompress}, {@session={'session', 0x3d, 0x45}}, {@map_acorn}, {@utf8}, {@uid}]}, 0x4, 0xa16, &(0x7f00000015c0)="$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") ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r7, 0x400454cc, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r10}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x5, 0xfffffffa, 0x1, 0xb3a}, 0xb6, 0x1, 0xffff, 0x2, 0x508, 0x10, 0x1e, 0x1d, 0x5, 0xff, {0x6, 0x9c22, 0x9, 0x4, 0x4, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 529.643276ms ago: executing program 0 (id=4842): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(r0, &(0x7f0000000040)='./file1\x00', 0x48081, 0x0) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) syz_create_resource$binfmt(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004110) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200003401c000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0xffff, 0x2, 0x5, 0x6}, {0xff47, 0x6, 0x5, 0x5}]}, 0x10) r7 = io_uring_setup(0x77bb, &(0x7f0000001400)={0x0, 0xab40, 0x2, 0xf7fffffe, 0x209}) io_uring_enter(r7, 0x800000, 0x2, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) 422.121185ms ago: executing program 0 (id=4843): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r2, &(0x7f0000000100)='\x00', 0x1, 0x8041, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000050000000200000000100000", @ANYRES32, @ANYBLOB="00000000000000000000000000010000000000006719e1ab1cf13f3589c94663e7b88a03be9f4493116ecef37280fd9d30cf9ea913ddd4ba16216091f71a19c0ae27a86d309b9b14fb2a61ed662a7db9c5f3b49410685f9773aefe1f21d734643f3427db8a460cb137ef4865b2c301e4094125233bd33dfda051eaff45e10640eabb0f863a50fa7c8d3cc6aa8f143e43af9e64f8e1a9448b1273142f867ba527841282d37b97f917539ec908da7ec42f5cea37f489", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x1, 0x8, 0x6, 0xfffe}, 0x20) socket$packet(0x11, 0x3, 0x300) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0xc00) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f0000000040)='[ue\xcbih,\x17i\xacP\xe6lNnux?\x18linux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x66, 0x0, 0x0, 0x1) 222.442871ms ago: executing program 1 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001000000000006000000ac1e0101000000000000000000000000dc0b140d00000000000000aa040000000000000000000000000000002c000000a9e53faf2af7b8a7fbd44d80c9", @ANYRES32=0x0, @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 160.765247ms ago: executing program 4 (id=4845): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x0, 0x1, 0x9]}, &(0x7f0000000140)=0x44) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r3, 0x1, 0x0, 0xffffffff, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 137.062069ms ago: executing program 1 (id=4846): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 1 (id=4847): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$packet(0x11, 0x2, 0x300) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (fail_nth: 3) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setpriority(0x3, 0x0, 0xfffffffd) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x48) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2d, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0x4}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xc, &(0x7f0000000940)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000009000000f8ffffffb703000008000000b704000000000000850000002400000095d7f3a02a06f2fb6f5c67ad5355fe0a7b16a258737f46d649d6e6a3ea0bd8e2039e9fb3f1fee38597f4c08d6a064cd2e21e361ca75a2dad64482a90d38395d4e8d7fffaf6cd0b1a31e7ff0236031afb6fca7c9071706c5ca59878e9f36a410f051b833921e1766536191276ee65ed933afb14e99b1df80c5111e3875f8261d8c6e7773d5ec3", @ANYRES16=r4, @ANYRESOCT=r2], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="8e29b5c6d59d9a8fa9f1222c", @ANYRES32, @ANYBLOB="d90f55b2fe87bccaae179697e871353358a10c2f9b664f24e6a9112c9e2e2e3003fa09469b1b", @ANYRES8], 0x0, 0x23e, &(0x7f0000000bc0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 318.014896][ T29] audit: type=1400 audit(24117562.827:13112): avc: denied { write } for pid=15309 comm="syz.6.4012" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.036253][ T29] audit: type=1400 audit(24117562.827:13113): avc: denied { connect } for pid=15309 comm="syz.6.4012" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 318.057903][ T29] audit: type=1400 audit(24117562.827:13114): avc: denied { name_connect } for pid=15309 comm="syz.6.4012" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 318.080385][ T29] audit: type=1400 audit(24117562.827:13115): avc: denied { name_bind } for pid=15309 comm="syz.6.4012" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 318.150777][ T29] audit: type=1400 audit(24117562.943:13116): avc: denied { read } for pid=15313 comm="syz.6.4015" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.174039][ T29] audit: type=1400 audit(24117562.943:13117): avc: denied { open } for pid=15313 comm="syz.6.4015" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 318.251451][T15328] netlink: 'syz.4.4020': attribute type 4 has an invalid length. [ 318.361468][ T10] usb usb2-port1: attempt power cycle [ 318.380745][T15345] FAULT_INJECTION: forcing a failure. [ 318.380745][T15345] name failslab, interval 1, probability 0, space 0, times 0 [ 318.393611][T15345] CPU: 0 UID: 0 PID: 15345 Comm: syz.3.4028 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 318.393641][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.393656][T15345] Call Trace: [ 318.393665][T15345] [ 318.393676][T15345] __dump_stack+0x1d/0x30 [ 318.393702][T15345] dump_stack_lvl+0xe8/0x140 [ 318.393733][T15345] dump_stack+0x15/0x1b [ 318.393752][T15345] should_fail_ex+0x265/0x280 [ 318.393866][T15345] should_failslab+0x8c/0xb0 [ 318.393891][T15345] __kmalloc_noprof+0xa5/0x3e0 [ 318.393923][T15345] ? process_vm_rw+0x27c/0x960 [ 318.393956][T15345] ? iovec_from_user+0x179/0x210 [ 318.394036][T15345] process_vm_rw+0x27c/0x960 [ 318.394065][T15345] ? _parse_integer+0x27/0x40 [ 318.394095][T15345] ? kstrtoull+0x111/0x140 [ 318.394147][T15345] __x64_sys_process_vm_writev+0x78/0x90 [ 318.394188][T15345] x64_sys_call+0x2a7c/0x2ff0 [ 318.394215][T15345] do_syscall_64+0xd2/0x200 [ 318.394245][T15345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.394305][T15345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.394326][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.394346][T15345] RIP: 0033:0x7f1dedeceb69 [ 318.394364][T15345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.394388][T15345] RSP: 002b:00007f1dec52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 318.394444][T15345] RAX: ffffffffffffffda RBX: 00007f1dee0f5fa0 RCX: 00007f1dedeceb69 [ 318.394461][T15345] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000018d [ 318.394476][T15345] RBP: 00007f1dec52f090 R08: 000000000000023a R09: 0000000000000000 [ 318.394490][T15345] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 318.394506][T15345] R13: 0000000000000000 R14: 00007f1dee0f5fa0 R15: 00007ffeeb55cb58 [ 318.394530][T15345] [ 318.705488][T15359] openvswitch: netlink: Message has 6 unknown bytes. [ 318.714337][T15361] netlink: 'syz.4.4034': attribute type 4 has an invalid length. [ 318.858957][T15383] FAULT_INJECTION: forcing a failure. [ 318.858957][T15383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.872248][T15383] CPU: 0 UID: 0 PID: 15383 Comm: syz.4.4045 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 318.872334][T15383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 318.872351][T15383] Call Trace: [ 318.872359][T15383] [ 318.872369][T15383] __dump_stack+0x1d/0x30 [ 318.872393][T15383] dump_stack_lvl+0xe8/0x140 [ 318.872415][T15383] dump_stack+0x15/0x1b [ 318.872430][T15383] should_fail_ex+0x265/0x280 [ 318.872545][T15383] should_fail+0xb/0x20 [ 318.872578][T15383] should_fail_usercopy+0x1a/0x20 [ 318.872602][T15383] strncpy_from_user+0x25/0x230 [ 318.872652][T15383] ? kmem_cache_alloc_noprof+0x186/0x310 [ 318.872686][T15383] ? getname_flags+0x80/0x3b0 [ 318.872716][T15383] getname_flags+0xae/0x3b0 [ 318.872774][T15383] __se_sys_move_mount+0x1ce/0x450 [ 318.872800][T15383] ? fput+0x8f/0xc0 [ 318.872914][T15383] __x64_sys_move_mount+0x67/0x80 [ 318.872943][T15383] x64_sys_call+0xcfe/0x2ff0 [ 318.872974][T15383] do_syscall_64+0xd2/0x200 [ 318.873003][T15383] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 318.873033][T15383] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 318.873054][T15383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.873088][T15383] RIP: 0033:0x7f6af367eb69 [ 318.873169][T15383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.873187][T15383] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 318.873250][T15383] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 318.873264][T15383] RDX: ffffffffffffffff RSI: 0000200000000100 RDI: ffffffffffffffff [ 318.873280][T15383] RBP: 00007f6af1cdf090 R08: 0000000000000014 R09: 0000000000000000 [ 318.873296][T15383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.873312][T15383] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 318.873341][T15383] [ 319.137017][T15388] __nla_validate_parse: 10 callbacks suppressed [ 319.137108][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4047'. [ 319.208445][T15397] openvswitch: netlink: Message has 6 unknown bytes. [ 319.284709][T15407] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4056'. [ 319.321930][T15409] netlink: 'syz.0.4048': attribute type 4 has an invalid length. [ 319.335119][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 319.375367][T15412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4057'. [ 319.497869][T15426] FAULT_INJECTION: forcing a failure. [ 319.497869][T15426] name failslab, interval 1, probability 0, space 0, times 0 [ 319.510651][T15426] CPU: 1 UID: 0 PID: 15426 Comm: syz.4.4065 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 319.510687][T15426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.510716][T15426] Call Trace: [ 319.510723][T15426] [ 319.510731][T15426] __dump_stack+0x1d/0x30 [ 319.510805][T15426] dump_stack_lvl+0xe8/0x140 [ 319.510830][T15426] dump_stack+0x15/0x1b [ 319.510850][T15426] should_fail_ex+0x265/0x280 [ 319.510965][T15426] should_failslab+0x8c/0xb0 [ 319.510993][T15426] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 319.511032][T15426] ? sidtab_sid2str_get+0xa0/0x130 [ 319.511076][T15426] kmemdup_noprof+0x2b/0x70 [ 319.511167][T15426] sidtab_sid2str_get+0xa0/0x130 [ 319.511266][T15426] security_sid_to_context_core+0x1eb/0x2e0 [ 319.511381][T15426] security_sid_to_context+0x27/0x40 [ 319.511458][T15426] selinux_lsmprop_to_secctx+0x67/0xf0 [ 319.511527][T15426] security_lsmprop_to_secctx+0x43/0x80 [ 319.511560][T15426] audit_log_task_context+0x77/0x190 [ 319.511629][T15426] audit_log_task+0xf4/0x250 [ 319.511663][T15426] audit_seccomp+0x61/0x100 [ 319.511694][T15426] ? __seccomp_filter+0x68c/0x10d0 [ 319.511751][T15426] __seccomp_filter+0x69d/0x10d0 [ 319.511779][T15426] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.511811][T15426] ? vfs_write+0x75e/0x8e0 [ 319.511843][T15426] __secure_computing+0x82/0x150 [ 319.511869][T15426] syscall_trace_enter+0xcf/0x1e0 [ 319.511947][T15426] do_syscall_64+0xac/0x200 [ 319.511977][T15426] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.512000][T15426] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 319.512085][T15426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.512166][T15426] RIP: 0033:0x7f6af367eb69 [ 319.512192][T15426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.512214][T15426] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 319.512238][T15426] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 319.512255][T15426] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 319.512271][T15426] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 319.512323][T15426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.512340][T15426] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 319.512364][T15426] [ 319.875341][T15432] lo speed is unknown, defaulting to 1000 [ 319.925305][T15432] siw: device registration error -23 [ 320.082622][T15436] tmpfs: Unknown parameter 'contextù' [ 320.187112][T15440] netlink: 'syz.4.4069': attribute type 4 has an invalid length. [ 320.401180][T15465] gretap1: entered promiscuous mode [ 320.424615][T15471] openvswitch: netlink: Message has 6 unknown bytes. [ 320.441616][ T10] usb usb2-port1: unable to enumerate USB device [ 320.470739][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 320.508882][T15474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4082'. [ 320.583881][T15481] syzkaller1: entered promiscuous mode [ 320.589511][T15481] syzkaller1: entered allmulticast mode [ 320.837834][T15492] lo speed is unknown, defaulting to 1000 [ 320.886845][T15492] siw: device registration error -23 [ 321.107253][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'. [ 321.122879][T15495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4091'. [ 321.139099][T15496] openvswitch: netlink: Message has 6 unknown bytes. [ 321.195314][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 321.224051][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4096'. [ 321.262670][T15515] netlink: 'syz.0.4100': attribute type 2 has an invalid length. [ 321.321908][T15523] openvswitch: netlink: Message has 6 unknown bytes. [ 321.604070][T15558] openvswitch: netlink: Message has 6 unknown bytes. [ 321.623044][T15560] FAULT_INJECTION: forcing a failure. [ 321.623044][T15560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.636254][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.3.4119 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 321.636329][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.636415][T15560] Call Trace: [ 321.636421][T15560] [ 321.636429][T15560] __dump_stack+0x1d/0x30 [ 321.636518][T15560] dump_stack_lvl+0xe8/0x140 [ 321.636536][T15560] dump_stack+0x15/0x1b [ 321.636552][T15560] should_fail_ex+0x265/0x280 [ 321.636592][T15560] should_fail+0xb/0x20 [ 321.636629][T15560] should_fail_usercopy+0x1a/0x20 [ 321.636647][T15560] _copy_from_iter+0xcf/0xe40 [ 321.636740][T15560] ? __build_skb_around+0x1a0/0x200 [ 321.636776][T15560] ? __alloc_skb+0x223/0x320 [ 321.636807][T15560] netlink_sendmsg+0x471/0x6b0 [ 321.636865][T15560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.636897][T15560] __sock_sendmsg+0x142/0x180 [ 321.636920][T15560] ____sys_sendmsg+0x31e/0x4e0 [ 321.636955][T15560] ___sys_sendmsg+0x17b/0x1d0 [ 321.637034][T15560] __x64_sys_sendmsg+0xd4/0x160 [ 321.637069][T15560] x64_sys_call+0x191e/0x2ff0 [ 321.637169][T15560] do_syscall_64+0xd2/0x200 [ 321.637199][T15560] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 321.637301][T15560] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 321.637376][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.637408][T15560] RIP: 0033:0x7f1dedeceb69 [ 321.637425][T15560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.637449][T15560] RSP: 002b:00007f1dec52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.637476][T15560] RAX: ffffffffffffffda RBX: 00007f1dee0f5fa0 RCX: 00007f1dedeceb69 [ 321.637492][T15560] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 321.637506][T15560] RBP: 00007f1dec52f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.637517][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.637529][T15560] R13: 0000000000000000 R14: 00007f1dee0f5fa0 R15: 00007ffeeb55cb58 [ 321.637599][T15560] [ 321.865455][T15564] openvswitch: netlink: Message has 6 unknown bytes. [ 322.033915][T15591] FAULT_INJECTION: forcing a failure. [ 322.033915][T15591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.047050][T15591] CPU: 1 UID: 0 PID: 15591 Comm: syz.6.4130 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 322.047091][T15591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.047149][T15591] Call Trace: [ 322.047158][T15591] [ 322.047169][T15591] __dump_stack+0x1d/0x30 [ 322.047196][T15591] dump_stack_lvl+0xe8/0x140 [ 322.047221][T15591] dump_stack+0x15/0x1b [ 322.047253][T15591] should_fail_ex+0x265/0x280 [ 322.047323][T15591] should_fail+0xb/0x20 [ 322.047359][T15591] should_fail_usercopy+0x1a/0x20 [ 322.047385][T15591] _copy_to_user+0x20/0xa0 [ 322.047485][T15591] simple_read_from_buffer+0xb5/0x130 [ 322.047509][T15591] proc_fail_nth_read+0x10e/0x150 [ 322.047616][T15591] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 322.047645][T15591] vfs_read+0x1a0/0x6f0 [ 322.047667][T15591] ? __rcu_read_unlock+0x4f/0x70 [ 322.047691][T15591] ? __fget_files+0x184/0x1c0 [ 322.047810][T15591] ksys_read+0xda/0x1a0 [ 322.047962][T15591] __x64_sys_read+0x40/0x50 [ 322.047981][T15591] x64_sys_call+0x27bc/0x2ff0 [ 322.048000][T15591] do_syscall_64+0xd2/0x200 [ 322.048022][T15591] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.048043][T15591] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 322.048108][T15591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.048136][T15591] RIP: 0033:0x7f3a626ed57c [ 322.048168][T15591] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 322.048210][T15591] RSP: 002b:00007f3a60d4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 322.048234][T15591] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626ed57c [ 322.048248][T15591] RDX: 000000000000000f RSI: 00007f3a60d4f0a0 RDI: 0000000000000007 [ 322.048263][T15591] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 322.048277][T15591] R10: 0000000000000405 R11: 0000000000000246 R12: 0000000000000001 [ 322.048334][T15591] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 322.048351][T15591] [ 322.323324][T15595] lo speed is unknown, defaulting to 1000 [ 322.373583][T15595] siw: device registration error -23 [ 322.423153][T15599] openvswitch: netlink: Message has 6 unknown bytes. [ 322.458773][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.467199][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.514065][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.532162][T15602] vlan0: entered allmulticast mode [ 322.539627][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.554615][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.584475][T15594] block device autoloading is deprecated and will be removed. [ 322.607842][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.661589][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.745120][T15582] blktrace: Concurrent blktraces are not allowed on sg0 [ 322.812843][T15609] syzkaller1: entered promiscuous mode [ 322.818403][T15609] syzkaller1: entered allmulticast mode [ 322.935840][T15622] FAULT_INJECTION: forcing a failure. [ 322.935840][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 322.948617][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.0.4145 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 322.948652][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.948679][T15622] Call Trace: [ 322.948686][T15622] [ 322.948693][T15622] __dump_stack+0x1d/0x30 [ 322.948716][T15622] dump_stack_lvl+0xe8/0x140 [ 322.948739][T15622] dump_stack+0x15/0x1b [ 322.948760][T15622] should_fail_ex+0x265/0x280 [ 322.948858][T15622] should_failslab+0x8c/0xb0 [ 322.948888][T15622] __kmalloc_noprof+0xa5/0x3e0 [ 322.948978][T15622] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 322.949015][T15622] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 322.949050][T15622] genl_family_rcv_msg_doit+0x48/0x1b0 [ 322.949097][T15622] ? selinux_capable+0x31/0x40 [ 322.949130][T15622] ? security_capable+0x83/0x90 [ 322.949157][T15622] ? ns_capable+0x7d/0xb0 [ 322.949218][T15622] genl_rcv_msg+0x422/0x460 [ 322.949255][T15622] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 322.949381][T15622] netlink_rcv_skb+0x120/0x220 [ 322.949420][T15622] ? __pfx_genl_rcv_msg+0x10/0x10 [ 322.949519][T15622] genl_rcv+0x28/0x40 [ 322.949546][T15622] netlink_unicast+0x5c0/0x690 [ 322.949585][T15622] netlink_sendmsg+0x58b/0x6b0 [ 322.949629][T15622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.949679][T15622] __sock_sendmsg+0x142/0x180 [ 322.949703][T15622] ____sys_sendmsg+0x31e/0x4e0 [ 322.949771][T15622] ___sys_sendmsg+0x17b/0x1d0 [ 322.949832][T15622] __x64_sys_sendmsg+0xd4/0x160 [ 322.949948][T15622] x64_sys_call+0x191e/0x2ff0 [ 322.949976][T15622] do_syscall_64+0xd2/0x200 [ 322.950006][T15622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.950113][T15622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 322.950141][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.950169][T15622] RIP: 0033:0x7fe61fa0eb69 [ 322.950239][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.950376][T15622] RSP: 002b:00007fe61e077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.950401][T15622] RAX: ffffffffffffffda RBX: 00007fe61fc35fa0 RCX: 00007fe61fa0eb69 [ 322.950417][T15622] RDX: 0000000000008842 RSI: 00002000000002c0 RDI: 0000000000000006 [ 322.950510][T15622] RBP: 00007fe61e077090 R08: 0000000000000000 R09: 0000000000000000 [ 322.950526][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.950541][T15622] R13: 0000000000000000 R14: 00007fe61fc35fa0 R15: 00007fff4c192498 [ 322.950577][T15622] [ 323.053921][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 323.053940][ T29] audit: type=1400 audit(25166143.835:13617): avc: denied { read } for pid=15623 comm="syz.1.4147" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 323.066636][ T29] audit: type=1400 audit(25166143.835:13618): avc: denied { open } for pid=15623 comm="syz.1.4147" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 323.338503][ T29] audit: type=1400 audit(25166143.903:13619): avc: denied { mount } for pid=15623 comm="syz.1.4147" name="/" dev="ramfs" ino=53579 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 323.420337][ T29] audit: type=1401 audit(25166144.185:13620): op=fscreate invalid_context=04 [ 323.442824][ T29] audit: type=1400 audit(25166144.204:13621): avc: denied { name_bind } for pid=15651 comm="syz.4.4156" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 323.501653][ T29] audit: type=1401 audit(25166144.262:13622): op=fscreate invalid_context=04 [ 323.549913][T15667] syzkaller1: entered promiscuous mode [ 323.555485][T15667] syzkaller1: entered allmulticast mode [ 323.573848][ T29] audit: type=1326 audit(25166144.330:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dedeceb69 code=0x7ffc0000 [ 323.597350][ T29] audit: type=1326 audit(25166144.330:13624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dedeceb69 code=0x7ffc0000 [ 323.629067][T15671] openvswitch: netlink: Message has 6 unknown bytes. [ 323.636783][ T29] audit: type=1326 audit(25166144.330:13625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dedeceb69 code=0x7ffc0000 [ 323.660316][ T29] audit: type=1326 audit(25166144.330:13626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15669 comm="syz.3.4165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dedeceb69 code=0x7ffc0000 [ 323.923549][T15696] netlink: 'syz.3.4176': attribute type 4 has an invalid length. [ 323.979044][T15700] syzkaller1: entered promiscuous mode [ 323.984615][T15700] syzkaller1: entered allmulticast mode [ 324.020699][T15704] netlink: 'syz.3.4180': attribute type 1 has an invalid length. [ 324.034644][T15704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.049974][T15704] 8021q: adding VLAN 0 to HW filter on device bond1 [ 324.057415][T15704] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.080125][T15704] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 324.105812][T15707] FAULT_INJECTION: forcing a failure. [ 324.105812][T15707] name failslab, interval 1, probability 0, space 0, times 0 [ 324.118605][T15707] CPU: 1 UID: 0 PID: 15707 Comm: syz.6.4181 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 324.118640][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.118657][T15707] Call Trace: [ 324.118666][T15707] [ 324.118674][T15707] __dump_stack+0x1d/0x30 [ 324.118699][T15707] dump_stack_lvl+0xe8/0x140 [ 324.118718][T15707] dump_stack+0x15/0x1b [ 324.118808][T15707] should_fail_ex+0x265/0x280 [ 324.118843][T15707] should_failslab+0x8c/0xb0 [ 324.118873][T15707] kmem_cache_alloc_noprof+0x50/0x310 [ 324.118977][T15707] ? skb_clone+0x151/0x1f0 [ 324.119002][T15707] skb_clone+0x151/0x1f0 [ 324.119024][T15707] __netlink_deliver_tap+0x2c9/0x500 [ 324.119068][T15707] netlink_unicast+0x66b/0x690 [ 324.119242][T15707] netlink_sendmsg+0x58b/0x6b0 [ 324.119337][T15707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 324.119379][T15707] __sock_sendmsg+0x142/0x180 [ 324.119412][T15707] ____sys_sendmsg+0x31e/0x4e0 [ 324.119456][T15707] ___sys_sendmsg+0x17b/0x1d0 [ 324.119498][T15707] __x64_sys_sendmsg+0xd4/0x160 [ 324.119583][T15707] x64_sys_call+0x191e/0x2ff0 [ 324.119603][T15707] do_syscall_64+0xd2/0x200 [ 324.119629][T15707] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.119658][T15707] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 324.119679][T15707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.119769][T15707] RIP: 0033:0x7f3a626eeb69 [ 324.119788][T15707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.119887][T15707] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.119910][T15707] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 324.119926][T15707] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 324.119942][T15707] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.119968][T15707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.119982][T15707] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 324.120006][T15707] [ 324.405753][T15707] vlan0: entered allmulticast mode [ 324.410684][T15715] __nla_validate_parse: 24 callbacks suppressed [ 324.410707][T15715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4184'. [ 324.440166][T15715] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4184'. [ 324.477204][T15715] hsr_slave_0: left promiscuous mode [ 324.490100][T15715] hsr_slave_1: left promiscuous mode [ 324.540007][T15728] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4189'. [ 324.552595][T15730] blktrace: Concurrent blktraces are not allowed on sg0 [ 324.583153][T15729] netlink: 'syz.4.4188': attribute type 4 has an invalid length. [ 324.616857][T15725] Falling back ldisc for ttyS3. [ 324.652962][T15735] openvswitch: netlink: Message has 6 unknown bytes. [ 324.713015][T15744] openvswitch: netlink: Message has 6 unknown bytes. [ 324.880973][T15749] lo speed is unknown, defaulting to 1000 [ 324.909079][T15749] siw: device registration error -23 [ 325.675080][T15751] lo speed is unknown, defaulting to 1000 [ 325.738857][T15750] siw: device registration error -23 [ 325.814042][T15757] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4201'. [ 325.826493][T15759] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4200'. [ 325.843344][T15761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4202'. [ 325.972324][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4208'. [ 325.996935][T15778] vlan2: entered allmulticast mode [ 326.096142][T15796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4217'. [ 326.201669][T15802] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4219'. [ 326.239120][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.264831][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.285241][T15809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.293909][T15809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.318305][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4223'. [ 326.424289][T15817] FAULT_INJECTION: forcing a failure. [ 326.424289][T15817] name failslab, interval 1, probability 0, space 0, times 0 [ 326.437078][T15817] CPU: 1 UID: 0 PID: 15817 Comm: syz.4.4226 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 326.437177][T15817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.437190][T15817] Call Trace: [ 326.437197][T15817] [ 326.437205][T15817] __dump_stack+0x1d/0x30 [ 326.437352][T15817] dump_stack_lvl+0xe8/0x140 [ 326.437369][T15817] dump_stack+0x15/0x1b [ 326.437385][T15817] should_fail_ex+0x265/0x280 [ 326.437423][T15817] should_failslab+0x8c/0xb0 [ 326.437468][T15817] kmem_cache_alloc_node_noprof+0x57/0x320 [ 326.437495][T15817] ? __alloc_skb+0x101/0x320 [ 326.437580][T15817] __alloc_skb+0x101/0x320 [ 326.437629][T15817] alloc_skb_with_frags+0x7d/0x470 [ 326.437659][T15817] ? selinux_file_open+0x2df/0x330 [ 326.437682][T15817] sock_alloc_send_pskb+0x43a/0x4f0 [ 326.437704][T15817] ? mntput+0x4b/0x80 [ 326.437742][T15817] tun_get_user+0x9b3/0x2680 [ 326.437809][T15817] ? ref_tracker_alloc+0x1f2/0x2f0 [ 326.437907][T15817] ? selinux_file_permission+0x2f0/0x320 [ 326.437987][T15817] tun_chr_write_iter+0x15e/0x210 [ 326.438013][T15817] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 326.438096][T15817] vfs_write+0x4a0/0x8e0 [ 326.438128][T15817] ksys_write+0xda/0x1a0 [ 326.438153][T15817] __x64_sys_write+0x40/0x50 [ 326.438182][T15817] x64_sys_call+0x27fe/0x2ff0 [ 326.438208][T15817] do_syscall_64+0xd2/0x200 [ 326.438239][T15817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.438285][T15817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.438305][T15817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.438325][T15817] RIP: 0033:0x7f6af367eb69 [ 326.438341][T15817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.438368][T15817] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.438389][T15817] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 326.438405][T15817] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 326.438420][T15817] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 326.438436][T15817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.438451][T15817] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 326.438472][T15817] [ 326.721674][T15824] openvswitch: netlink: Message has 6 unknown bytes. [ 326.747545][T15826] openvswitch: netlink: Message has 6 unknown bytes. [ 326.823707][T15827] lo speed is unknown, defaulting to 1000 [ 326.926145][T15827] siw: device registration error -23 [ 327.100123][T15832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.107669][T15832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.148569][T15832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.156035][T15832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.177465][T15837] openvswitch: netlink: Message has 6 unknown bytes. [ 327.293142][T15841] lo speed is unknown, defaulting to 1000 [ 327.391012][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.398506][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.405945][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.413445][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.420989][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.428475][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.435881][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.443401][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.446693][T15853] siw: device registration error -23 [ 327.450851][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.463616][ T3569] hid-generic 0008:0006:0007.0002: unknown main item tag 0x0 [ 327.476289][T15844] loop6: detected capacity change from 0 to 8192 [ 327.508491][ T3569] hid-generic 0008:0006:0007.0002: hidraw0: HID v0.0b Device [syz1] on syz1 [ 327.560383][T15836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.682763][T15836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.706186][T15859] loop6: detected capacity change from 0 to 128 [ 327.769620][T15836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.851099][T15836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.933944][ T421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.949523][ T421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.999152][ T421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.007471][ T421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.054048][T15876] syzkaller1: entered promiscuous mode [ 328.059612][T15876] syzkaller1: entered allmulticast mode [ 328.211043][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 328.211061][ T29] audit: type=1326 audit(26214724.869:13791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.271096][ T29] audit: type=1326 audit(26214724.899:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.294577][ T29] audit: type=1326 audit(26214724.899:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.317977][ T29] audit: type=1326 audit(26214724.899:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.341453][ T29] audit: type=1326 audit(26214724.899:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.364851][ T29] audit: type=1326 audit(26214724.899:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.388415][ T29] audit: type=1326 audit(26214724.899:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.411872][ T29] audit: type=1326 audit(26214724.899:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.435331][ T29] audit: type=1326 audit(26214724.899:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.458811][ T29] audit: type=1326 audit(26214724.899:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15887 comm="syz.4.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 328.586346][T15889] lo speed is unknown, defaulting to 1000 [ 328.611260][T15892] sch_fq: defrate 4294967295 ignored. [ 328.681526][T15902] netlink: 'syz.0.4259': attribute type 4 has an invalid length. [ 328.884607][T15932] openvswitch: netlink: Message has 6 unknown bytes. [ 329.102514][T15948] loop6: detected capacity change from 0 to 8192 [ 329.193692][T15960] syzkaller1: entered promiscuous mode [ 329.199358][T15960] syzkaller1: entered allmulticast mode [ 329.238325][T15965] loop6: detected capacity change from 0 to 512 [ 329.253533][T15965] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 329.281084][T15965] EXT4-fs (loop6): invalid journal inode [ 329.289047][T15965] EXT4-fs (loop6): can't get journal size [ 329.299501][T15967] openvswitch: netlink: Message has 6 unknown bytes. [ 329.307760][T15965] EXT4-fs (loop6): 1 truncate cleaned up [ 329.316935][T15965] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.360364][T15965] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.388289][T15973] tmpfs: Unknown parameter 'rootcontext½' [ 329.432804][T15965] loop6: detected capacity change from 0 to 1764 [ 329.447078][T15965] iso9660: Bad value for 'session' [ 329.558658][T15989] loop6: detected capacity change from 0 to 512 [ 329.575777][T15989] EXT4-fs: Ignoring removed bh option [ 329.591154][T15991] __nla_validate_parse: 11 callbacks suppressed [ 329.591171][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 329.599790][T15989] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 329.622582][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4283'. [ 329.623233][T15989] EXT4-fs (loop6): 1 truncate cleaned up [ 329.637777][T15989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.678229][T15994] netlink: 'syz.4.4284': attribute type 4 has an invalid length. [ 329.721981][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.749354][T15998] openvswitch: netlink: Message has 6 unknown bytes. [ 329.763825][T16003] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4288'. [ 329.869840][T16020] openvswitch: netlink: Message has 6 unknown bytes. [ 329.878615][T16021] openvswitch: netlink: Message has 6 unknown bytes. [ 329.936266][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 329.981820][T16027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4297'. [ 330.086369][T16037] netlink: 'syz.3.4301': attribute type 4 has an invalid length. [ 330.240796][T16044] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4304'. [ 330.278208][T16050] sch_fq: defrate 4294967295 ignored. [ 330.344598][T16059] openvswitch: netlink: Message has 6 unknown bytes. [ 330.389519][T16061] loop6: detected capacity change from 0 to 1024 [ 330.402304][T16061] ext4: Unknown parameter 'nouser_xattr' [ 330.409309][T16061] SELinux: policydb string length 1970143240 does not match expected length 8 [ 330.447983][T16061] SELinux: failed to load policy [ 330.479686][T16068] loop6: detected capacity change from 0 to 512 [ 330.490988][T16068] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 330.518917][T16071] netlink: 'syz.1.4314': attribute type 4 has an invalid length. [ 330.572699][T16073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4315'. [ 330.629493][T16068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4311'. [ 330.675397][T16079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4318'. [ 330.769184][T16090] openvswitch: netlink: Message has 6 unknown bytes. [ 330.873289][T16097] FAULT_INJECTION: forcing a failure. [ 330.873289][T16097] name failslab, interval 1, probability 0, space 0, times 0 [ 330.886003][T16097] CPU: 0 UID: 0 PID: 16097 Comm: syz.1.4325 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 330.886090][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 330.886107][T16097] Call Trace: [ 330.886115][T16097] [ 330.886126][T16097] __dump_stack+0x1d/0x30 [ 330.886148][T16097] dump_stack_lvl+0xe8/0x140 [ 330.886166][T16097] dump_stack+0x15/0x1b [ 330.886182][T16097] should_fail_ex+0x265/0x280 [ 330.886304][T16097] should_failslab+0x8c/0xb0 [ 330.886331][T16097] __kmalloc_noprof+0xa5/0x3e0 [ 330.886366][T16097] ? rds_message_alloc+0x45/0x120 [ 330.886394][T16097] rds_message_alloc+0x45/0x120 [ 330.886452][T16097] rds_sendmsg+0x860/0x14a0 [ 330.886485][T16097] ? __pfx_rds_sendmsg+0x10/0x10 [ 330.886591][T16097] __sock_sendmsg+0x142/0x180 [ 330.886619][T16097] ____sys_sendmsg+0x31e/0x4e0 [ 330.886854][T16097] ___sys_sendmsg+0x17b/0x1d0 [ 330.886899][T16097] __x64_sys_sendmsg+0xd4/0x160 [ 330.886934][T16097] x64_sys_call+0x191e/0x2ff0 [ 330.886985][T16097] do_syscall_64+0xd2/0x200 [ 330.887015][T16097] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.887038][T16097] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 330.887058][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.887084][T16097] RIP: 0033:0x7fb63c28eb69 [ 330.887102][T16097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.887192][T16097] RSP: 002b:00007fb63a8ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.887210][T16097] RAX: ffffffffffffffda RBX: 00007fb63c4b5fa0 RCX: 00007fb63c28eb69 [ 330.887225][T16097] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 330.887241][T16097] RBP: 00007fb63a8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 330.887256][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.887335][T16097] R13: 0000000000000000 R14: 00007fb63c4b5fa0 R15: 00007ffdb70c3ff8 [ 330.887432][T16097] [ 331.224873][T16112] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 331.269855][T16115] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4331'. [ 331.304208][T16119] Invalid ELF header magic: != ELF [ 331.369733][T16126] loop6: detected capacity change from 0 to 1024 [ 331.395958][T16126] EXT4-fs: Ignoring removed nobh option [ 331.401641][T16126] EXT4-fs: Ignoring removed bh option [ 331.433008][T16130] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16130 comm=syz.4.4338 [ 331.448020][T16126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.469815][T16134] syzkaller1: entered promiscuous mode [ 331.475422][T16134] syzkaller1: entered allmulticast mode [ 332.204198][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.252926][T16158] FAULT_INJECTION: forcing a failure. [ 332.252926][T16158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.266187][T16158] CPU: 1 UID: 0 PID: 16158 Comm: syz.6.4349 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 332.266230][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.266247][T16158] Call Trace: [ 332.266253][T16158] [ 332.266260][T16158] __dump_stack+0x1d/0x30 [ 332.266352][T16158] dump_stack_lvl+0xe8/0x140 [ 332.266368][T16158] dump_stack+0x15/0x1b [ 332.266382][T16158] should_fail_ex+0x265/0x280 [ 332.266435][T16158] should_fail+0xb/0x20 [ 332.266627][T16158] should_fail_usercopy+0x1a/0x20 [ 332.266643][T16158] _copy_from_user+0x1c/0xb0 [ 332.266666][T16158] lo_ioctl+0x4b5/0x1350 [ 332.266690][T16158] ? avc_has_extended_perms+0x73d/0x940 [ 332.266719][T16158] ? ioctl_has_perm+0x257/0x2a0 [ 332.266768][T16158] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 332.266786][T16158] ? do_vfs_ioctl+0x866/0xe10 [ 332.266802][T16158] ? selinux_file_ioctl+0x308/0x3a0 [ 332.266893][T16158] ? __pfx_lo_ioctl+0x10/0x10 [ 332.266916][T16158] ? __pfx_blkdev_ioctl+0x10/0x10 [ 332.267048][T16158] blkdev_ioctl+0x352/0x440 [ 332.267066][T16158] __se_sys_ioctl+0xcb/0x140 [ 332.267103][T16158] __x64_sys_ioctl+0x43/0x50 [ 332.267132][T16158] x64_sys_call+0x1816/0x2ff0 [ 332.267227][T16158] do_syscall_64+0xd2/0x200 [ 332.267327][T16158] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 332.267352][T16158] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 332.267409][T16158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.267428][T16158] RIP: 0033:0x7f3a626eeb69 [ 332.267442][T16158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.267458][T16158] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.267479][T16158] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 332.267525][T16158] RDX: 0000200000000540 RSI: 0000000000004c04 RDI: 000000000000000d [ 332.267537][T16158] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 332.267548][T16158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.267559][T16158] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 332.267576][T16158] [ 332.995226][T16172] lo speed is unknown, defaulting to 1000 [ 333.089784][T16172] siw: device registration error -23 [ 333.431255][T16182] openvswitch: netlink: Message has 6 unknown bytes. [ 333.471654][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 333.471669][ T29] audit: type=1400 audit(27787594.017:14088): avc: denied { name_connect } for pid=16187 comm="syz.3.4360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 333.511609][ T29] audit: type=1400 audit(27787594.027:14089): avc: denied { listen } for pid=16187 comm="syz.3.4360" lport=37314 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.534858][ T29] audit: type=1400 audit(27787594.027:14090): avc: denied { accept } for pid=16187 comm="syz.3.4360" lport=37314 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.557891][ T29] audit: type=1400 audit(27787594.027:14091): avc: denied { ioctl } for pid=16187 comm="syz.3.4360" path="socket:[55777]" dev="sockfs" ino=55777 ioctlcmd=0x890d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.602487][T16195] syzkaller1: entered promiscuous mode [ 333.608059][T16195] syzkaller1: entered allmulticast mode [ 333.626037][T16188] netlink: 'syz.3.4360': attribute type 4 has an invalid length. [ 333.704107][T16201] loop6: detected capacity change from 0 to 128 [ 334.376120][ T29] audit: type=1326 audit(28836170.916:14092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 334.399672][ T29] audit: type=1326 audit(28836170.916:14093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 334.423270][ T29] audit: type=1326 audit(28836170.916:14094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 334.469869][ T29] audit: type=1326 audit(28836170.916:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 334.493384][ T29] audit: type=1326 audit(28836170.916:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb63c28d4d0 code=0x7ffc0000 [ 334.517004][ T29] audit: type=1326 audit(28836170.916:14097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16218 comm="syz.1.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb63c28d4d0 code=0x7ffc0000 [ 334.549994][T16225] openvswitch: netlink: Message has 6 unknown bytes. [ 334.581187][T16228] FAULT_INJECTION: forcing a failure. [ 334.581187][T16228] name failslab, interval 1, probability 0, space 0, times 0 [ 334.594011][T16228] CPU: 1 UID: 0 PID: 16228 Comm: syz.6.4375 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 334.594049][T16228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.594080][T16228] Call Trace: [ 334.594089][T16228] [ 334.594099][T16228] __dump_stack+0x1d/0x30 [ 334.594126][T16228] dump_stack_lvl+0xe8/0x140 [ 334.594151][T16228] dump_stack+0x15/0x1b [ 334.594173][T16228] should_fail_ex+0x265/0x280 [ 334.594227][T16228] should_failslab+0x8c/0xb0 [ 334.594259][T16228] kmem_cache_alloc_noprof+0x50/0x310 [ 334.594347][T16228] ? getname_flags+0x80/0x3b0 [ 334.594384][T16228] getname_flags+0x80/0x3b0 [ 334.594453][T16228] user_path_at+0x28/0x130 [ 334.594499][T16228] do_utimes+0xd9/0x210 [ 334.594523][T16228] __x64_sys_utime+0xbc/0x140 [ 334.594626][T16228] x64_sys_call+0x2b0b/0x2ff0 [ 334.594652][T16228] do_syscall_64+0xd2/0x200 [ 334.594707][T16228] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.594731][T16228] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.594751][T16228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.594833][T16228] RIP: 0033:0x7f3a626eeb69 [ 334.594852][T16228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.594920][T16228] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084 [ 334.594944][T16228] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 334.594960][T16228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000f00 [ 334.594976][T16228] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.595048][T16228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.595064][T16228] R13: 0000000000000001 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 334.595086][T16228] [ 334.800960][T16234] __nla_validate_parse: 6 callbacks suppressed [ 334.800980][T16234] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4378'. [ 334.853093][T16242] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 334.860892][T16236] loop6: detected capacity change from 0 to 1024 [ 334.880127][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4382'. [ 334.886025][T16236] EXT4-fs: Ignoring removed nobh option [ 334.894768][T16236] EXT4-fs: Ignoring removed bh option [ 334.899595][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4382'. [ 334.921123][T16246] FAULT_INJECTION: forcing a failure. [ 334.921123][T16246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.934267][T16246] CPU: 1 UID: 0 PID: 16246 Comm: syz.4.4383 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 334.934303][T16246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.934320][T16246] Call Trace: [ 334.934330][T16246] [ 334.934340][T16246] __dump_stack+0x1d/0x30 [ 334.934422][T16246] dump_stack_lvl+0xe8/0x140 [ 334.934444][T16246] dump_stack+0x15/0x1b [ 334.934474][T16246] should_fail_ex+0x265/0x280 [ 334.934516][T16246] should_fail+0xb/0x20 [ 334.934544][T16246] should_fail_usercopy+0x1a/0x20 [ 334.934563][T16246] _copy_to_user+0x20/0xa0 [ 334.934605][T16246] simple_read_from_buffer+0xb5/0x130 [ 334.934634][T16246] proc_fail_nth_read+0x10e/0x150 [ 334.934685][T16246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.934719][T16246] vfs_read+0x1a0/0x6f0 [ 334.934745][T16246] ? __rcu_read_unlock+0x4f/0x70 [ 334.934789][T16246] ? __fget_files+0x184/0x1c0 [ 334.934828][T16246] ksys_read+0xda/0x1a0 [ 334.934885][T16246] __x64_sys_read+0x40/0x50 [ 334.934914][T16246] x64_sys_call+0x27bc/0x2ff0 [ 334.934941][T16246] do_syscall_64+0xd2/0x200 [ 334.934971][T16246] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.935078][T16246] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 334.935180][T16246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.935241][T16246] RIP: 0033:0x7f6af367d57c [ 334.935256][T16246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.935279][T16246] RSP: 002b:00007f6af1cdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.935297][T16246] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367d57c [ 334.935364][T16246] RDX: 000000000000000f RSI: 00007f6af1cdf0a0 RDI: 0000000000000003 [ 334.935380][T16246] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 334.935395][T16246] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 334.935410][T16246] R13: 0000000000000001 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 334.935432][T16246] [ 335.160834][T16236] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.217161][T16259] openvswitch: netlink: Message has 6 unknown bytes. [ 335.271982][T16266] FAULT_INJECTION: forcing a failure. [ 335.271982][T16266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.285112][T16266] CPU: 0 UID: 0 PID: 16266 Comm: syz.0.4390 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 335.285143][T16266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.285204][T16266] Call Trace: [ 335.285211][T16266] [ 335.285265][T16266] __dump_stack+0x1d/0x30 [ 335.285291][T16266] dump_stack_lvl+0xe8/0x140 [ 335.285333][T16266] dump_stack+0x15/0x1b [ 335.285355][T16266] should_fail_ex+0x265/0x280 [ 335.285515][T16266] should_fail+0xb/0x20 [ 335.285544][T16266] should_fail_usercopy+0x1a/0x20 [ 335.285563][T16266] _copy_to_user+0x20/0xa0 [ 335.285596][T16266] simple_read_from_buffer+0xb5/0x130 [ 335.285694][T16266] proc_fail_nth_read+0x10e/0x150 [ 335.285727][T16266] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.285761][T16266] vfs_read+0x1a0/0x6f0 [ 335.285787][T16266] ? __rcu_read_unlock+0x4f/0x70 [ 335.285853][T16266] ? __fget_files+0x184/0x1c0 [ 335.285974][T16266] ksys_read+0xda/0x1a0 [ 335.286003][T16266] __x64_sys_read+0x40/0x50 [ 335.286031][T16266] x64_sys_call+0x27bc/0x2ff0 [ 335.286109][T16266] do_syscall_64+0xd2/0x200 [ 335.286134][T16266] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.286166][T16266] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 335.286193][T16266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.286279][T16266] RIP: 0033:0x7fe61fa0d57c [ 335.286297][T16266] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.286320][T16266] RSP: 002b:00007fe61e077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.286344][T16266] RAX: ffffffffffffffda RBX: 00007fe61fc35fa0 RCX: 00007fe61fa0d57c [ 335.286387][T16266] RDX: 000000000000000f RSI: 00007fe61e0770a0 RDI: 0000000000000003 [ 335.286399][T16266] RBP: 00007fe61e077090 R08: 0000000000000000 R09: 0000000000000000 [ 335.286411][T16266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.286423][T16266] R13: 0000000000000001 R14: 00007fe61fc35fa0 R15: 00007fff4c192498 [ 335.286444][T16266] [ 335.538418][T16276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16276 comm=syz.0.4393 [ 335.626347][T16287] openvswitch: netlink: Message has 6 unknown bytes. [ 335.650522][T16289] openvswitch: netlink: Message has 6 unknown bytes. [ 335.808687][T16301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4405'. [ 335.813988][T16303] FAULT_INJECTION: forcing a failure. [ 335.813988][T16303] name failslab, interval 1, probability 0, space 0, times 0 [ 335.830385][T16303] CPU: 0 UID: 0 PID: 16303 Comm: syz.1.4406 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 335.830414][T16303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.830426][T16303] Call Trace: [ 335.830432][T16303] [ 335.830440][T16303] __dump_stack+0x1d/0x30 [ 335.830467][T16303] dump_stack_lvl+0xe8/0x140 [ 335.830572][T16303] dump_stack+0x15/0x1b [ 335.830593][T16303] should_fail_ex+0x265/0x280 [ 335.830655][T16303] should_failslab+0x8c/0xb0 [ 335.830759][T16303] kmem_cache_alloc_noprof+0x50/0x310 [ 335.830790][T16303] ? getname_flags+0x80/0x3b0 [ 335.830830][T16303] getname_flags+0x80/0x3b0 [ 335.830860][T16303] path_listxattrat+0x7e/0x2a0 [ 335.830907][T16303] __x64_sys_llistxattr+0x4d/0x60 [ 335.830940][T16303] x64_sys_call+0xf8c/0x2ff0 [ 335.830971][T16303] do_syscall_64+0xd2/0x200 [ 335.830994][T16303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.831018][T16303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 335.831038][T16303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.831103][T16303] RIP: 0033:0x7fb63c28eb69 [ 335.831123][T16303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.831142][T16303] RSP: 002b:00007fb63a8ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 335.831167][T16303] RAX: ffffffffffffffda RBX: 00007fb63c4b5fa0 RCX: 00007fb63c28eb69 [ 335.831184][T16303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 335.831201][T16303] RBP: 00007fb63a8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 335.831217][T16303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.831298][T16303] R13: 0000000000000000 R14: 00007fb63c4b5fa0 R15: 00007ffdb70c3ff8 [ 335.831317][T16303] [ 336.106008][T16313] openvswitch: netlink: Message has 6 unknown bytes. [ 336.115450][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4408'. [ 336.150871][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.195129][T16325] FAULT_INJECTION: forcing a failure. [ 336.195129][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 336.207894][T16325] CPU: 1 UID: 0 PID: 16325 Comm: syz.6.4413 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 336.207933][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.207950][T16325] Call Trace: [ 336.207967][T16325] [ 336.207977][T16325] __dump_stack+0x1d/0x30 [ 336.208003][T16325] dump_stack_lvl+0xe8/0x140 [ 336.208095][T16325] dump_stack+0x15/0x1b [ 336.208117][T16325] should_fail_ex+0x265/0x280 [ 336.208159][T16325] should_failslab+0x8c/0xb0 [ 336.208182][T16325] kmem_cache_alloc_noprof+0x50/0x310 [ 336.208212][T16325] ? getname_flags+0x80/0x3b0 [ 336.208241][T16325] getname_flags+0x80/0x3b0 [ 336.208277][T16325] __x64_sys_rmdir+0x21/0x40 [ 336.208367][T16325] x64_sys_call+0x238c/0x2ff0 [ 336.208543][T16325] do_syscall_64+0xd2/0x200 [ 336.208570][T16325] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.208600][T16325] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 336.208636][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.208657][T16325] RIP: 0033:0x7f3a626eeb69 [ 336.208673][T16325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.208720][T16325] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 336.208739][T16325] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 336.208751][T16325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.208763][T16325] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.208779][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.208795][T16325] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 336.208819][T16325] [ 336.231632][T16329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4417'. [ 336.295677][T16334] FAULT_INJECTION: forcing a failure. [ 336.295677][T16334] name failslab, interval 1, probability 0, space 0, times 0 [ 336.406592][T16334] CPU: 1 UID: 0 PID: 16334 Comm: syz.1.4418 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 336.406619][T16334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.406631][T16334] Call Trace: [ 336.406639][T16334] [ 336.406649][T16334] __dump_stack+0x1d/0x30 [ 336.406735][T16334] dump_stack_lvl+0xe8/0x140 [ 336.406812][T16334] dump_stack+0x15/0x1b [ 336.406834][T16334] should_fail_ex+0x265/0x280 [ 336.406960][T16334] should_failslab+0x8c/0xb0 [ 336.406994][T16334] kmem_cache_alloc_noprof+0x50/0x310 [ 336.407034][T16334] ? prepare_creds+0x37/0x4c0 [ 336.407066][T16334] prepare_creds+0x37/0x4c0 [ 336.407170][T16334] __sys_setregid+0xd8/0x360 [ 336.407218][T16334] __x64_sys_setregid+0x2d/0x40 [ 336.407257][T16334] x64_sys_call+0x2e2e/0x2ff0 [ 336.407328][T16334] do_syscall_64+0xd2/0x200 [ 336.407423][T16334] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.407455][T16334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 336.407488][T16334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.407516][T16334] RIP: 0033:0x7fb63c28eb69 [ 336.407536][T16334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.407561][T16334] RSP: 002b:00007fb63a8ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 336.407628][T16334] RAX: ffffffffffffffda RBX: 00007fb63c4b5fa0 RCX: 00007fb63c28eb69 [ 336.407662][T16334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.407679][T16334] RBP: 00007fb63a8ef090 R08: 0000000000000000 R09: 0000000000000000 [ 336.407694][T16334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.407711][T16334] R13: 0000000000000001 R14: 00007fb63c4b5fa0 R15: 00007ffdb70c3ff8 [ 336.407734][T16334] [ 336.424541][T16341] 9pnet_fd: Insufficient options for proto=fd [ 336.463120][T16337] random: crng reseeded on system resumption [ 336.508764][T16352] openvswitch: netlink: Message has 6 unknown bytes. [ 336.548804][T16351] lo speed is unknown, defaulting to 1000 [ 336.576956][T16359] openvswitch: netlink: Message has 6 unknown bytes. [ 336.655871][T16363] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4432'. [ 336.688503][T16337] tmpfs: Bad value for 'mpol' [ 336.839616][T16386] openvswitch: netlink: Message has 6 unknown bytes. [ 336.949026][T16397] openvswitch: netlink: Message has 6 unknown bytes. [ 337.019232][T16404] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4446'. [ 337.066478][T16414] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4450'. [ 337.103146][T16419] syz.4.4453 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 337.114671][T16419] FAULT_INJECTION: forcing a failure. [ 337.114671][T16419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.127804][T16419] CPU: 1 UID: 0 PID: 16419 Comm: syz.4.4453 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 337.127848][T16419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.127860][T16419] Call Trace: [ 337.127867][T16419] [ 337.127877][T16419] __dump_stack+0x1d/0x30 [ 337.127943][T16419] dump_stack_lvl+0xe8/0x140 [ 337.127961][T16419] dump_stack+0x15/0x1b [ 337.127981][T16419] should_fail_ex+0x265/0x280 [ 337.128021][T16419] should_fail+0xb/0x20 [ 337.128116][T16419] should_fail_usercopy+0x1a/0x20 [ 337.128135][T16419] _copy_to_user+0x20/0xa0 [ 337.128159][T16419] simple_read_from_buffer+0xb5/0x130 [ 337.128185][T16419] proc_fail_nth_read+0x10e/0x150 [ 337.128219][T16419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 337.128323][T16419] vfs_read+0x1a0/0x6f0 [ 337.128346][T16419] ? __rcu_read_unlock+0x4f/0x70 [ 337.128368][T16419] ? __rcu_read_unlock+0x4f/0x70 [ 337.128387][T16419] ? __fget_files+0x184/0x1c0 [ 337.128485][T16419] ksys_read+0xda/0x1a0 [ 337.128583][T16419] __x64_sys_read+0x40/0x50 [ 337.128606][T16419] x64_sys_call+0x27bc/0x2ff0 [ 337.128632][T16419] do_syscall_64+0xd2/0x200 [ 337.128660][T16419] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 337.128687][T16419] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.128748][T16419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.128823][T16419] RIP: 0033:0x7f6af367d57c [ 337.128843][T16419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 337.128867][T16419] RSP: 002b:00007f6af1cdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 337.128891][T16419] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367d57c [ 337.128908][T16419] RDX: 000000000000000f RSI: 00007f6af1cdf0a0 RDI: 0000000000000006 [ 337.128924][T16419] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 337.128986][T16419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.128999][T16419] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 337.129017][T16419] [ 337.370059][T16416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4451'. [ 337.386384][T16427] pim6reg: entered allmulticast mode [ 337.408890][T16429] loop6: detected capacity change from 0 to 512 [ 337.434499][T16429] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 337.464630][T16429] EXT4-fs (loop6): invalid journal inode [ 337.479669][T16429] EXT4-fs (loop6): can't get journal size [ 337.481299][T16433] netlink: 'syz.0.4459': attribute type 11 has an invalid length. [ 337.496268][T16429] EXT4-fs (loop6): 1 truncate cleaned up [ 337.511146][T16429] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.524576][T16429] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.574491][T16429] loop6: detected capacity change from 0 to 1764 [ 337.581322][T16429] iso9660: Bad value for 'session' [ 337.591667][T16443] openvswitch: netlink: Message has 6 unknown bytes. [ 337.748832][T16458] lo speed is unknown, defaulting to 1000 [ 337.998931][T16473] lo speed is unknown, defaulting to 1000 [ 338.049217][T16473] siw: device registration error -23 [ 338.300487][T16479] FAULT_INJECTION: forcing a failure. [ 338.300487][T16479] name failslab, interval 1, probability 0, space 0, times 0 [ 338.313293][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.4.4474 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 338.313320][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.313337][T16479] Call Trace: [ 338.313345][T16479] [ 338.313388][T16479] __dump_stack+0x1d/0x30 [ 338.313408][T16479] dump_stack_lvl+0xe8/0x140 [ 338.313451][T16479] dump_stack+0x15/0x1b [ 338.313537][T16479] should_fail_ex+0x265/0x280 [ 338.313578][T16479] should_failslab+0x8c/0xb0 [ 338.313622][T16479] kmem_cache_alloc_noprof+0x50/0x310 [ 338.313657][T16479] ? security_inode_alloc+0x37/0x100 [ 338.313733][T16479] security_inode_alloc+0x37/0x100 [ 338.313784][T16479] inode_init_always_gfp+0x4b7/0x500 [ 338.313882][T16479] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 338.313906][T16479] alloc_inode+0x58/0x170 [ 338.313934][T16479] new_inode+0x1d/0xe0 [ 338.314037][T16479] shmem_get_inode+0x244/0x750 [ 338.314089][T16479] __shmem_file_setup+0x113/0x210 [ 338.314125][T16479] shmem_file_setup+0x3b/0x50 [ 338.314168][T16479] __se_sys_memfd_create+0x2c3/0x590 [ 338.314197][T16479] __x64_sys_memfd_create+0x31/0x40 [ 338.314224][T16479] x64_sys_call+0x2abe/0x2ff0 [ 338.314250][T16479] do_syscall_64+0xd2/0x200 [ 338.314344][T16479] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.314376][T16479] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 338.314396][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.314449][T16479] RIP: 0033:0x7f6af367eb69 [ 338.314495][T16479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.314519][T16479] RSP: 002b:00007f6af1cdee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 338.314544][T16479] RAX: ffffffffffffffda RBX: 0000000000000555 RCX: 00007f6af367eb69 [ 338.314561][T16479] RDX: 00007f6af1cdeef0 RSI: 0000000000000000 RDI: 00007f6af3702784 [ 338.314633][T16479] RBP: 0000200000000a00 R08: 00007f6af1cdebb7 R09: 00007f6af1cdee40 [ 338.314646][T16479] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 338.314660][T16479] R13: 00007f6af1cdeef0 R14: 00007f6af1cdeeb0 R15: 0000200000000080 [ 338.314684][T16479] [ 338.597029][T16491] loop6: detected capacity change from 0 to 512 [ 338.604715][T16491] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 338.613438][T16491] EXT4-fs (loop6): invalid journal inode [ 338.619177][T16491] EXT4-fs (loop6): can't get journal size [ 338.629732][T16492] netlink: 'syz.4.4478': attribute type 3 has an invalid length. [ 338.638881][T16492] FAULT_INJECTION: forcing a failure. [ 338.638881][T16492] name failslab, interval 1, probability 0, space 0, times 0 [ 338.651608][T16492] CPU: 0 UID: 0 PID: 16492 Comm: syz.4.4478 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 338.651719][T16492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.651741][T16492] Call Trace: [ 338.651750][T16492] [ 338.651760][T16492] __dump_stack+0x1d/0x30 [ 338.651787][T16492] dump_stack_lvl+0xe8/0x140 [ 338.651816][T16492] dump_stack+0x15/0x1b [ 338.651834][T16492] should_fail_ex+0x265/0x280 [ 338.651876][T16492] ? audit_log_d_path+0x8d/0x150 [ 338.651915][T16492] should_failslab+0x8c/0xb0 [ 338.651954][T16492] __kmalloc_cache_noprof+0x4c/0x320 [ 338.651989][T16492] audit_log_d_path+0x8d/0x150 [ 338.652062][T16492] audit_log_d_path_exe+0x42/0x70 [ 338.652188][T16492] audit_log_task+0x1e9/0x250 [ 338.652226][T16492] audit_seccomp+0x61/0x100 [ 338.652257][T16492] ? __seccomp_filter+0x68c/0x10d0 [ 338.652285][T16492] __seccomp_filter+0x69d/0x10d0 [ 338.652363][T16492] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 338.652397][T16492] ? vfs_write+0x75e/0x8e0 [ 338.652419][T16492] ? __rcu_read_unlock+0x4f/0x70 [ 338.652483][T16492] ? __fget_files+0x184/0x1c0 [ 338.652512][T16492] __secure_computing+0x82/0x150 [ 338.652565][T16492] syscall_trace_enter+0xcf/0x1e0 [ 338.652596][T16492] do_syscall_64+0xac/0x200 [ 338.652627][T16492] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 338.652689][T16492] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 338.652715][T16492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.652741][T16492] RIP: 0033:0x7f6af367d57c [ 338.652756][T16492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 338.652780][T16492] RSP: 002b:00007f6af1cbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.652805][T16492] RAX: ffffffffffffffda RBX: 00007f6af38a6080 RCX: 00007f6af367d57c [ 338.652886][T16492] RDX: 000000000000000f RSI: 00007f6af1cbe0a0 RDI: 0000000000000008 [ 338.652908][T16492] RBP: 00007f6af1cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 338.652928][T16492] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 338.652944][T16492] R13: 0000000000000000 R14: 00007f6af38a6080 R15: 00007ffe2b1b9b18 [ 338.652968][T16492] [ 338.673803][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 338.673823][ T29] audit: type=1326 audit(29884751.071:14364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 338.720585][T16491] EXT4-fs (loop6): 1 truncate cleaned up [ 338.724639][ T29] audit: type=1326 audit(29884751.071:14365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 338.731079][T16491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.733731][ T29] audit: type=1326 audit(29884751.071:14366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 338.740028][T16491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.743894][ T29] audit: type=1326 audit(29884751.071:14367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6af367d4d0 code=0x7ffc0000 [ 338.743930][ T29] audit: type=1326 audit(29884751.071:14368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6af367d61f code=0x7ffc0000 [ 338.820040][ T29] audit: type=1326 audit(29884751.071:14369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 338.844740][T16491] loop6: detected capacity change from 0 to 1764 [ 338.855269][ T29] audit: type=1326 audit(29884751.071:14370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6af367d57c code=0x7ffc0000 [ 338.862736][T16491] iso9660: Bad value for 'session' [ 338.868859][ T29] audit: type=1326 audit(29884751.149:14371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6af367d61f code=0x7ffc0000 [ 339.103016][ T29] audit: type=1326 audit(29884751.149:14372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6af367d7ca code=0x7ffc0000 [ 339.126331][ T29] audit: type=1326 audit(29884751.149:14373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16487 comm="syz.4.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af367eb69 code=0x7ffc0000 [ 339.370696][T16527] loop6: detected capacity change from 0 to 128 [ 339.511044][T16534] FAULT_INJECTION: forcing a failure. [ 339.511044][T16534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.524172][T16534] CPU: 1 UID: 0 PID: 16534 Comm: syz.4.4494 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 339.524208][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.524222][T16534] Call Trace: [ 339.524302][T16534] [ 339.524312][T16534] __dump_stack+0x1d/0x30 [ 339.524426][T16534] dump_stack_lvl+0xe8/0x140 [ 339.524454][T16534] dump_stack+0x15/0x1b [ 339.524539][T16534] should_fail_ex+0x265/0x280 [ 339.524575][T16534] should_fail+0xb/0x20 [ 339.524622][T16534] should_fail_usercopy+0x1a/0x20 [ 339.524690][T16534] _copy_from_iter+0xcf/0xe40 [ 339.524715][T16534] ? __build_skb_around+0x1a0/0x200 [ 339.524747][T16534] ? __alloc_skb+0x223/0x320 [ 339.524779][T16534] netlink_sendmsg+0x471/0x6b0 [ 339.524892][T16534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.524985][T16534] __sock_sendmsg+0x142/0x180 [ 339.525009][T16534] sock_write_iter+0x165/0x1b0 [ 339.525035][T16534] do_iter_readv_writev+0x421/0x4c0 [ 339.525088][T16534] vfs_writev+0x2df/0x8b0 [ 339.525199][T16534] do_writev+0xe7/0x210 [ 339.525229][T16534] __x64_sys_writev+0x45/0x50 [ 339.525253][T16534] x64_sys_call+0x1e9a/0x2ff0 [ 339.525277][T16534] do_syscall_64+0xd2/0x200 [ 339.525334][T16534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 339.525360][T16534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 339.525381][T16534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.525433][T16534] RIP: 0033:0x7f6af367eb69 [ 339.525458][T16534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.525479][T16534] RSP: 002b:00007f6af1cbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 339.525575][T16534] RAX: ffffffffffffffda RBX: 00007f6af38a6080 RCX: 00007f6af367eb69 [ 339.525588][T16534] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 339.525601][T16534] RBP: 00007f6af1cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 339.525614][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.525627][T16534] R13: 0000000000000000 R14: 00007f6af38a6080 R15: 00007ffe2b1b9b18 [ 339.525645][T16534] [ 339.799818][T16546] net_ratelimit: 4 callbacks suppressed [ 339.799833][T16546] openvswitch: netlink: Message has 6 unknown bytes. [ 340.293074][T16572] __nla_validate_parse: 6 callbacks suppressed [ 340.293089][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4509'. [ 340.309288][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4509'. [ 340.429985][T16581] netlink: 44 bytes leftover after parsing attributes in process `siw'. [ 340.627216][T16587] openvswitch: netlink: Message has 6 unknown bytes. [ 340.787539][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 340.797036][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4521'. [ 340.872954][T16613] openvswitch: netlink: Message has 6 unknown bytes. [ 341.253182][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4532'. [ 341.330127][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4534'. [ 341.341101][T16633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4534'. [ 341.525064][T16645] openvswitch: netlink: Message has 6 unknown bytes. [ 341.556727][T16647] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4542'. [ 341.608427][T16653] FAULT_INJECTION: forcing a failure. [ 341.608427][T16653] name failslab, interval 1, probability 0, space 0, times 0 [ 341.621229][T16653] CPU: 0 UID: 0 PID: 16653 Comm: syz.0.4544 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 341.621288][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.621301][T16653] Call Trace: [ 341.621308][T16653] [ 341.621315][T16653] __dump_stack+0x1d/0x30 [ 341.621334][T16653] dump_stack_lvl+0xe8/0x140 [ 341.621351][T16653] dump_stack+0x15/0x1b [ 341.621366][T16653] should_fail_ex+0x265/0x280 [ 341.621445][T16653] should_failslab+0x8c/0xb0 [ 341.621467][T16653] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 341.621495][T16653] ? sidtab_sid2str_get+0xa0/0x130 [ 341.621568][T16653] kmemdup_noprof+0x2b/0x70 [ 341.621683][T16653] sidtab_sid2str_get+0xa0/0x130 [ 341.621782][T16653] security_sid_to_context_core+0x1eb/0x2e0 [ 341.621812][T16653] security_sid_to_context+0x27/0x40 [ 341.621841][T16653] selinux_lsmprop_to_secctx+0x67/0xf0 [ 341.621906][T16653] security_lsmprop_to_secctx+0x43/0x80 [ 341.621941][T16653] audit_log_task_context+0x77/0x190 [ 341.621975][T16653] audit_log_task+0xf4/0x250 [ 341.622001][T16653] audit_seccomp+0x61/0x100 [ 341.622023][T16653] ? __seccomp_filter+0x68c/0x10d0 [ 341.622066][T16653] __seccomp_filter+0x69d/0x10d0 [ 341.622086][T16653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 341.622188][T16653] ? vfs_write+0x75e/0x8e0 [ 341.622206][T16653] ? __rcu_read_unlock+0x4f/0x70 [ 341.622225][T16653] ? __fget_files+0x184/0x1c0 [ 341.622255][T16653] __secure_computing+0x82/0x150 [ 341.622274][T16653] syscall_trace_enter+0xcf/0x1e0 [ 341.622347][T16653] do_syscall_64+0xac/0x200 [ 341.622369][T16653] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 341.622390][T16653] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 341.622418][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.622438][T16653] RIP: 0033:0x7fe61fa0eb69 [ 341.622500][T16653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.622517][T16653] RSP: 002b:00007fe61e077038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 341.622534][T16653] RAX: ffffffffffffffda RBX: 00007fe61fc35fa0 RCX: 00007fe61fa0eb69 [ 341.622545][T16653] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000069 [ 341.622556][T16653] RBP: 00007fe61e077090 R08: 0000000000000000 R09: 0000000000000000 [ 341.622604][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.622615][T16653] R13: 0000000000000000 R14: 00007fe61fc35fa0 R15: 00007fff4c192498 [ 341.622658][T16653] [ 342.032237][T16674] FAULT_INJECTION: forcing a failure. [ 342.032237][T16674] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 342.045649][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.4.4553 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 342.045684][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.045700][T16674] Call Trace: [ 342.045709][T16674] [ 342.045723][T16674] __dump_stack+0x1d/0x30 [ 342.045751][T16674] dump_stack_lvl+0xe8/0x140 [ 342.045772][T16674] dump_stack+0x15/0x1b [ 342.045793][T16674] should_fail_ex+0x265/0x280 [ 342.045878][T16674] should_fail_alloc_page+0xf2/0x100 [ 342.045911][T16674] __alloc_frozen_pages_noprof+0xff/0x360 [ 342.045988][T16674] alloc_pages_mpol+0xb3/0x250 [ 342.046020][T16674] vma_alloc_folio_noprof+0x1aa/0x300 [ 342.046062][T16674] handle_mm_fault+0xec2/0x2c20 [ 342.046120][T16674] ? __rcu_read_unlock+0x4f/0x70 [ 342.046242][T16674] do_user_addr_fault+0x3fe/0x1090 [ 342.046352][T16674] ? mtree_load+0x324/0x4d0 [ 342.046386][T16674] exc_page_fault+0x62/0xa0 [ 342.046411][T16674] asm_exc_page_fault+0x26/0x30 [ 342.046437][T16674] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 342.046467][T16674] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f f6 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 342.046514][T16674] RSP: 0018:ffffc9000432bcf0 EFLAGS: 00050206 [ 342.046534][T16674] RAX: ffff88810c133c20 RBX: 0000000000001000 RCX: 0000000000000040 [ 342.046550][T16674] RDX: 0000000000000000 RSI: ffff888118757fc0 RDI: 0000200000006000 [ 342.046625][T16674] RBP: 0000000000001000 R08: 00000000000005bb R09: 0000000000000000 [ 342.046691][T16674] R10: 0001888118757000 R11: 0001888118757fff R12: 0000200000006040 [ 342.046704][T16674] R13: 00007ffffffff000 R14: 0000200000005040 R15: ffff888118757000 [ 342.046729][T16674] _copy_to_user+0x7c/0xa0 [ 342.046761][T16674] environ_read+0x206/0x320 [ 342.046807][T16674] ? __pfx_environ_read+0x10/0x10 [ 342.046832][T16674] vfs_readv+0x3fb/0x690 [ 342.046875][T16674] __x64_sys_preadv+0xfd/0x1c0 [ 342.046964][T16674] x64_sys_call+0x282a/0x2ff0 [ 342.046985][T16674] do_syscall_64+0xd2/0x200 [ 342.047053][T16674] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 342.047077][T16674] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 342.047098][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.047199][T16674] RIP: 0033:0x7f6af367eb69 [ 342.047213][T16674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.047237][T16674] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 342.047255][T16674] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 342.047324][T16674] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000004 [ 342.047337][T16674] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 342.047349][T16674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.047361][T16674] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 342.047380][T16674] [ 342.407783][T16675] lo speed is unknown, defaulting to 1000 [ 342.455497][T16675] siw: device registration error -23 [ 342.551137][T16679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4554'. [ 342.807650][T16695] SELinux: failed to load policy [ 342.944955][T16714] netlink: 'syz.6.4563': attribute type 4 has an invalid length. [ 342.956454][ T10] lo speed is unknown, defaulting to 1000 [ 342.962237][ T10] syz0: Port: 1 Link DOWN [ 343.119569][T16724] lo speed is unknown, defaulting to 1000 [ 343.181594][T16724] siw: device registration error -23 [ 343.860365][T16725] lo speed is unknown, defaulting to 1000 [ 343.899556][T16725] siw: device registration error -23 [ 344.023687][T16729] openvswitch: netlink: Message has 6 unknown bytes. [ 344.059309][T16732] FAULT_INJECTION: forcing a failure. [ 344.059309][T16732] name failslab, interval 1, probability 0, space 0, times 0 [ 344.072016][T16732] CPU: 1 UID: 0 PID: 16732 Comm: syz.4.4575 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 344.072054][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.072076][T16732] Call Trace: [ 344.072086][T16732] [ 344.072095][T16732] __dump_stack+0x1d/0x30 [ 344.072123][T16732] dump_stack_lvl+0xe8/0x140 [ 344.072161][T16732] dump_stack+0x15/0x1b [ 344.072242][T16732] should_fail_ex+0x265/0x280 [ 344.072285][T16732] should_failslab+0x8c/0xb0 [ 344.072355][T16732] __kmalloc_noprof+0xa5/0x3e0 [ 344.072391][T16732] ? netlbl_mgmt_add_common+0xb8/0x960 [ 344.072432][T16732] netlbl_mgmt_add_common+0xb8/0x960 [ 344.072543][T16732] ? __nla_parse+0x40/0x60 [ 344.072564][T16732] netlbl_mgmt_adddef+0x183/0x1b0 [ 344.072595][T16732] genl_family_rcv_msg_doit+0x143/0x1b0 [ 344.072667][T16732] genl_rcv_msg+0x422/0x460 [ 344.072697][T16732] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 344.072730][T16732] netlink_rcv_skb+0x120/0x220 [ 344.072759][T16732] ? __pfx_genl_rcv_msg+0x10/0x10 [ 344.072840][T16732] genl_rcv+0x28/0x40 [ 344.072862][T16732] netlink_unicast+0x5c0/0x690 [ 344.072898][T16732] netlink_sendmsg+0x58b/0x6b0 [ 344.072971][T16732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.073074][T16732] __sock_sendmsg+0x142/0x180 [ 344.073107][T16732] ____sys_sendmsg+0x31e/0x4e0 [ 344.073211][T16732] ___sys_sendmsg+0x17b/0x1d0 [ 344.073321][T16732] __x64_sys_sendmsg+0xd4/0x160 [ 344.073356][T16732] x64_sys_call+0x191e/0x2ff0 [ 344.073449][T16732] do_syscall_64+0xd2/0x200 [ 344.073477][T16732] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.073500][T16732] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.073534][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.073557][T16732] RIP: 0033:0x7f6af367eb69 [ 344.073572][T16732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.073628][T16732] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.073652][T16732] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 344.073669][T16732] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 344.073685][T16732] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 344.073702][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.073768][T16732] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 344.073796][T16732] [ 344.324097][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 344.324114][ T29] audit: type=1326 audit(31981908.642:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.365794][ T29] audit: type=1326 audit(31981908.671:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.389249][ T29] audit: type=1326 audit(31981908.671:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.396188][T16741] block device autoloading is deprecated and will be removed. [ 344.412689][ T29] audit: type=1326 audit(31981908.671:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.425644][T16742] netlink: 'syz.3.4578': attribute type 10 has an invalid length. [ 344.443655][ T29] audit: type=1326 audit(31981908.671:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.443694][ T29] audit: type=1326 audit(31981908.671:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.498492][ T29] audit: type=1326 audit(31981908.671:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.521929][ T29] audit: type=1326 audit(31981908.671:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.548443][ T29] audit: type=1326 audit(31981908.855:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.572580][T16742] team0: Device hsr_slave_0 failed to register rx_handler [ 344.597654][ T29] audit: type=1326 audit(31981908.884:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16733 comm="syz.1.4576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63c28eb69 code=0x7ffc0000 [ 344.646792][T16750] bond_slave_1: entered promiscuous mode [ 344.652842][T16754] syzkaller1: entered promiscuous mode [ 344.658434][T16754] syzkaller1: entered allmulticast mode [ 344.672901][T16750] bond0: (slave bond_slave_1): Releasing backup interface [ 344.691354][T16759] hub 9-0:1.0: USB hub found [ 344.697337][T16750] bond_slave_1 (unregistering): left promiscuous mode [ 344.704561][T16759] hub 9-0:1.0: 8 ports detected [ 344.747823][T16764] openvswitch: netlink: Message has 6 unknown bytes. [ 344.760037][T16766] openvswitch: netlink: Message has 6 unknown bytes. [ 344.808287][T16771] openvswitch: netlink: Message has 6 unknown bytes. [ 344.866103][T16779] FAULT_INJECTION: forcing a failure. [ 344.866103][T16779] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.879492][T16779] CPU: 0 UID: 0 PID: 16779 Comm: syz.6.4596 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 344.879522][T16779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.879534][T16779] Call Trace: [ 344.879541][T16779] [ 344.879628][T16779] __dump_stack+0x1d/0x30 [ 344.879652][T16779] dump_stack_lvl+0xe8/0x140 [ 344.879674][T16779] dump_stack+0x15/0x1b [ 344.879691][T16779] should_fail_ex+0x265/0x280 [ 344.879724][T16779] should_fail_alloc_page+0xf2/0x100 [ 344.879774][T16779] __alloc_frozen_pages_noprof+0xff/0x360 [ 344.879821][T16779] alloc_pages_mpol+0xb3/0x250 [ 344.879933][T16779] vma_alloc_folio_noprof+0x1aa/0x300 [ 344.879987][T16779] handle_mm_fault+0xec2/0x2c20 [ 344.880095][T16779] ? check_vma_flags+0x26e/0x340 [ 344.880129][T16779] __get_user_pages+0x102e/0x1fa0 [ 344.880215][T16779] __gup_longterm_locked+0x8f4/0xe60 [ 344.880247][T16779] ? exc_page_fault+0x62/0xa0 [ 344.880290][T16779] ? should_fail_ex+0xdb/0x280 [ 344.880383][T16779] pin_user_pages_remote+0x7e/0xb0 [ 344.880497][T16779] process_vm_rw+0x484/0x960 [ 344.880557][T16779] __x64_sys_process_vm_writev+0x78/0x90 [ 344.880655][T16779] x64_sys_call+0x2a7c/0x2ff0 [ 344.880675][T16779] do_syscall_64+0xd2/0x200 [ 344.880698][T16779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.880721][T16779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 344.880741][T16779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.880775][T16779] RIP: 0033:0x7f3a626eeb69 [ 344.880795][T16779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.880819][T16779] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 344.880838][T16779] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 344.880851][T16779] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 000000000000048b [ 344.880862][T16779] RBP: 00007f3a60d4f090 R08: 000000000000023a R09: 0000000000000000 [ 344.880874][T16779] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 344.880924][T16779] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 344.880948][T16779] [ 345.129325][T16780] vhci_hcd: invalid port number 96 [ 345.134504][T16780] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 345.193757][T16792] openvswitch: netlink: Message has 6 unknown bytes. [ 345.205714][T16794] FAULT_INJECTION: forcing a failure. [ 345.205714][T16794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.218856][T16794] CPU: 1 UID: 0 PID: 16794 Comm: syz.4.4595 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 345.218895][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.218915][T16794] Call Trace: [ 345.218923][T16794] [ 345.218935][T16794] __dump_stack+0x1d/0x30 [ 345.218958][T16794] dump_stack_lvl+0xe8/0x140 [ 345.218976][T16794] dump_stack+0x15/0x1b [ 345.218995][T16794] should_fail_ex+0x265/0x280 [ 345.219038][T16794] should_fail+0xb/0x20 [ 345.219125][T16794] should_fail_usercopy+0x1a/0x20 [ 345.219151][T16794] _copy_from_user+0x1c/0xb0 [ 345.219178][T16794] rds_rdma_extra_size+0xe2/0x270 [ 345.219241][T16794] ? krealloc_noprof+0x136/0x2d0 [ 345.219271][T16794] rds_rm_size+0x326/0x490 [ 345.219301][T16794] rds_sendmsg+0x842/0x14a0 [ 345.219349][T16794] ? __pfx_rds_sendmsg+0x10/0x10 [ 345.219378][T16794] __sock_sendmsg+0x142/0x180 [ 345.219409][T16794] ____sys_sendmsg+0x31e/0x4e0 [ 345.219511][T16794] ___sys_sendmsg+0x17b/0x1d0 [ 345.219648][T16794] __x64_sys_sendmsg+0xd4/0x160 [ 345.219686][T16794] x64_sys_call+0x191e/0x2ff0 [ 345.219713][T16794] do_syscall_64+0xd2/0x200 [ 345.219747][T16794] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 345.219776][T16794] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 345.219800][T16794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.219820][T16794] RIP: 0033:0x7f6af367eb69 [ 345.219848][T16794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.219898][T16794] RSP: 002b:00007f6af1cbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.219943][T16794] RAX: ffffffffffffffda RBX: 00007f6af38a6080 RCX: 00007f6af367eb69 [ 345.219956][T16794] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 345.219969][T16794] RBP: 00007f6af1cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 345.219987][T16794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.219998][T16794] R13: 0000000000000000 R14: 00007f6af38a6080 R15: 00007ffe2b1b9b18 [ 345.220094][T16794] [ 345.436176][T16799] openvswitch: netlink: Message has 6 unknown bytes. [ 345.502743][T16809] program syz.1.4606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.633548][T16817] openvswitch: netlink: Message has 6 unknown bytes. [ 345.633569][T16813] hub 6-0:1.0: USB hub found [ 345.656585][T16813] hub 6-0:1.0: 8 ports detected [ 345.746173][T16826] lo speed is unknown, defaulting to 1000 [ 345.819645][T16834] hub 9-0:1.0: USB hub found [ 345.831226][T16834] hub 9-0:1.0: 8 ports detected [ 346.272297][T16815] syz.6.4608 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 346.286548][T16815] CPU: 0 UID: 0 PID: 16815 Comm: syz.6.4608 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 346.286582][T16815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.286598][T16815] Call Trace: [ 346.286627][T16815] [ 346.286636][T16815] __dump_stack+0x1d/0x30 [ 346.286662][T16815] dump_stack_lvl+0xe8/0x140 [ 346.286684][T16815] dump_stack+0x15/0x1b [ 346.286698][T16815] dump_header+0x81/0x220 [ 346.286726][T16815] oom_kill_process+0x342/0x400 [ 346.286832][T16815] out_of_memory+0x979/0xb80 [ 346.286863][T16815] try_charge_memcg+0x5e6/0x9e0 [ 346.286890][T16815] obj_cgroup_charge_pages+0xa6/0x150 [ 346.286952][T16815] __memcg_kmem_charge_page+0x9f/0x170 [ 346.286980][T16815] __alloc_frozen_pages_noprof+0x188/0x360 [ 346.287056][T16815] alloc_pages_mpol+0xb3/0x250 [ 346.287095][T16815] alloc_pages_noprof+0x90/0x130 [ 346.287124][T16815] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 346.287175][T16815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.287247][T16815] __kvmalloc_node_noprof+0x30f/0x4e0 [ 346.287274][T16815] ? ip_set_alloc+0x1f/0x30 [ 346.287298][T16815] ? ip_set_alloc+0x1f/0x30 [ 346.287390][T16815] ? __kmalloc_cache_noprof+0x189/0x320 [ 346.287423][T16815] ip_set_alloc+0x1f/0x30 [ 346.287528][T16815] hash_netiface_create+0x282/0x740 [ 346.287555][T16815] ? __pfx_hash_netiface_create+0x10/0x10 [ 346.287668][T16815] ip_set_create+0x3cc/0x960 [ 346.287715][T16815] ? __nla_parse+0x40/0x60 [ 346.287734][T16815] nfnetlink_rcv_msg+0x4c6/0x590 [ 346.287778][T16815] netlink_rcv_skb+0x120/0x220 [ 346.287854][T16815] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 346.287884][T16815] nfnetlink_rcv+0x16b/0x1690 [ 346.287907][T16815] ? nlmon_xmit+0x4f/0x60 [ 346.287998][T16815] ? consume_skb+0x49/0x150 [ 346.288037][T16815] ? nlmon_xmit+0x4f/0x60 [ 346.288060][T16815] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 346.288123][T16815] ? __dev_queue_xmit+0x1200/0x2000 [ 346.288161][T16815] ? __dev_queue_xmit+0x182/0x2000 [ 346.288294][T16815] ? unwind_get_return_address+0x16/0x40 [ 346.288373][T16815] ? ref_tracker_free+0x37d/0x3e0 [ 346.288437][T16815] ? __netlink_deliver_tap+0x4dc/0x500 [ 346.288469][T16815] netlink_unicast+0x5c0/0x690 [ 346.288496][T16815] netlink_sendmsg+0x58b/0x6b0 [ 346.288561][T16815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.288601][T16815] __sock_sendmsg+0x142/0x180 [ 346.288623][T16815] ____sys_sendmsg+0x31e/0x4e0 [ 346.288684][T16815] ___sys_sendmsg+0x17b/0x1d0 [ 346.288726][T16815] __x64_sys_sendmsg+0xd4/0x160 [ 346.288773][T16815] x64_sys_call+0x191e/0x2ff0 [ 346.288801][T16815] do_syscall_64+0xd2/0x200 [ 346.288827][T16815] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 346.288848][T16815] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.288876][T16815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.288894][T16815] RIP: 0033:0x7f3a626eeb69 [ 346.288907][T16815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.288923][T16815] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.288987][T16815] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 346.288998][T16815] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 346.289008][T16815] RBP: 00007f3a62771df1 R08: 0000000000000000 R09: 0000000000000000 [ 346.289019][T16815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.289029][T16815] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 346.289046][T16815] [ 346.388800][T16838] FAULT_INJECTION: forcing a failure. [ 346.388800][T16838] name failslab, interval 1, probability 0, space 0, times 0 [ 346.392893][T16815] memory: usage 307200kB, limit 307200kB, failcnt 107 [ 346.397267][T16838] CPU: 1 UID: 0 PID: 16838 Comm: syz.4.4615 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 346.397340][T16838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.397359][T16838] Call Trace: [ 346.397369][T16838] [ 346.397382][T16838] __dump_stack+0x1d/0x30 [ 346.397411][T16838] dump_stack_lvl+0xe8/0x140 [ 346.397441][T16838] dump_stack+0x15/0x1b [ 346.397500][T16838] should_fail_ex+0x265/0x280 [ 346.397546][T16838] should_failslab+0x8c/0xb0 [ 346.397591][T16838] kmem_cache_alloc_noprof+0x50/0x310 [ 346.397640][T16838] ? dup_fd+0x3a/0x540 [ 346.397668][T16838] dup_fd+0x3a/0x540 [ 346.397698][T16838] copy_files+0x98/0xf0 [ 346.397732][T16838] copy_process+0xc5b/0x2000 [ 346.397831][T16838] kernel_clone+0x16c/0x5c0 [ 346.397925][T16838] ? vfs_write+0x75e/0x8e0 [ 346.397957][T16838] __x64_sys_clone+0xe6/0x120 [ 346.398065][T16838] x64_sys_call+0x119c/0x2ff0 [ 346.398108][T16838] do_syscall_64+0xd2/0x200 [ 346.398139][T16838] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 346.398171][T16838] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 346.398286][T16838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.398315][T16838] RIP: 0033:0x7f6af367eb69 [ 346.398336][T16838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.398362][T16838] RSP: 002b:00007f6af1c9cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 346.398388][T16838] RAX: ffffffffffffffda RBX: 00007f6af38a6160 RCX: 00007f6af367eb69 [ 346.398418][T16838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 346.398430][T16838] RBP: 00007f6af1c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 346.398444][T16838] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 346.398460][T16838] R13: 0000000000000001 R14: 00007f6af38a6160 R15: 00007ffe2b1b9b18 [ 346.398521][T16838] [ 346.803112][T16840] openvswitch: netlink: Message has 6 unknown bytes. [ 346.806569][T16815] memory+swap: usage 307296kB, limit 9007199254740988kB, failcnt 0 [ 346.806589][T16815] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 346.863763][T16815] Memory cgroup stats for /syz6: [ 346.887119][T16815] cache 0 [ 346.895155][T16815] rss 36864 [ 346.898318][T16815] shmem 0 [ 346.901291][T16815] mapped_file 0 [ 346.904767][T16815] dirty 0 [ 346.907738][T16815] writeback 0 [ 346.909322][T16846] syzkaller1: entered promiscuous mode [ 346.911084][T16815] workingset_refault_anon 0 [ 346.911096][T16815] workingset_refault_file 0 [ 346.911107][T16815] swap 98304 [ 346.916589][T16846] syzkaller1: entered allmulticast mode [ 346.934548][T16815] swapcached 45056 [ 346.938288][T16815] pgpgin 270740 [ 346.941794][T16815] pgpgout 270729 [ 346.945357][T16815] pgfault 197895 [ 346.949040][T16815] pgmajfault 1 [ 346.952418][T16815] inactive_anon 40960 [ 346.956405][T16815] active_anon 4096 [ 346.960141][T16815] inactive_file 0 [ 346.963781][T16815] active_file 0 [ 346.967322][T16815] unevictable 0 [ 346.970838][T16815] hierarchical_memory_limit 314572800 [ 346.976231][T16815] hierarchical_memsw_limit 9223372036854771712 [ 346.982515][T16815] total_cache 0 [ 346.985981][T16815] total_rss 36864 [ 346.989636][T16815] total_shmem 0 [ 346.993243][T16815] total_mapped_file 0 [ 346.997228][T16815] total_dirty 0 [ 347.000718][T16815] total_writeback 0 [ 347.004555][T16815] total_workingset_refault_anon 0 [ 347.009602][T16815] total_workingset_refault_file 0 [ 347.014675][T16815] total_swap 98304 [ 347.018410][T16815] total_swapcached 45056 [ 347.022676][T16815] total_pgpgin 270740 [ 347.026681][T16815] total_pgpgout 270729 [ 347.030751][T16815] total_pgfault 197895 [ 347.034886][T16815] total_pgmajfault 1 [ 347.038781][T16815] total_inactive_anon 40960 [ 347.043411][T16815] total_active_anon 4096 [ 347.047666][T16815] total_inactive_file 0 [ 347.051859][T16815] total_active_file 0 [ 347.055873][T16815] total_unevictable 0 [ 347.059855][T16815] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4608,pid=16814,uid=0 [ 347.074653][T16815] Memory cgroup out of memory: Killed process 16815 (syz.6.4608) total-vm:90056kB, anon-rss:1072kB, file-rss:21668kB, shmem-rss:0kB, UID:60928 pgtables:116kB oom_score_adj:1000 [ 347.118636][T16821] syz.6.4608 (16821) used greatest stack depth: 8984 bytes left [ 347.153137][T16848] lo speed is unknown, defaulting to 1000 [ 347.296437][T16856] openvswitch: netlink: Message has 6 unknown bytes. [ 347.385521][T16862] syzkaller1: entered promiscuous mode [ 347.391076][T16862] syzkaller1: entered allmulticast mode [ 347.457461][T16869] openvswitch: netlink: Message has 6 unknown bytes. [ 347.486504][T16815] syz.6.4608 (16815) used greatest stack depth: 7528 bytes left [ 347.515624][T16877] loop6: detected capacity change from 0 to 128 [ 347.603252][T16884] __nla_validate_parse: 1 callbacks suppressed [ 347.603267][T16884] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4633'. [ 347.710131][T16889] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4636'. [ 347.768630][T16887] hub 6-0:1.0: USB hub found [ 347.773876][T16887] hub 6-0:1.0: 8 ports detected [ 347.806257][T16898] blktrace: Concurrent blktraces are not allowed on loop6 [ 347.847880][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 347.859430][T16904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4643'. [ 347.892580][T16908] FAULT_INJECTION: forcing a failure. [ 347.892580][T16908] name failslab, interval 1, probability 0, space 0, times 0 [ 347.906615][T16908] CPU: 1 UID: 0 PID: 16908 Comm: syz.6.4644 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 347.906656][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.906669][T16908] Call Trace: [ 347.906676][T16908] [ 347.906684][T16908] __dump_stack+0x1d/0x30 [ 347.906714][T16908] dump_stack_lvl+0xe8/0x140 [ 347.906739][T16908] dump_stack+0x15/0x1b [ 347.906827][T16908] should_fail_ex+0x265/0x280 [ 347.906917][T16908] should_failslab+0x8c/0xb0 [ 347.906950][T16908] kmem_cache_alloc_node_noprof+0x57/0x320 [ 347.906988][T16908] ? __alloc_skb+0x101/0x320 [ 347.907033][T16908] __alloc_skb+0x101/0x320 [ 347.907176][T16908] netlink_alloc_large_skb+0xba/0xf0 [ 347.907214][T16908] netlink_sendmsg+0x3cf/0x6b0 [ 347.907313][T16908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.907361][T16908] __sock_sendmsg+0x142/0x180 [ 347.907387][T16908] ____sys_sendmsg+0x345/0x4e0 [ 347.907476][T16908] ___sys_sendmsg+0x17b/0x1d0 [ 347.907542][T16908] __sys_sendmmsg+0x178/0x300 [ 347.907634][T16908] __x64_sys_sendmmsg+0x57/0x70 [ 347.907672][T16908] x64_sys_call+0x1c4a/0x2ff0 [ 347.907692][T16908] do_syscall_64+0xd2/0x200 [ 347.907793][T16908] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.907823][T16908] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 347.907852][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.907889][T16908] RIP: 0033:0x7f3a626eeb69 [ 347.907906][T16908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.907927][T16908] RSP: 002b:00007f3a60d4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 347.907951][T16908] RAX: ffffffffffffffda RBX: 00007f3a62915fa0 RCX: 00007f3a626eeb69 [ 347.907968][T16908] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 347.907994][T16908] RBP: 00007f3a60d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.908010][T16908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.908026][T16908] R13: 0000000000000000 R14: 00007f3a62915fa0 R15: 00007fffeec17a58 [ 347.908045][T16908] [ 348.197452][T16912] openvswitch: netlink: Message has 6 unknown bytes. [ 348.199062][T16918] netlink: 276 bytes leftover after parsing attributes in process `syz.6.4648'. [ 348.225799][T16918] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4648'. [ 348.259360][T16922] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4649'. [ 348.279087][T16925] blktrace: Concurrent blktraces are not allowed on loop6 [ 348.291207][T16918] loop6: detected capacity change from 0 to 1024 [ 348.334091][T16918] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 348.345073][T16918] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 348.381363][T16918] JBD2: no valid journal superblock found [ 348.387124][T16918] EXT4-fs (loop6): Could not load journal inode [ 348.444186][T16939] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4658'. [ 348.540047][T16946] openvswitch: netlink: Message has 6 unknown bytes. [ 348.590539][T16951] lo speed is unknown, defaulting to 1000 [ 348.959351][T16972] lo speed is unknown, defaulting to 1000 [ 349.010097][T16972] siw: device registration error -23 [ 349.180768][T16980] openvswitch: netlink: Message has 6 unknown bytes. [ 349.246603][T16986] openvswitch: netlink: Message has 6 unknown bytes. [ 349.261461][T16988] syzkaller1: entered promiscuous mode [ 349.267038][T16988] syzkaller1: entered allmulticast mode [ 349.393097][T17002] loop6: detected capacity change from 0 to 1024 [ 349.401022][T17002] EXT4-fs: Ignoring removed nobh option [ 349.406626][T17002] EXT4-fs: Ignoring removed bh option [ 349.424709][T17002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.485974][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'. [ 349.495395][T17016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4683'. [ 349.619554][T17019] vlan2: entered allmulticast mode [ 349.624719][T17019] bridge_slave_0: entered allmulticast mode [ 349.816289][T17032] lo speed is unknown, defaulting to 1000 [ 350.200911][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.236571][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 350.236589][ T29] audit: type=1326 audit(35127642.404:15078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.267681][ T29] audit: type=1326 audit(35127642.444:15079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.291169][ T29] audit: type=1326 audit(35127642.444:15080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.314620][ T29] audit: type=1326 audit(35127642.444:15081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.371641][ T29] audit: type=1326 audit(35127642.444:15082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a626ed4d0 code=0x7ffc0000 [ 350.395546][ T29] audit: type=1326 audit(35127642.444:15083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a626ed4d0 code=0x7ffc0000 [ 350.419291][ T29] audit: type=1326 audit(35127642.444:15084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.442797][ T29] audit: type=1326 audit(35127642.444:15085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.467044][ T29] audit: type=1326 audit(35127642.444:15086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.490525][ T29] audit: type=1326 audit(35127642.444:15087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17047 comm="syz.6.4694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3a626eeb69 code=0x7ffc0000 [ 350.647106][T17069] loop6: detected capacity change from 0 to 1024 [ 350.658483][T17069] EXT4-fs: Ignoring removed nobh option [ 350.663186][T17072] syzkaller1: entered promiscuous mode [ 350.664171][T17069] EXT4-fs: Ignoring removed bh option [ 350.669565][T17072] syzkaller1: entered allmulticast mode [ 350.711290][T17076] net_ratelimit: 2 callbacks suppressed [ 350.711333][T17076] openvswitch: netlink: Message has 6 unknown bytes. [ 350.726208][T17069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.762156][T17080] openvswitch: netlink: Message has 6 unknown bytes. [ 350.892763][T17092] vlan0: entered allmulticast mode [ 351.136072][T17112] openvswitch: netlink: Message has 6 unknown bytes. [ 351.165946][T17114] syzkaller1: entered promiscuous mode [ 351.171628][T17114] syzkaller1: entered allmulticast mode [ 351.338922][T17129] openvswitch: netlink: Message has 6 unknown bytes. [ 351.460241][T17136] FAULT_INJECTION: forcing a failure. [ 351.460241][T17136] name failslab, interval 1, probability 0, space 0, times 0 [ 351.473009][T17136] CPU: 0 UID: 0 PID: 17136 Comm: syz.0.4729 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 351.473103][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.473115][T17136] Call Trace: [ 351.473123][T17136] [ 351.473133][T17136] __dump_stack+0x1d/0x30 [ 351.473160][T17136] dump_stack_lvl+0xe8/0x140 [ 351.473208][T17136] dump_stack+0x15/0x1b [ 351.473230][T17136] should_fail_ex+0x265/0x280 [ 351.473284][T17136] should_failslab+0x8c/0xb0 [ 351.473307][T17136] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 351.473343][T17136] ? sidtab_sid2str_get+0xa0/0x130 [ 351.473475][T17136] kmemdup_noprof+0x2b/0x70 [ 351.473502][T17136] sidtab_sid2str_get+0xa0/0x130 [ 351.473586][T17136] security_sid_to_context_core+0x1eb/0x2e0 [ 351.473651][T17136] security_sid_to_context+0x27/0x40 [ 351.473687][T17136] avc_audit_post_callback+0x10f/0x520 [ 351.473716][T17136] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 351.473784][T17136] common_lsm_audit+0x1bb/0x230 [ 351.473838][T17136] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 351.473870][T17136] slow_avc_audit+0x104/0x140 [ 351.473967][T17136] avc_has_perm+0x13a/0x180 [ 351.473994][T17136] selinux_socket_sendmsg+0x175/0x1b0 [ 351.474088][T17136] security_socket_sendmsg+0x48/0x80 [ 351.474123][T17136] __sock_sendmsg+0x30/0x180 [ 351.474154][T17136] ____sys_sendmsg+0x31e/0x4e0 [ 351.474268][T17136] ___sys_sendmsg+0x17b/0x1d0 [ 351.474456][T17136] __x64_sys_sendmsg+0xd4/0x160 [ 351.474530][T17136] x64_sys_call+0x191e/0x2ff0 [ 351.474628][T17136] do_syscall_64+0xd2/0x200 [ 351.474650][T17136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 351.474738][T17136] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 351.474763][T17136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.474784][T17136] RIP: 0033:0x7fe61fa0eb69 [ 351.474799][T17136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.474817][T17136] RSP: 002b:00007fe61e077038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.474871][T17136] RAX: ffffffffffffffda RBX: 00007fe61fc35fa0 RCX: 00007fe61fa0eb69 [ 351.474888][T17136] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 351.474904][T17136] RBP: 00007fe61e077090 R08: 0000000000000000 R09: 0000000000000000 [ 351.474920][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.474936][T17136] R13: 0000000000000000 R14: 00007fe61fc35fa0 R15: 00007fff4c192498 [ 351.475025][T17136] [ 351.731014][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.900464][T17148] syzkaller1: entered promiscuous mode [ 351.906082][T17148] syzkaller1: entered allmulticast mode [ 352.046201][T17159] loop6: detected capacity change from 0 to 1024 [ 352.077699][T17159] EXT4-fs: Ignoring removed nobh option [ 352.083373][T17159] EXT4-fs: Ignoring removed bh option [ 352.146378][T17159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.284842][T17174] openvswitch: netlink: Message has 6 unknown bytes. [ 352.624620][T17186] lo speed is unknown, defaulting to 1000 [ 352.945119][T17188] __nla_validate_parse: 6 callbacks suppressed [ 352.945138][T17188] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4750'. [ 353.033870][T10532] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.134438][T17198] vlan0: entered allmulticast mode [ 353.183000][T17204] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4758'. [ 353.347463][T17211] openvswitch: netlink: Message has 6 unknown bytes. [ 353.519610][T17220] openvswitch: netlink: Message has 6 unknown bytes. [ 353.545667][T17223] FAULT_INJECTION: forcing a failure. [ 353.545667][T17223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.558994][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.4.4767 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 353.559109][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.559183][T17223] Call Trace: [ 353.559190][T17223] [ 353.559200][T17223] __dump_stack+0x1d/0x30 [ 353.559226][T17223] dump_stack_lvl+0xe8/0x140 [ 353.559250][T17223] dump_stack+0x15/0x1b [ 353.559271][T17223] should_fail_ex+0x265/0x280 [ 353.559392][T17223] should_fail+0xb/0x20 [ 353.559427][T17223] should_fail_usercopy+0x1a/0x20 [ 353.559453][T17223] strncpy_from_user+0x25/0x230 [ 353.559478][T17223] ? kmem_cache_alloc_noprof+0x186/0x310 [ 353.559567][T17223] ? getname_flags+0x80/0x3b0 [ 353.559604][T17223] getname_flags+0xae/0x3b0 [ 353.559690][T17223] path_removexattrat+0xf5/0x570 [ 353.559741][T17223] __x64_sys_removexattr+0x38/0x50 [ 353.559787][T17223] x64_sys_call+0x242f/0x2ff0 [ 353.559815][T17223] do_syscall_64+0xd2/0x200 [ 353.559842][T17223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 353.559871][T17223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 353.559970][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.560006][T17223] RIP: 0033:0x7f6af367eb69 [ 353.560024][T17223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.560072][T17223] RSP: 002b:00007f6af1cdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 353.560091][T17223] RAX: ffffffffffffffda RBX: 00007f6af38a5fa0 RCX: 00007f6af367eb69 [ 353.560103][T17223] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000200000000200 [ 353.560115][T17223] RBP: 00007f6af1cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 353.560128][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.560142][T17223] R13: 0000000000000000 R14: 00007f6af38a5fa0 R15: 00007ffe2b1b9b18 [ 353.560166][T17223] [ 353.798176][T17228] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4769'. [ 353.893361][T17243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4775'. [ 353.984815][T17252] openvswitch: netlink: Message has 6 unknown bytes. [ 354.064635][T17261] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4782'. [ 354.104069][T17267] openvswitch: netlink: Message has 6 unknown bytes. [ 354.249237][T17286] openvswitch: netlink: Message has 6 unknown bytes. [ 354.257768][T17287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'. [ 354.318153][T17294] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4797'. [ 354.457772][T17312] netlink: 'syz.4.4806': attribute type 10 has an invalid length. [ 354.465755][T17312] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4806'. [ 354.474899][T17312] dummy0: entered promiscuous mode [ 354.480745][T17312] bridge0: port 4(dummy0) entered blocking state [ 354.487249][T17312] bridge0: port 4(dummy0) entered disabled state [ 354.491217][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4807'. [ 354.498497][T17312] dummy0: entered allmulticast mode [ 354.533876][T17312] bridge0: port 4(dummy0) entered blocking state [ 354.540372][T17312] bridge0: port 4(dummy0) entered forwarding state [ 354.558737][T17322] loop6: detected capacity change from 0 to 128 [ 354.560800][T17315] vlan2: entered allmulticast mode [ 354.831337][T17333] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4814'. [ 355.086365][T17369] FAULT_INJECTION: forcing a failure. [ 355.086365][T17369] name failslab, interval 1, probability 0, space 0, times 0 [ 355.094212][T17367] vlan2: entered allmulticast mode [ 355.099190][T17369] CPU: 0 UID: 0 PID: 17369 Comm: syz.3.4830 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 355.099271][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.099290][T17369] Call Trace: [ 355.099299][T17369] [ 355.099321][T17369] __dump_stack+0x1d/0x30 [ 355.099349][T17369] dump_stack_lvl+0xe8/0x140 [ 355.099375][T17369] dump_stack+0x15/0x1b [ 355.099398][T17369] should_fail_ex+0x265/0x280 [ 355.099442][T17369] ? io_ring_ctx_alloc+0x38/0x6a0 [ 355.099532][T17369] should_failslab+0x8c/0xb0 [ 355.099563][T17369] __kmalloc_cache_noprof+0x4c/0x320 [ 355.099602][T17369] ? avc_has_perm_noaudit+0x1b1/0x200 [ 355.099659][T17369] io_ring_ctx_alloc+0x38/0x6a0 [ 355.099693][T17369] ? avc_has_perm+0xf7/0x180 [ 355.099719][T17369] ? io_uring_fill_params+0x270/0x300 [ 355.099765][T17369] io_uring_create+0x10f/0x610 [ 355.099838][T17369] __se_sys_io_uring_setup+0x1f7/0x210 [ 355.099909][T17369] __x64_sys_io_uring_setup+0x31/0x40 [ 355.100018][T17369] x64_sys_call+0x2b21/0x2ff0 [ 355.100046][T17369] do_syscall_64+0xd2/0x200 [ 355.100078][T17369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 355.100190][T17369] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 355.100218][T17369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.100247][T17369] RIP: 0033:0x7f1dedeceb69 [ 355.100330][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.100353][T17369] RSP: 002b:00007f1dec52efc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 355.100436][T17369] RAX: ffffffffffffffda RBX: 00007f1dee0f5fa0 RCX: 00007f1dedeceb69 [ 355.100453][T17369] RDX: 0000200000000140 RSI: 0000200000000300 RDI: 00000000000038a9 [ 355.100470][T17369] RBP: 0000200000000300 R08: 0000000000000000 R09: 0000200000000140 [ 355.100487][T17369] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 355.100504][T17369] R13: 0000200000000040 R14: 00000000000038a9 R15: 0000200000000140 [ 355.100530][T17369] [ 355.407606][T17372] lo speed is unknown, defaulting to 1000 [ 355.575635][T17396] netlink: 'syz.0.4842': attribute type 21 has an invalid length. [ 355.619232][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 355.619252][ T29] audit: type=1326 audit(37224799.664:15706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 355.720092][T17402] lo speed is unknown, defaulting to 1000 [ 355.771864][T17402] siw: device registration error -23 [ 355.965652][T17406] audit: audit_backlog=65 > audit_backlog_limit=64 [ 355.972260][T17406] audit: audit_lost=15 audit_rate_limit=0 audit_backlog_limit=64 [ 355.980175][T17406] audit: backlog limit exceeded [ 356.252925][ T29] audit: type=1326 audit(37224799.664:15707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.276539][ T29] audit: type=1326 audit(37224799.664:15708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.299851][ T29] audit: type=1326 audit(37224799.664:15709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.323429][ T29] audit: type=1326 audit(37224799.664:15710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.346805][ T29] audit: type=1326 audit(37224799.664:15711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.370270][ T29] audit: type=1326 audit(37224799.664:15712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17399 comm="syz.0.4843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe61fa0eb69 code=0x7ffc0000 [ 356.442764][T17360] ================================================================== [ 356.450879][T17360] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 356.458704][T17360] [ 356.461019][T17360] write to 0xffffea00047d3f58 of 8 bytes by task 17224 on cpu 0: [ 356.468726][T17360] __filemap_remove_folio+0x1a5/0x2a0 [ 356.474103][T17360] filemap_remove_folio+0x6d/0x1d0 [ 356.479220][T17360] truncate_inode_folio+0x42/0x50 [ 356.484240][T17360] shmem_undo_range+0x244/0xa80 [ 356.489095][T17360] shmem_evict_inode+0x134/0x520 [ 356.494117][T17360] evict+0x2e0/0x550 [ 356.498017][T17360] iput+0x447/0x5b0 [ 356.501827][T17360] dentry_unlink_inode+0x24f/0x260 [ 356.506958][T17360] __dentry_kill+0x18d/0x4b0 [ 356.511547][T17360] dput+0x5e/0xd0 [ 356.515176][T17360] __fput+0x444/0x650 [ 356.519244][T17360] ____fput+0x1c/0x30 [ 356.523236][T17360] task_work_run+0x12e/0x1a0 [ 356.527824][T17360] do_exit+0x483/0x15c0 [ 356.531994][T17360] do_group_exit+0xff/0x140 [ 356.536500][T17360] get_signal+0xe59/0xf70 [ 356.540835][T17360] arch_do_signal_or_restart+0x96/0x480 [ 356.546384][T17360] irqentry_exit_to_user_mode+0x5e/0xa0 [ 356.551925][T17360] irqentry_exit+0x12/0x50 [ 356.556336][T17360] asm_exc_page_fault+0x26/0x30 [ 356.561185][T17360] [ 356.563502][T17360] read to 0xffffea00047d3f58 of 8 bytes by task 17360 on cpu 1: [ 356.571120][T17360] folio_mapping+0xa1/0x120 [ 356.575630][T17360] move_folios_to_lru+0x128/0x6a0 [ 356.580658][T17360] evict_folios+0x3155/0x3520 [ 356.585339][T17360] try_to_shrink_lruvec+0x5b5/0x950 [ 356.590554][T17360] shrink_lruvec+0x22e/0x1b50 [ 356.595223][T17360] shrink_node+0x686/0x2120 [ 356.599726][T17360] do_try_to_free_pages+0x3f6/0xcd0 [ 356.604920][T17360] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 356.610809][T17360] try_charge_memcg+0x358/0x9e0 [ 356.615656][T17360] obj_cgroup_charge_pages+0xa6/0x150 [ 356.621036][T17360] __memcg_kmem_charge_page+0x9f/0x170 [ 356.626500][T17360] __alloc_frozen_pages_noprof+0x188/0x360 [ 356.632314][T17360] alloc_pages_mpol+0xb3/0x250 [ 356.637082][T17360] alloc_pages_noprof+0x90/0x130 [ 356.642026][T17360] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 356.647838][T17360] __kvmalloc_node_noprof+0x30f/0x4e0 [ 356.653215][T17360] ip_set_alloc+0x1f/0x30 [ 356.657558][T17360] hash_netiface_create+0x282/0x740 [ 356.662772][T17360] ip_set_create+0x3cc/0x960 [ 356.667363][T17360] nfnetlink_rcv_msg+0x4c6/0x590 [ 356.672299][T17360] netlink_rcv_skb+0x120/0x220 [ 356.677069][T17360] nfnetlink_rcv+0x16b/0x1690 [ 356.681744][T17360] netlink_unicast+0x5c0/0x690 [ 356.686509][T17360] netlink_sendmsg+0x58b/0x6b0 [ 356.691277][T17360] __sock_sendmsg+0x142/0x180 [ 356.695952][T17360] ____sys_sendmsg+0x31e/0x4e0 [ 356.700726][T17360] ___sys_sendmsg+0x17b/0x1d0 [ 356.705408][T17360] __x64_sys_sendmsg+0xd4/0x160 [ 356.710266][T17360] x64_sys_call+0x191e/0x2ff0 [ 356.714968][T17360] do_syscall_64+0xd2/0x200 [ 356.719473][T17360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.725360][T17360] [ 356.727672][T17360] value changed: 0xffff88810458f640 -> 0x0000000000000000 [ 356.734767][T17360] [ 356.737114][T17360] Reported by Kernel Concurrency Sanitizer on: [ 356.743259][T17360] CPU: 1 UID: 0 PID: 17360 Comm: syz.6.4822 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 356.755405][T17360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 356.765469][T17360] ================================================================== [ 356.836314][ T23] hid_parser_main: 43 callbacks suppressed [ 356.836404][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.849733][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.857269][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.864743][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.872193][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.879653][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.887127][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.894561][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x4 [ 356.902009][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.909394][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.952707][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 356.989937][T17414] fido_id[17414]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 357.398738][T17360] syz.6.4822 (17360) used greatest stack depth: 5944 bytes left