last executing test programs: 14m43.288505062s ago: executing program 4 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x121101, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@mcast1, @in6=@private2, @in6=@local, 0x33, 0x4, 0x0, 0x2, 0x2, 0x2}, {@in=@rand_addr=0x64010100, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in6=@empty, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 14m43.113341363s ago: executing program 4 (id=1216): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) r7 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0xffff888237c16e50) capget(&(0x7f00000003c0)={0x19980330, r7}, &(0x7f0000000400)={0xe, 0x1ff, 0x7fff, 0x0, 0x4, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000) 14m40.226753072s ago: executing program 4 (id=1263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c8e9d4de9cbe30766673d0000", @ANYRESHEX, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) 14m40.183006442s ago: executing program 4 (id=1266): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_read_part_table(0x618, &(0x7f0000002200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 14m40.038685823s ago: executing program 4 (id=1267): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m39.043469839s ago: executing program 4 (id=1275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m39.029143859s ago: executing program 32 (id=1275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 14m37.166013312s ago: executing program 0 (id=1292): openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r0 = syz_io_uring_setup(0x1902, &(0x7f0000000640)={0x0, 0xec26, 0x800, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847bb, 0x4506, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) 14m35.93840922s ago: executing program 0 (id=1300): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) creat(&(0x7f0000000040)='./file0\x00', 0x340) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nolazytime}]}, 0x2, 0x522, &(0x7f00000006c0)="$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") write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x100000c01, 0x38, 0x0, 0x42, 0x6e}) 14m35.611423833s ago: executing program 0 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c8e9d4de9cbe30766673d0000", @ANYRESHEX, @ANYBLOB="2c756e616d653dd0aedec1aa20ffd81d1bf89329217cb058a396eda2ab40a26d93dd083c0074dcab6cab21ae16c4cdf97bdc355f3b41d27b654301345cb3c4cec37953322d01beaa7257964fd30fe2d72f171da72e389f382dea3c8d91906aead5d5aeccc097ef1092ea987c2b00000000000000002c00"]) 14m35.547625373s ago: executing program 0 (id=1307): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 14m34.996386196s ago: executing program 0 (id=1310): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) 14m33.943136943s ago: executing program 0 (id=1321): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 14m33.925712353s ago: executing program 33 (id=1321): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a40)="f4000900062b2c25fe80000000000000dc8b66cc00000000000000000000000000000000e4986919", 0x28}], 0x1}, 0x0) 12m46.458269121s ago: executing program 3 (id=3162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12m46.443959101s ago: executing program 3 (id=3163): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000060000000000001811000000009bf8e7dc9059329ba11f68edec31c8bd05bca16252cf25cb117fb70bc2a3db0d8a5f1c32fda9eefc6454e2c37a24e9e6f4a42cf8e5c21d647639eaa35a98494980b601e6f2379a51e374fdc5cc", @ANYRES32=r2, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) rseq(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) kexec_load(0x3e00, 0x0, &(0x7f00000002c0), 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) 12m46.413971911s ago: executing program 3 (id=3165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100feff95"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 12m46.333201031s ago: executing program 3 (id=3166): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltuid<', @ANYRESHEX, @ANYBLOB=',\x00']) mount$9p_fd(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x144000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12m46.230736112s ago: executing program 3 (id=3168): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfa, 0x2, 0x7ffc1ffb}]}) syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)=0x0) timer_getoverrun(r0) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket$kcm(0x2, 0x2, 0x73) timer_delete(0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0xb, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 12m45.994115704s ago: executing program 3 (id=3170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12m45.993956764s ago: executing program 34 (id=3170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12m44.883281172s ago: executing program 1 (id=3183): getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0, 0xfb4}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc0100, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250301f2800c001c000bac0f00000000001400050000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c808004500ac1414bb008ff6c7ceb20989cf7012879d834d615c00270767239d067b197678c60ec0bbf9b5ea23c51fe2e06d657cb535325ebaecae2f435734d53e43af5234199a718bcc0b75cb5205db65bc4907a3a45abd6c5348e15545c24e24fa1475570e72fe61b6abb82c9b0ea64e526ca2c38b1b88ce7726aac7f5a8611f51869e00059e3bc734692b2bd2aa2fea80ff865ef41e21729e192cdb793c9295cb8bbde418524334b6d611b73ec02e2ad303eb4d81c4c524d2f60586af33ec6294d9045b90ce4052b763b80fd2a2424b3f4ad485cef311f234277dcec0401bbaaad2d782fc5e0a0e7e4a"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00!\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x50) r7 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$pokeuser(0x6, r7, 0x358, 0xffff888237c16e50) capget(&(0x7f00000003c0)={0x19980330, r7}, &(0x7f0000000400)={0xe, 0x1ff, 0x7fff, 0x0, 0x4, 0x6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={{0x14, 0x3ea, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2000000) 12m44.201422366s ago: executing program 1 (id=3191): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x4004, @fd_index=0x1, 0x8, &(0x7f0000002a40)=[{&(0x7f0000000280)=""/221, 0xdd}, {&(0x7f0000002b00)=""/4099, 0x1003}, {0x0}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000700)=""/148, 0x94}, {&(0x7f0000002840)=""/245, 0xf5}], 0x6, 0x1d}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffffff}, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001abed30a900", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x2404c455}, 0x20040000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 12m43.769465998s ago: executing program 1 (id=3196): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x3ad, 0x0, 0xfffffffe}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x3) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x5, 0xc, 0x8009, 0x0, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r5, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) ioctl$VT_DISALLOCATE(r0, 0x5608) 12m43.666084259s ago: executing program 1 (id=3200): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0), 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12m43.648403969s ago: executing program 1 (id=3202): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}], 0x1, 0x4000004) 12m43.50674289s ago: executing program 6 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000000101040000000000000000020000082c0001801400018008000100e000000108000200e00000010c0002800500010000000000060003400001"], 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) 12m42.646255746s ago: executing program 6 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r1, 0x0, 0xffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xa}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x21, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 12m42.633588556s ago: executing program 6 (id=3210): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_disconnect={0xffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000480)=0x4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x8}, 0x4a00, 0x3, 0xfd3, 0x6, 0x8, 0x40, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x2, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4000000000, 0x3fff8000}, 0x201, 0x32, 0x43a1bd76, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, &(0x7f0000000300)="f598c1835426d886908f7cbd7ad30182b728e4657859e717b3481705df9cb2d4c597924352612f23c7f42b0fd7637fbfb3059a6728ba11a1c3c88cf7d0b7a2ad698bd375d52fc9f16212acfcf76c85b3f12cf05cda2b1fbe0801c87cda990289071c433c9a94a4f5ec37a094479779530d5184213325cf86d0e74a4d89fc168430c25aa523bbaa792fa0f8774e6e74bd67b9bf0565e32b61d46d36e740e0265df4ef883c874af330df61d367401baff9a787dcb4a67da6bc1edc9f3a392e228460e47dacf7e93b80e9605e16ae9c7dd38d9ffaa11c119f1f7eb0929bb1e84c502fbacea18759e7b91bec8a8b", 0xec, &(0x7f00000001c0), &(0x7f0000000400), &(0x7f0000000440)="33bdd7d5540718424694773d1ae8459eb4d9e398f45ff5c50447b92068d82903") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x4) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x33, 0x1, [{0xfe, 0x40000}]}}) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0xd, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000001140)=ANY=[@ANYBLOB="030000000000000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004800"/144], 0x90) socket(0xb, 0x3, 0x371) write$UHID_CREATE(r3, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x10001}}, 0x120) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES64=r8], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r9, 0x0, 0x401}, 0x11) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 12m42.335775348s ago: executing program 6 (id=3213): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12m42.273554278s ago: executing program 6 (id=3214): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0xa, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r5 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x802, 0x28) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000008c0)=@assoc_value={r8, 0x1}, 0x8) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000080), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000300)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x14) sendmmsg$inet_sctp(r5, &(0x7f0000001b00)=[{&(0x7f0000000240)=@in6={0xa, 0x4e23, 0x7, @empty, 0x6}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="ea563ef3b5f305a8dca502cc495653c6886bf806ebec3813041bf0fc38eefc18096de609729c9be1eca95cae994998cdfd5381", 0x33}, {&(0x7f00000003c0)="0fc7e2b80855f8678d3665492f23e5aa58106e3bcfa6fb8d1eae91f5fd167ba46939d7806f12dcdbb0a5a5027815d745db0cc2ccba60a5ccc9eb9877b46bfd26b0e0cdd2694a115577ac91f1c3cf1a3ec59f4a2a13137cfb29a27f29992d9d5ba43e0a72c15d919dcee0b3c6ae93a2940df55af6d11fcf5f351802913fcb1b733736a7223dda4f7cb3827cf8c2", 0x8d}, {&(0x7f0000000540)="d34ce062092c6dafb363b87a6f738a773ac2f9cd33d762358df6f35bfa1385b129a2e4b1643da407b96fdbb58c8a11bff9aa48869ab5e8f6f71d0e03c5eac68eb2c98e18b39990d6bfe3a1a5e96dc8b2ec205f399a4540f9", 0x58}], 0x3, &(0x7f00000006c0)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @init={0x18, 0x84, 0x0, {0x5, 0x7ff, 0x1, 0xa}}, @init={0x18, 0x84, 0x0, {0x8001, 0x3, 0xfc00, 0x8}}], 0x48, 0x24000044}, {&(0x7f00000007c0)=@in6={0xa, 0x4e23, 0x4, @remote, 0xfffffff9}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000008c0)="d5cbb9c9a2e447e9639c4509627edb303fa6daa476896754bae6d8c11a8a5eac44d0c18d16193edb01982465771a6251317ecfdae66c6bfc6c684578cff0ba0946f584336557ad07fb20d6bf03b8a0d283faf31a6e59520ef5e2245a06951f51a9042004784d326bd8004c28af851eff819f8b8942d2001b68878bd382b9320358007c296c8ad8f793567a70d6201b4a551c579963fbae4c04fd", 0x9a}, {&(0x7f0000000800)="5a35bd98208184f87cec5d4e", 0xc}], 0x2, 0x0, 0x0, 0x50}, {&(0x7f0000000980)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000a00)="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", 0xfa}, {&(0x7f0000000b00)="8e9c7bec38019e3218306a5b1c0758ffafa944d6117ed5ed5e67c0638be076816d019847a06f672e66854b661b9130a877f0fc27e8150bf4ce6cc1fded82ec84cb3477061fc4fdc83b2700687ac417049e12ffc9f3537ca71476b668e63c32f5ded101f96eb85b6a19c241ef", 0x6c}, {&(0x7f0000000b80)="9ad527b75184897dd866df46f7b7842e62a29716cd1df0055f4b5ec8ed983663d4dca0791d69efdd7f9dca9e1d5a3536af5f1616f01bcc50a0f56c5e083f4feb0d258e5e638ea07b82f32fd8d565645667cbc6", 0x53}, {&(0x7f0000000c00)="8f242e54f9729a906ab69cd0062fc10a423c1fa3bc9481c0cba7935558026c5dc54f75be8975a632d32a4c400d24e080f091ff8b92b0ea7931bf90c39c5cda184c35be75992803e52b8c76d416284f6ef233a18b19ad93c7a6df4f920624b5ac31991f437bbe59c6868ec2856b634854fba425c78606d05e987e8df6283da37352976dac77f81982f7dbfb09c4107f91cc2b0490b293a383d46d07d9996ef113cff2e9bd2e7bfc297eb23b70176eac76d5912decf1c51f857a5384b35b6ae2efb0a4fd7904922e9dfa56555bf7eb9de316b1946815baf05fd6556bad8703b310cd0967b454830243acb3c73190b0af7acb5bb9e0fcf5f1", 0xf7}, {&(0x7f0000000d00)="baef16d98153cb108487476fd532227822617bf0d44285242be9bf50c2e488b3fe48e31576b1ef0a3b03f774e67087c721643d1150e1cc7b16f822523b2aeb3ed2d3e28139fe56a0f016d3e0fb0206fbed253e1cd29cf56fb0623443274e858f2a601d507ad1854efbb2d974218e5300167c3f5f31644f6c28a2d03e383104d1b9c20be5bfb902dd32b5ac87eb5d83821a9da89103ba3346920b261a51a6de64699885b0498030ff4435fb0eb0aadbd41cb11e6f7f70e8bd51517d9106dc9f00203d095f0f1cde04f7b23857e0b1b522ca", 0xd1}], 0x5, &(0x7f0000000e80)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @sndrcv={0x30, 0x84, 0x1, {0xd, 0x0, 0x4, 0x0, 0x1, 0x8, 0x9, 0x1a3f}}], 0x50, 0x24040090}, {&(0x7f0000000f00)=@in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000f40)="26ad859be1919e5e02417a7d1d684d29a8185aa4a56faa50dafb2965b6a978c2b3d39e0d384fa795c8de07a139fda3a21a6db9419c91b974131554512e99c138ea898f940ef380a2612d7730a37cea41956443c8b42133fd831a8b128ab4ee238855d21cb23c01db87170579f99751d90ad00d7647719d8355d046325a55e3d3af90365e42", 0x85}, {&(0x7f0000001000)="d93329041fe57751a677697cfcdc2a29e69d279bdeb152e994b8ab7763e7874cbc78c4c668f611ef661e58bb298dc51c8461a4259fa07a107706e1176e2221592d7574020ea296cecdd867cee1c7a8fa63778ee5e1394fd0d8e1e00a5ba37905073edf03b1b470a7361dc9a8b11d39509999b9db30a517795539deb6bfad9d00500650ca13192db96d3b49a993a6b5debdcf601ac5efc7d0e5a5e16884db6d2de199e5a089a778dc513e1635806ebcdfb55a3345f5ea0f0ab570f871047cb3b4", 0xc0}, {&(0x7f00000010c0)="e158c1bc14707372c1e90d71114a1de85a73c3b94e0f065e7345d772d23259536cf1197c9781a02783bb06e4863d5a6e8e745043ef170b89a433f85c192a4ec727e969f5b14006fd", 0x48}, {&(0x7f0000001140)="5da5d42c6e8c2dc4c5415879c58c2eb809e5053f7465a188bb12a426d7d1c82369faf5545c56dc7058ff3f969fab8919b4decffbf5afee264319", 0x3a}, {&(0x7f0000001180)="df2f6e88c600d7a66de837bb57ccacf7a63ae6cd57328e342f6bab81174487bd0cd97ee0bae888032449bdce60704bc47aa069f87ec113d2bee1be743f3aeff7c333e6e76956e8b48da41025e526700da683273dc11c01358e42bb6482192226194ab1b84b537c42f9da4a4f9bed03d5475107aa2bbecf548819a3d8d059f43001e04be50efa078d38b3f047e3c2f50f5352876b7352c59a05c2c0ec616669aa03e2f0274cce5bbe09156adc306a1fad60d3629cac6445fba88b17f35e5cd14d2636ed6c6f2f7f9ff6c0aba2df3acf9a0c6507dcbfd24c5d120818055ba59c417aad62b58dff9052fe1a90ac436776", 0xef}], 0x5, &(0x7f0000001300), 0x0, 0x20040080}, {&(0x7f0000001340)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001380)="608962cf3529f4826510b3f5592a13e0be9416d0efff21f460ca9c32ac4f6b1b5aad347fc907ed0865857ddf6639725e5bceeb451b0765e5543f15dfcbeac32f3adff3bd8e3eee6e2b22a138aae717c8928b3c", 0x53}, {&(0x7f0000001400)="81bcc3b7bf893280f4ae4af285b9b7ab87658a5844c577aa842d311d2d0a37aaf0af7e4c36144bd1a051e0aab4", 0x2d}], 0x2, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000840000000500000010000000040000002000000000000000840000000200000009000f000800000008000000", @ANYRES32=0x0, @ANYBLOB="20000000000000008400000002000000020005000b00000000000000", @ANYRES32=0x0, @ANYBLOB="1800006fe37675d42500000384000000070000007f00000100000000"], 0x70, 0x4008000}, {&(0x7f0000001600)=@in6={0xa, 0x4e24, 0xfffffffa, @private1, 0x8}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001640)="57c9b17cab63d17d314bf05d081a5897368c42a270571c01fbddd797e8a31ec9d875b177c6d1242bb222ca37c9812a7841231a5a0ca9f42d611ce1979b718628add692002a343043c8a73678bb00215c20a4946a6b7b9cff57239d88f99bdc10b013e8ff6082086200e40b854b6bed77c06990c223cd7d0c07f278796c0243a55c12adf4c6924d92efce612c", 0x8c}, {&(0x7f0000001700)="4629145999907a33bb80282c4be87046f76cfec35cd9bd0a94b3f84e49c08750ec7bbf228f74477e1d106fb961194aa54568da5c48df38b08031ce91444e6db9bee5f05a27d62a3ad60492b7a4c6f26ba8251af993951ed80e679f4602d0146bc94b8c33844d62e1c9a9b7dee5ee78ae5a80b91057607abfc443fa67c939af4c98", 0x81}, {&(0x7f00000017c0)="5fb12a2cd86b39b176dbe881910995e8118db6722467e13117acc76f098c08b0906b835f", 0x24}], 0x3, &(0x7f00000018c0)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @init={0x18, 0x84, 0x0, {0x3ff, 0x0, 0x9, 0x16}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x200, 0x4}}], 0x58, 0x24000801}, {&(0x7f0000001940)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001980)="6a9b18cdcf67719d42f6bc518189a3d54b8ea5618fee49ff9da28980718476c3c7aa7ec2c0e28098ee42008b", 0x2c}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000008400000005000000300000000200000020000000000000008400000008000000000001300000000000000084000000010000007c0a000000400000018000000100008006000000fbffffff0900"/100, @ANYRES32=r8, @ANYBLOB="18000000000000008400000007000000ac1414bb0000000020000000000000008400000002000000f1bd08020500000007000000", @ANYRES32=r9, @ANYBLOB="20000000000000008400000002000000000002800600000005000000", @ANYRES32=0x0, @ANYBLOB="200000000000000084000000020000000f000e820400000000000100", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000e05e02000e000200"], 0xf8}], 0x7, 0x20000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 12m41.826193441s ago: executing program 6 (id=3216): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 12m41.826033901s ago: executing program 35 (id=3216): creat(&(0x7f00000002c0)='./file0\x00', 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 12m40.953656677s ago: executing program 1 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12m40.936113127s ago: executing program 36 (id=3224): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7.004716784s ago: executing program 8 (id=12743): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.306749159s ago: executing program 8 (id=12752): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000100)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.848355601s ago: executing program 5 (id=12776): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x200, 0x21db}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x20000000000000e0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCXONC(r2, 0x540a, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x23) dup2(r3, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00"/13], 0x48) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18004000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000085000000500000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1c0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7f, 0x1002, 0x5c8, 0x80000003, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.658188183s ago: executing program 5 (id=12777): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty=0xffffffff}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c40)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf2539000000080001007063690011000200303030303a30303a31302e300000000008007300010000000e00016465767a696d0000000f0002006e657464657673696d30000008000300ffffffff7790985f6287402d391c8591f63b023fdf9a852956d4b25311c7db00d957142880440aec5f70a67d88740cd0d312783dc1f109a23b7b8f2a92dc5e85dabd56484ef5f42bcf2eeed7c9d670c9c6fdf1e52365f6b50f41ec0739ed640de004572331b7b0276d6e714c53de501b98bb00d4b37c3ea4df7161d45df684b3"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x7fff}}, './file0\x00'}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000300)={0x0, 0x256, 0x1, [0x73f, 0x0, 0xffff, 0x7, 0x9], [0x6c6add32, 0x9, 0x0, 0x73e, 0xe1, 0x5800000000, 0x3, 0x8001, 0x7, 0x8, 0x80000001, 0x2, 0x9, 0x6, 0x0, 0xb60e, 0x1, 0x4d0, 0x8, 0x64, 0x3, 0x4, 0x7, 0x5, 0x1a2, 0x4, 0x7, 0xfffffffffffffff8, 0x5, 0x3, 0xffff, 0x6, 0x5, 0x344, 0x6, 0xffff, 0xb, 0x3, 0x830, 0x2, 0x2, 0x8001, 0xc31, 0x2, 0xffffffffffffffff, 0x2, 0x4, 0x3, 0x1010000000000000, 0x4, 0x6, 0x8, 0x1, 0xffffffff7fffffff, 0xd, 0xeadb, 0x4, 0x5, 0x100, 0x6, 0x7, 0x3, 0xd, 0x0, 0x0, 0x0, 0x2, 0xecb, 0x8, 0x2, 0x9, 0x3, 0x8, 0xffffffffffff3ef7, 0x5, 0x5, 0x5, 0x97, 0xe, 0x6, 0xfffffffffffff546, 0x69b6, 0x0, 0x7fffffff, 0x0, 0xc, 0x4, 0x6, 0x3, 0x3, 0x0, 0x1, 0x3, 0x5, 0x7, 0xb01, 0x0, 0x7, 0x9, 0x100000001, 0x5, 0x9, 0x2, 0xfffffffffffffffb, 0x893, 0x101, 0x7d637297, 0x3, 0x9, 0xc1, 0x8, 0xaf, 0x10000, 0x9, 0x9, 0x6, 0x3, 0x0, 0xe6, 0x8, 0x400]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r6 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r6, 0x0, 0x78) sendfile(r5, r6, &(0x7f00000001c0), 0x8) fcntl$addseals(r6, 0x409, 0x8) fallocate(r6, 0x3, 0x9100, 0x3) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000740)={r4, 0x8, 0x3}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 2.603187113s ago: executing program 9 (id=12778): iopl(0x3) syz_clone(0x80000, 0x0, 0x2f9f, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) readv(r1, &(0x7f0000000300)=[{}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x4, @loopback}}, 0x0, 0x0, 0x43, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x8}]}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = inotify_init1(0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x7f2a}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000003c0)={r9, 0xe91}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) r10 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x10000a0) r11 = dup(r8) inotify_rm_watch(r11, r10) 2.505936654s ago: executing program 5 (id=12780): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040811) inotify_add_watch(0xffffffffffffffff, 0x0, 0x50000a0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x54b, &(0x7f0000001fc0)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 1.913737128s ago: executing program 7 (id=12782): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) msgctl$IPC_RMID(0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x16000f57) 1.874059318s ago: executing program 7 (id=12783): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.726175929s ago: executing program 9 (id=12784): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.645119239s ago: executing program 7 (id=12785): iopl(0x3) syz_clone(0x80000, 0x0, 0x2f9f, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) readv(r1, &(0x7f0000000300)=[{}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x4, @loopback}}, 0x0, 0x0, 0x43, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x8}]}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = inotify_init1(0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x7f2a}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000003c0)={r9, 0xe91}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) r10 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x10000a0) r11 = dup(r8) inotify_rm_watch(r11, r10) 1.644478629s ago: executing program 5 (id=12786): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040811) inotify_add_watch(0xffffffffffffffff, 0x0, 0x50000a0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x54b, &(0x7f0000001fc0)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 1.60869448s ago: executing program 8 (id=12760): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) mmap(&(0x7f0000188000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0xd6dac000) socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) msgctl$IPC_RMID(0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x16000f57) bind$tipc(r1, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x43, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000236000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00000d8000/0x1000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) 1.53640902s ago: executing program 8 (id=12788): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x2, 0x4, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) listen(r1, 0x100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @remote}, 0x300, &(0x7f0000000280)=[{&(0x7f0000000040)="f4", 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000050) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xec, 0xec, 0x3, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x5f272849472d0386, [{0x7, 0x3, 0x78}, {0x9, 0x5, 0xd}]}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x2}}, @union={0xa, 0x5, 0x0, 0x5, 0x1, 0xffff, [{0x4, 0x0, 0x6}, {0x4, 0x1, 0x8}, {0xc, 0x2, 0x4}, {0x4, 0x3, 0x8}, {0x2, 0x0, 0x5}]}, @typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x2, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0xfffffff7}}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/70, 0x107, 0x46, 0x1, 0x1, 0x10000}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x2, 0x164, {{0x2d, 0x4, 0x1, 0x6, 0xb4, 0x66, 0x0, 0xc, 0x0, 0x0, @private=0xa010100, @loopback, {[@timestamp_prespec={0x44, 0x1c, 0xc1, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@loopback, 0x45f}, {@dev={0xac, 0x14, 0x14, 0x32}, 0xb}]}, @timestamp_addr={0x44, 0x14, 0x3a, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffb}, {@rand_addr=0x64010101, 0x5}]}, @end, @cipso={0x86, 0x30, 0xffffffffffffffff, [{0x0, 0xc, "0fa394d1e87a6b412862"}, {0x1, 0x7, "b30394586d"}, {0x7, 0xa, "49c85c1d4dfed8ba"}, {0x6, 0x5, "145061"}, {0x2, 0x8, "ba29e3f5043a"}]}, @rr={0x7, 0x27, 0xc5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x38}, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_addr={0x44, 0x14, 0x91, 0x1, 0x9, [{@broadcast, 0x4}, {@empty, 0xd04a}]}, @end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) waitid(0x0, 0x0, 0x0, 0x41000008, 0x0) writev(0xffffffffffffffff, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r5) mount_setattr(0xffffffffffffff9c, 0x0, 0x9800, 0x0, 0x0) 1.195133703s ago: executing program 9 (id=12792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.176279743s ago: executing program 2 (id=12793): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.142639612s ago: executing program 2 (id=12794): iopl(0x3) syz_clone(0x80000, 0x0, 0x2f9f, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) readv(r1, &(0x7f0000000300)=[{}], 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x4, @loopback}}, 0x0, 0x0, 0x43, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6, 0x0, 0x8}]}) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kmem_cache_free\x00', r6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = inotify_init1(0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x7f2a}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000003c0)={r9, 0xe91}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) r10 = inotify_add_watch(r8, &(0x7f0000000200)='.\x00', 0x10000a0) r11 = dup(r8) inotify_rm_watch(r11, r10) 1.137759193s ago: executing program 9 (id=12795): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 899.785314ms ago: executing program 9 (id=12796): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040811) inotify_add_watch(0xffffffffffffffff, 0x0, 0x50000a0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x54b, &(0x7f0000001fc0)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r5, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000600)=ANY=[], 0x0) 785.998025ms ago: executing program 8 (id=12797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c42) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[]) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x22) socket$nl_route(0x10, 0x3, 0x0) sync() add_key$keyring(&(0x7f0000000400), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x9200000000000000) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) 766.811325ms ago: executing program 5 (id=12798): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 710.096335ms ago: executing program 7 (id=12799): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010326bd7000fbdbdf251c00"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 627.371986ms ago: executing program 5 (id=12800): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) 563.548177ms ago: executing program 8 (id=12801): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 339.186888ms ago: executing program 7 (id=12802): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 284.149728ms ago: executing program 2 (id=12803): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 216.899509ms ago: executing program 2 (id=12804): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1, 0x0, 0x2, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x13}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20}, {0x0, 0x2}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 214.228408ms ago: executing program 2 (id=12805): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 180.425069ms ago: executing program 2 (id=12806): socket$kcm(0x10, 0x2, 0x4) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000003c0)="1a99c48768637456f47b12f85f6da7a7cd09fd24c69dfca8282a2ad3c4c098cf1ee62e3d3af80e58f1dd0b226d812f46ae4ccbdd792ac7723115394bd19768d10f706c818c62edbe0c7ea8f6eb85d2bab8390f", &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) 1.13051ms ago: executing program 9 (id=12807): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="8100"}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 7 (id=12808): socket$kcm(0x10, 0x2, 0x4) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000003c0)="1a99c48768637456f47b12f85f6da7a7cd09fd24c69dfca8282a2ad3c4c098cf1ee62e3d3af80e58f1dd0b226d812f46ae4ccbdd792ac7723115394bd19768d10f706c818c62edbe0c7ea8f6eb85d2bab8390f", &(0x7f0000000140)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b32343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000084000001"], 0x48) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190da) kernel console output (not intermixed with test programs): HW filter on device team0 [ 948.605948][ T9496] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.613086][ T9496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.632620][ T9482] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.639743][ T9482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.811088][T20695] lo speed is unknown, defaulting to 1000 [ 948.818919][T20695] lo speed is unknown, defaulting to 1000 [ 948.825139][T20695] lo speed is unknown, defaulting to 1000 [ 948.858944][T20695] infiniband sz1: set down [ 948.863461][T20695] infiniband sz1: added lo [ 948.868179][ T3407] lo speed is unknown, defaulting to 1000 [ 948.881052][T20695] RDS/IB: sz1: added [ 948.885181][T20695] smc: adding ib device sz1 with port count 1 [ 948.893672][T20695] smc: ib device sz1 port 1 has no pnetid [ 948.899834][ T3407] lo speed is unknown, defaulting to 1000 [ 948.906384][T20695] lo speed is unknown, defaulting to 1000 [ 948.931320][ T9542] IPVS: stop unused estimator thread 0... [ 948.949507][T20695] lo speed is unknown, defaulting to 1000 [ 949.034913][T20695] lo speed is unknown, defaulting to 1000 [ 949.049766][T20146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.111045][T20695] lo speed is unknown, defaulting to 1000 [ 949.138408][T20723] FAULT_INJECTION: forcing a failure. [ 949.138408][T20723] name failslab, interval 1, probability 0, space 0, times 0 [ 949.151096][T20723] CPU: 0 UID: 0 PID: 20723 Comm: syz.9.12078 Not tainted syzkaller #0 PREEMPT(voluntary) [ 949.151123][T20723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 949.151135][T20723] Call Trace: [ 949.151141][T20723] [ 949.151147][T20723] __dump_stack+0x1d/0x30 [ 949.151169][T20723] dump_stack_lvl+0xe8/0x140 [ 949.151199][T20723] dump_stack+0x15/0x1b [ 949.151291][T20723] should_fail_ex+0x265/0x280 [ 949.151347][T20723] should_failslab+0x8c/0xb0 [ 949.151374][T20723] kmem_cache_alloc_noprof+0x50/0x480 [ 949.151424][T20723] ? getname_flags+0x80/0x3b0 [ 949.151457][T20723] ? kstrtouint+0x76/0xc0 [ 949.151493][T20723] getname_flags+0x80/0x3b0 [ 949.151577][T20723] user_path_at+0x28/0x130 [ 949.151596][T20723] user_statfs+0x4d/0x110 [ 949.151613][T20723] __x64_sys_statfs+0x65/0xf0 [ 949.151650][T20723] ? __bpf_trace_sys_enter+0x10/0x30 [ 949.151722][T20723] ? trace_sys_enter+0xd0/0xf0 [ 949.151778][T20723] ? syscall_trace_enter+0x102/0x1e0 [ 949.151889][T20723] x64_sys_call+0x2a07/0x3000 [ 949.151921][T20723] do_syscall_64+0xd2/0x200 [ 949.151938][T20723] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 949.151971][T20723] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 949.152054][T20723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.152078][T20723] RIP: 0033:0x7f9298b8efc9 [ 949.152094][T20723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.152113][T20723] RSP: 002b:00007f92975f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 949.152131][T20723] RAX: ffffffffffffffda RBX: 00007f9298de5fa0 RCX: 00007f9298b8efc9 [ 949.152146][T20723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 949.152160][T20723] RBP: 00007f92975f7090 R08: 0000000000000000 R09: 0000000000000000 [ 949.152208][T20723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.152220][T20723] R13: 00007f9298de6038 R14: 00007f9298de5fa0 R15: 00007ffcace597c8 [ 949.152241][T20723] [ 949.205983][T20695] lo speed is unknown, defaulting to 1000 [ 949.270215][T20728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=20728 comm=syz.9.12079 [ 949.374297][T20695] lo speed is unknown, defaulting to 1000 [ 949.396940][T20725] netlink: 'syz.2.12077': attribute type 13 has an invalid length. [ 949.444960][T20728] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12079'. [ 949.503525][T20146] veth0_vlan: entered promiscuous mode [ 949.511304][T20146] veth1_vlan: entered promiscuous mode [ 949.523537][T20146] veth0_macvtap: entered promiscuous mode [ 949.647221][T20737] wireguard9: entered promiscuous mode [ 949.652700][T20737] wireguard9: entered allmulticast mode [ 949.658901][T20695] lo speed is unknown, defaulting to 1000 [ 949.676187][T20146] veth1_macvtap: entered promiscuous mode [ 949.688594][T20146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.700137][T20146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.713578][ T9482] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.722470][ T9482] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.738122][ T9490] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.747997][ T9490] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.200959][T20752] lo speed is unknown, defaulting to 1000 [ 950.227032][T20752] lo speed is unknown, defaulting to 1000 [ 950.238559][T20777] program syz.5.12086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 950.253720][T20779] FAULT_INJECTION: forcing a failure. [ 950.253720][T20779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 950.266842][T20779] CPU: 1 UID: 0 PID: 20779 Comm: syz.2.12085 Not tainted syzkaller #0 PREEMPT(voluntary) [ 950.266869][T20779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 950.266918][T20779] Call Trace: [ 950.266924][T20779] [ 950.266931][T20779] __dump_stack+0x1d/0x30 [ 950.266955][T20779] dump_stack_lvl+0xe8/0x140 [ 950.266978][T20779] dump_stack+0x15/0x1b [ 950.266997][T20779] should_fail_ex+0x265/0x280 [ 950.267015][T20779] should_fail+0xb/0x20 [ 950.267112][T20779] should_fail_usercopy+0x1a/0x20 [ 950.267135][T20779] _copy_from_iter+0xd2/0xe80 [ 950.267159][T20779] ? __build_skb_around+0x1ab/0x200 [ 950.267190][T20779] ? __alloc_skb+0x223/0x320 [ 950.267233][T20779] netlink_sendmsg+0x471/0x6b0 [ 950.267331][T20779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 950.267348][T20779] __sock_sendmsg+0x145/0x180 [ 950.267373][T20779] ____sys_sendmsg+0x31e/0x4e0 [ 950.267410][T20779] ___sys_sendmsg+0x17b/0x1d0 [ 950.267447][T20779] __x64_sys_sendmsg+0xd4/0x160 [ 950.267492][T20779] x64_sys_call+0x191e/0x3000 [ 950.267519][T20779] do_syscall_64+0xd2/0x200 [ 950.267543][T20779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 950.267595][T20779] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 950.267632][T20779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.267655][T20779] RIP: 0033:0x7fd9e10cefc9 [ 950.267672][T20779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 950.267761][T20779] RSP: 002b:00007fd9dfb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 950.267782][T20779] RAX: ffffffffffffffda RBX: 00007fd9e1325fa0 RCX: 00007fd9e10cefc9 [ 950.267903][T20779] RDX: 0000000020000004 RSI: 00002000000004c0 RDI: 0000000000000004 [ 950.267917][T20779] RBP: 00007fd9dfb37090 R08: 0000000000000000 R09: 0000000000000000 [ 950.267931][T20779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.267946][T20779] R13: 00007fd9e1326038 R14: 00007fd9e1325fa0 R15: 00007fffecddfe68 [ 950.268029][T20779] [ 950.514435][T20809] program syz.7.12088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 950.576193][T20752] chnl_net:caif_netlink_parms(): no params data found [ 950.659855][T20752] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.667046][T20752] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.676073][T20752] bridge_slave_0: entered allmulticast mode [ 950.682744][T20752] bridge_slave_0: entered promiscuous mode [ 950.693256][T20752] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.700412][T20752] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.735981][T20752] bridge_slave_1: entered allmulticast mode [ 950.746137][T20752] bridge_slave_1: entered promiscuous mode [ 950.776549][T20752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.802810][T20752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.848786][T20752] team0: Port device team_slave_0 added [ 950.860602][T20752] team0: Port device team_slave_1 added [ 950.881716][T21013] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 950.896130][T20752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.903242][T20752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.912152][T21013] SELinux: failed to load policy [ 950.929195][T20752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.948423][T20752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.955382][T20752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.981372][T20752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.997122][T20981] lo speed is unknown, defaulting to 1000 [ 951.040462][T20981] lo speed is unknown, defaulting to 1000 [ 951.049053][T20752] hsr_slave_0: entered promiscuous mode [ 951.060982][T20752] hsr_slave_1: entered promiscuous mode [ 951.069623][T20752] debugfs: 'hsr0' already exists in 'hsr' [ 951.075372][T20752] Cannot create hsr debugfs directory [ 951.170007][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 951.170021][ T29] audit: type=1326 audit(2000000986.437:104710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.199926][ T29] audit: type=1326 audit(2000000986.437:104711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.223692][ T29] audit: type=1326 audit(2000000986.437:104712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.247459][ T29] audit: type=1326 audit(2000000986.437:104713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.271316][ T29] audit: type=1326 audit(2000000986.437:104714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.295043][ T29] audit: type=1326 audit(2000000986.437:104715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.318667][ T29] audit: type=1326 audit(2000000986.437:104716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.342435][ T29] audit: type=1326 audit(2000000986.437:104717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.366183][ T29] audit: type=1326 audit(2000000986.437:104718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.389939][ T29] audit: type=1326 audit(2000000986.437:104719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21099 comm="syz.5.12094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 951.576868][T21100] smc: net device bond0 applied user defined pnetid SYZ0 [ 951.722471][ T9542] bridge_slave_1: left allmulticast mode [ 951.728209][ T9542] bridge_slave_1: left promiscuous mode [ 951.733842][ T9542] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.762085][ T9542] bridge_slave_0: left allmulticast mode [ 951.767780][ T9542] bridge_slave_0: left promiscuous mode [ 951.773444][ T9542] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.818735][T21121] blktrace: Concurrent blktraces are not allowed on loop10 [ 951.858497][ T9542] tipc: Disabling bearer [ 951.948592][ T9542] .` (unregistering): left promiscuous mode [ 951.954500][ T9542] bond_slave_0: left promiscuous mode [ 951.959934][ T9542] bond_slave_1: left promiscuous mode [ 951.979100][ T9542] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.005427][ T9542] bond_slave_0: left allmulticast mode [ 952.019404][ T9542] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.051316][ T9542] bond_slave_1: left allmulticast mode [ 952.068632][ T9542] .` (unregistering): Released all slaves [ 952.129191][ T9542] tipc: Left network mode [ 952.167504][ T9542] macvlan1: left promiscuous mode [ 952.186129][ T9542] veth0_to_team: left promiscuous mode [ 952.199654][T21185] sctp: [Deprecated]: syz.5.12097 (pid 21185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 952.199654][T21185] Use struct sctp_sack_info instead [ 952.227369][ T9542] dummy0: left promiscuous mode [ 952.243546][ T9542] hsr_slave_0: left promiscuous mode [ 952.264952][ T9542] hsr_slave_1: left promiscuous mode [ 952.270549][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.294388][ T9542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.446389][ T9542] team0 (unregistering): Port device team_slave_1 removed [ 952.476391][ T9542] team0 (unregistering): Port device team_slave_0 removed [ 952.572463][T21158] lo speed is unknown, defaulting to 1000 [ 952.592516][T21158] lo speed is unknown, defaulting to 1000 [ 952.823076][T20752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 952.849107][T20752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 952.872163][T20752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 952.918122][T21232] bond2: Unable to set down delay as MII monitoring is disabled [ 952.930906][T21268] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12101'. [ 952.948664][T21232] bond2 (unregistering): Released all slaves [ 952.961455][T20752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 953.024221][T20752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.054651][T20752] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.072668][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.079728][ T9532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.125484][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.132553][ T9490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.156572][T21271] blktrace: Concurrent blktraces are not allowed on loop14 [ 953.214984][T20752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 953.225365][T20752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 953.318060][T21325] netlink: 'syz.8.12104': attribute type 21 has an invalid length. [ 953.367738][T20752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.630129][T21347] rdma_rxe: rxe_newlink: failed to add lo [ 953.943406][T21346] lo speed is unknown, defaulting to 1000 [ 953.949638][T21346] lo speed is unknown, defaulting to 1000 [ 954.096255][T20752] veth0_vlan: entered promiscuous mode [ 954.121003][T20752] veth1_vlan: entered promiscuous mode [ 954.174019][T20752] veth0_macvtap: entered promiscuous mode [ 954.189215][T20752] veth1_macvtap: entered promiscuous mode [ 954.212533][T20752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.232318][T20752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.265088][ T9482] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.283049][T21382] netlink: 'syz.7.12110': attribute type 13 has an invalid length. [ 954.286970][ T9482] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.511745][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.518994][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.828084][T21404] netlink: 'syz.2.12113': attribute type 13 has an invalid length. [ 954.930780][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.941262][T21382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.033688][ T9482] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.050111][T21399] wireguard10: entered promiscuous mode [ 955.055753][T21399] wireguard10: entered allmulticast mode [ 955.070726][ T9482] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.096130][ T9482] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.113084][ T9482] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.122639][ T9482] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.142669][ T9482] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.180777][T21422] netlink: 'syz.9.12115': attribute type 21 has an invalid length. [ 955.466198][T21461] rdma_rxe: rxe_newlink: failed to add lo [ 955.789973][T21484] lo speed is unknown, defaulting to 1000 [ 955.796288][T21484] lo speed is unknown, defaulting to 1000 [ 956.227317][T21511] sctp: [Deprecated]: syz.2.12125 (pid 21511) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.227317][T21511] Use struct sctp_sack_info instead [ 956.555692][T21521] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12128'. [ 956.567875][T21517] netlink: 'syz.9.12127': attribute type 13 has an invalid length. [ 957.142687][T21535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12130'. [ 957.178191][T21517] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.185378][T21517] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.298294][T21517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 957.320627][T21517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 957.421000][T21528] wireguard0: entered promiscuous mode [ 957.426485][T21528] wireguard0: entered allmulticast mode [ 957.436782][T21537] bond0: entered promiscuous mode [ 957.441915][T21537] bond_slave_0: entered promiscuous mode [ 957.447698][T21537] bond_slave_1: entered promiscuous mode [ 957.454177][T21537] dummy0: entered promiscuous mode [ 957.459799][T21537] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 957.469665][T21537] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 957.488448][T21537] hsr1: entered promiscuous mode [ 957.493397][T21537] hsr1: entered allmulticast mode [ 957.498588][T21537] bond0: entered allmulticast mode [ 957.503798][T21537] bond_slave_0: entered allmulticast mode [ 957.509562][T21537] bond_slave_1: entered allmulticast mode [ 957.586988][T21537] dummy0: entered allmulticast mode [ 957.647280][ T9490] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.668148][ T9490] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.684387][ T9490] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.693599][ T9490] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.888551][T21565] netlink: 'syz.5.12138': attribute type 21 has an invalid length. [ 957.984244][T21568] wireguard0: entered promiscuous mode [ 957.989736][T21568] wireguard0: entered allmulticast mode [ 958.046871][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 958.046885][ T29] audit: type=1326 audit(2000000993.307:104832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.076772][ T29] audit: type=1326 audit(2000000993.307:104833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.100434][ T29] audit: type=1326 audit(2000000993.307:104834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.124225][ T29] audit: type=1326 audit(2000000993.307:104835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.147953][ T29] audit: type=1326 audit(2000000993.307:104836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.171722][ T29] audit: type=1326 audit(2000000993.317:104837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.195446][ T29] audit: type=1326 audit(2000000993.317:104838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.219237][ T29] audit: type=1326 audit(2000000993.317:104839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.324520][T21575] netlink: 20 bytes leftover after parsing attributes in process `syz.7.12140'. [ 958.342972][T21575] tmpfs: Unknown parameter 'mÂ' [ 958.420242][ T29] audit: type=1326 audit(2000000993.517:104840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.421813][T21582] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 958.444019][ T29] audit: type=1326 audit(2000000993.517:104841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21566 comm="syz.5.12139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 958.477779][T21582] SELinux: failed to load policy [ 958.718329][T21592] bond1: Unable to set down delay as MII monitoring is disabled [ 958.730527][T21587] blktrace: Concurrent blktraces are not allowed on loop14 [ 958.738951][T21592] bond1 (unregistering): Released all slaves [ 958.980598][T21677] lo speed is unknown, defaulting to 1000 [ 958.986888][T21677] lo speed is unknown, defaulting to 1000 [ 959.182150][T21676] netlink: 'syz.7.12147': attribute type 13 has an invalid length. [ 959.253623][T21674] bond1: Unable to set down delay as MII monitoring is disabled [ 959.317335][T21674] bond1 (unregistering): Released all slaves [ 959.452238][T21776] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12153'. [ 959.692170][T21785] blktrace: Concurrent blktraces are not allowed on loop10 [ 959.838239][T21793] blktrace: Concurrent blktraces are not allowed on loop18 [ 960.027231][T21818] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 960.036961][T21818] SELinux: failed to load policy [ 960.140997][T21819] wireguard0: entered promiscuous mode [ 960.146491][T21819] wireguard0: entered allmulticast mode [ 960.583421][T21826] FAULT_INJECTION: forcing a failure. [ 960.583421][T21826] name failslab, interval 1, probability 0, space 0, times 0 [ 960.596145][T21826] CPU: 1 UID: 0 PID: 21826 Comm: syz.8.12167 Not tainted syzkaller #0 PREEMPT(voluntary) [ 960.596172][T21826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 960.596185][T21826] Call Trace: [ 960.596192][T21826] [ 960.596200][T21826] __dump_stack+0x1d/0x30 [ 960.596223][T21826] dump_stack_lvl+0xe8/0x140 [ 960.596260][T21826] dump_stack+0x15/0x1b [ 960.596277][T21826] should_fail_ex+0x265/0x280 [ 960.596295][T21826] should_failslab+0x8c/0xb0 [ 960.596324][T21826] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 960.596397][T21826] ? sidtab_sid2str_get+0xa0/0x130 [ 960.596491][T21826] kmemdup_noprof+0x2b/0x70 [ 960.596521][T21826] sidtab_sid2str_get+0xa0/0x130 [ 960.596551][T21826] security_sid_to_context_core+0x1eb/0x2e0 [ 960.596598][T21826] security_sid_to_context+0x27/0x40 [ 960.596628][T21826] selinux_lsmprop_to_secctx+0x67/0xf0 [ 960.596661][T21826] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 960.596684][T21826] audit_log_subj_ctx+0xa4/0x3e0 [ 960.596752][T21826] ? skb_put+0xa9/0xf0 [ 960.596786][T21826] audit_log_task_context+0x48/0x70 [ 960.596840][T21826] audit_log_task+0xf4/0x250 [ 960.596875][T21826] ? kstrtouint+0x76/0xc0 [ 960.596983][T21826] audit_seccomp+0x61/0x100 [ 960.597012][T21826] ? __seccomp_filter+0x82d/0x1250 [ 960.597081][T21826] __seccomp_filter+0x83e/0x1250 [ 960.597111][T21826] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 960.597148][T21826] ? vfs_write+0x7e8/0x960 [ 960.597260][T21826] __secure_computing+0x82/0x150 [ 960.597291][T21826] syscall_trace_enter+0xcf/0x1e0 [ 960.597329][T21826] do_syscall_64+0xac/0x200 [ 960.597348][T21826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 960.597377][T21826] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 960.597477][T21826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.597499][T21826] RIP: 0033:0x7f398eacefc9 [ 960.597516][T21826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.597589][T21826] RSP: 002b:00007f398d52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 960.597610][T21826] RAX: ffffffffffffffda RBX: 00007f398ed25fa0 RCX: 00007f398eacefc9 [ 960.597624][T21826] RDX: 00002000000000c0 RSI: 0000000000000025 RDI: 0000000000000009 [ 960.597638][T21826] RBP: 00007f398d52f090 R08: 0000000000000000 R09: 0000000000000000 [ 960.597665][T21826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 960.597678][T21826] R13: 00007f398ed26038 R14: 00007f398ed25fa0 R15: 00007ffc8d258be8 [ 960.597695][T21826] [ 961.020090][T21838] lo speed is unknown, defaulting to 1000 [ 961.026415][T21838] lo speed is unknown, defaulting to 1000 [ 961.290461][T21867] program syz.5.12174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 961.406128][T21874] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 961.406774][T21864] netlink: 'syz.7.12172': attribute type 5 has an invalid length. [ 961.491463][T21874] lo speed is unknown, defaulting to 1000 [ 961.497644][T21874] lo speed is unknown, defaulting to 1000 [ 961.541021][T21880] wireguard1: entered promiscuous mode [ 961.546512][T21880] wireguard1: entered allmulticast mode [ 961.929417][T21909] lo speed is unknown, defaulting to 1000 [ 961.935803][T21909] lo speed is unknown, defaulting to 1000 [ 962.349724][T21937] wireguard15: entered promiscuous mode [ 962.355376][T21937] wireguard15: entered allmulticast mode [ 963.503819][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 963.503835][ T29] audit: type=1326 audit(2000000998.777:104988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.533898][ T29] audit: type=1326 audit(2000000998.777:104989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.557580][ T29] audit: type=1326 audit(2000000998.777:104990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.581349][ T29] audit: type=1326 audit(2000000998.777:104991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.605231][ T29] audit: type=1326 audit(2000000998.777:104992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.629153][ T29] audit: type=1326 audit(2000000998.777:104993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.652927][ T29] audit: type=1326 audit(2000000998.777:104994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.676719][ T29] audit: type=1326 audit(2000000998.777:104995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.700540][ T29] audit: type=1326 audit(2000000998.777:104996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.724321][ T29] audit: type=1326 audit(2000000998.777:104997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21951 comm="syz.7.12182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 963.911669][T21966] SELinux: failed to load policy [ 963.920822][T21970] 9pnet_fd: Insufficient options for proto=fd [ 964.084379][T21977] sd 0:0:1:0: device reset [ 964.123274][T21981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.132122][T21981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.139254][T21980] bond2: Unable to set down delay as MII monitoring is disabled [ 964.162088][T21980] bond2 (unregistering): Released all slaves [ 964.287129][T22060] lo speed is unknown, defaulting to 1000 [ 964.293612][T22060] lo speed is unknown, defaulting to 1000 [ 964.475075][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12190'. [ 965.063016][T22098] bond0: entered promiscuous mode [ 965.068134][T22098] bond_slave_0: entered promiscuous mode [ 965.073832][T22098] bond_slave_1: entered promiscuous mode [ 965.097511][T22098] dummy0: entered promiscuous mode [ 965.103144][T22098] debugfs: 'hsr1' already exists in 'hsr' [ 965.108893][T22098] Cannot create hsr debugfs directory [ 965.130153][T22098] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 965.139989][T22098] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 965.166948][T22098] hsr1: entered promiscuous mode [ 965.171903][T22098] hsr1: entered allmulticast mode [ 965.176955][T22098] bond0: entered allmulticast mode [ 965.182073][T22098] bond_slave_0: entered allmulticast mode [ 965.187866][T22098] bond_slave_1: entered allmulticast mode [ 965.220796][T22098] dummy0: entered allmulticast mode [ 965.229646][T22104] netlink: 'syz.2.12199': attribute type 2 has an invalid length. [ 965.237480][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12199'. [ 965.485461][T22117] bond1: Unable to set down delay as MII monitoring is disabled [ 965.501813][T22117] bond1 (unregistering): Released all slaves [ 965.914789][T22214] lo speed is unknown, defaulting to 1000 [ 965.935766][T22214] lo speed is unknown, defaulting to 1000 [ 966.009375][T22229] tipc: Started in network mode [ 966.014259][T22229] tipc: Node identity 6ef2abb50d77, cluster identity 4711 [ 966.021428][T22229] tipc: Enabled bearer , priority 0 [ 966.099004][T22229] tipc: Disabling bearer [ 966.288663][T22275] blktrace: Concurrent blktraces are not allowed on loop10 [ 966.393676][T22283] rdma_rxe: rxe_newlink: failed to add lo [ 966.474117][T22286] rdma_rxe: rxe_newlink: failed to add lo [ 966.724058][T22287] wireguard16: entered promiscuous mode [ 966.729732][T22287] wireguard16: entered allmulticast mode [ 967.079178][T22304] netlink: 'syz.7.12222': attribute type 21 has an invalid length. [ 967.390626][T22315] wireguard11: entered promiscuous mode [ 967.396223][T22315] wireguard11: entered allmulticast mode [ 967.745087][T22343] netlink: 'syz.7.12231': attribute type 4 has an invalid length. [ 967.753015][T22343] netlink: 152 bytes leftover after parsing attributes in process `syz.7.12231'. [ 967.768136][T22343] .`: renamed from bond0 [ 968.104603][T22368] sctp: [Deprecated]: syz.9.12236 (pid 22368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 968.104603][T22368] Use struct sctp_sack_info instead [ 968.239223][T22378] netlink: 'syz.8.12238': attribute type 21 has an invalid length. [ 968.417100][T22362] wireguard1: entered promiscuous mode [ 968.422595][T22362] wireguard1: entered allmulticast mode [ 968.430573][T22375] netlink: 'syz.2.12239': attribute type 5 has an invalid length. [ 968.833425][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 968.833452][ T29] audit: type=1326 audit(2000001004.107:105212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.865595][ T29] audit: type=1326 audit(2000001004.147:105213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.889397][ T29] audit: type=1326 audit(2000001004.147:105214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.913202][ T29] audit: type=1326 audit(2000001004.147:105215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.937099][ T29] audit: type=1326 audit(2000001004.147:105216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.960921][ T29] audit: type=1326 audit(2000001004.147:105217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 968.984663][ T29] audit: type=1326 audit(2000001004.147:105218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 969.008484][ T29] audit: type=1326 audit(2000001004.147:105219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 969.032154][ T29] audit: type=1326 audit(2000001004.147:105220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 969.055931][ T29] audit: type=1326 audit(2000001004.147:105221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.7.12246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 969.537490][T22453] netlink: 'syz.7.12252': attribute type 21 has an invalid length. [ 969.559773][T22459] bond1: Unable to set down delay as MII monitoring is disabled [ 969.571548][T22439] blktrace: Concurrent blktraces are not allowed on loop16 [ 969.583060][T22459] bond1 (unregistering): Released all slaves [ 969.623845][T22437] blktrace: Concurrent blktraces are not allowed on loop4 [ 969.707241][T22537] FAULT_INJECTION: forcing a failure. [ 969.707241][T22537] name failslab, interval 1, probability 0, space 0, times 0 [ 969.719945][T22537] CPU: 1 UID: 0 PID: 22537 Comm: syz.8.12258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 969.719987][T22537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 969.719998][T22537] Call Trace: [ 969.720060][T22537] [ 969.720066][T22537] __dump_stack+0x1d/0x30 [ 969.720087][T22537] dump_stack_lvl+0xe8/0x140 [ 969.720118][T22537] dump_stack+0x15/0x1b [ 969.720133][T22537] should_fail_ex+0x265/0x280 [ 969.720151][T22537] should_failslab+0x8c/0xb0 [ 969.720228][T22537] kmem_cache_alloc_noprof+0x50/0x480 [ 969.720280][T22537] ? audit_log_start+0x342/0x720 [ 969.720300][T22537] audit_log_start+0x342/0x720 [ 969.720318][T22537] ? kstrtouint+0x76/0xc0 [ 969.720345][T22537] audit_seccomp+0x48/0x100 [ 969.720419][T22537] ? __seccomp_filter+0x82d/0x1250 [ 969.720444][T22537] __seccomp_filter+0x83e/0x1250 [ 969.720471][T22537] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 969.720497][T22537] ? vfs_write+0x7e8/0x960 [ 969.720572][T22537] ? __rcu_read_unlock+0x4f/0x70 [ 969.720607][T22537] ? __fget_files+0x184/0x1c0 [ 969.720633][T22537] __secure_computing+0x82/0x150 [ 969.720706][T22537] syscall_trace_enter+0xcf/0x1e0 [ 969.720732][T22537] do_syscall_64+0xac/0x200 [ 969.720750][T22537] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 969.720773][T22537] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 969.720807][T22537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.720825][T22537] RIP: 0033:0x7f398eacefc9 [ 969.720839][T22537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 969.720854][T22537] RSP: 002b:00007f398d52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 969.720949][T22537] RAX: ffffffffffffffda RBX: 00007f398ed25fa0 RCX: 00007f398eacefc9 [ 969.721012][T22537] RDX: 0000000000000018 RSI: 0000000000000000 RDI: ffffffffffffffff [ 969.721031][T22537] RBP: 00007f398d52f090 R08: 0000000000000000 R09: 0000000000000000 [ 969.721043][T22537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 969.721057][T22537] R13: 00007f398ed26038 R14: 00007f398ed25fa0 R15: 00007ffc8d258be8 [ 969.721077][T22537] [ 969.956696][T22542] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 970.017153][T22542] SELinux: failed to load policy [ 970.091005][T22549] netlink: 'syz.2.12260': attribute type 5 has an invalid length. [ 970.482646][T22572] blktrace: Concurrent blktraces are not allowed on loop16 [ 970.579021][T22586] program syz.9.12271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 970.683356][T22590] netlink: 64 bytes leftover after parsing attributes in process `syz.7.12272'. [ 970.753249][T22604] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12274'. [ 970.923542][T22625] sctp: [Deprecated]: syz.5.12273 (pid 22625) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.923542][T22625] Use struct sctp_sack_info instead [ 971.060624][T22631] program syz.7.12279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.199226][T22635] netlink: 'syz.5.12280': attribute type 13 has an invalid length. [ 971.527475][T22639] blktrace: Concurrent blktraces are not allowed on loop18 [ 971.566138][T22648] netlink: 'syz.9.12284': attribute type 21 has an invalid length. [ 971.620700][T22652] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12285'. [ 972.042524][T22691] netlink: 'syz.9.12289': attribute type 21 has an invalid length. [ 972.297052][T22714] sd 0:0:1:0: device reset [ 972.327033][T22715] wireguard2: entered promiscuous mode [ 972.332519][T22715] wireguard2: entered allmulticast mode [ 972.636717][T22724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12296'. [ 972.648371][T22726] program syz.5.12297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 972.782168][T22744] lo speed is unknown, defaulting to 1000 [ 972.789254][T22744] lo speed is unknown, defaulting to 1000 [ 973.236723][T22727] blktrace: Concurrent blktraces are not allowed on loop16 [ 973.250072][T22771] netlink: 'syz.9.12301': attribute type 21 has an invalid length. [ 973.392692][T22792] sd 0:0:1:0: device reset [ 973.682802][T22821] wireguard1: entered promiscuous mode [ 973.688348][T22821] wireguard1: entered allmulticast mode [ 973.854216][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 973.854231][ T29] audit: type=1326 audit(2000001009.127:105383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22845 comm="syz.9.12314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 973.902552][ T29] audit: type=1326 audit(2000001009.157:105384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22845 comm="syz.9.12314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 973.926392][ T29] audit: type=1326 audit(2000001009.157:105385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22845 comm="syz.9.12314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 974.034006][T22850] blktrace: Concurrent blktraces are not allowed on loop18 [ 974.106676][T22866] sd 0:0:1:0: device reset [ 974.186437][T22872] bond1: Unable to set down delay as MII monitoring is disabled [ 974.197879][T22872] bond1 (unregistering): Released all slaves [ 974.282510][ T29] audit: type=1326 audit(2000001009.557:105386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.8.12325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 974.306390][ T29] audit: type=1326 audit(2000001009.557:105387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.8.12325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 974.330141][ T29] audit: type=1326 audit(2000001009.557:105388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.8.12325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 974.353989][ T29] audit: type=1326 audit(2000001009.557:105389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.8.12325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 974.415699][T22964] blktrace: Concurrent blktraces are not allowed on loop16 [ 974.512023][T22981] sd 0:0:1:0: device reset [ 974.625657][T22990] rdma_rxe: rxe_newlink: failed to add lo [ 974.693680][ T29] audit: type=1326 audit(2000001009.967:105390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.2.12337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 974.717617][ T29] audit: type=1326 audit(2000001009.967:105391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.2.12337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 974.747089][ T29] audit: type=1326 audit(2000001010.017:105392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22998 comm="syz.2.12337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 974.883811][T23015] lo speed is unknown, defaulting to 1000 [ 974.890855][T23015] lo speed is unknown, defaulting to 1000 [ 975.448700][T23013] blktrace: Concurrent blktraces are not allowed on loop4 [ 975.510144][T23049] blktrace: Concurrent blktraces are not allowed on loop14 [ 975.645284][T23057] SELinux: failed to load policy [ 975.666280][T23062] sctp: [Deprecated]: syz.5.12339 (pid 23062) Use of struct sctp_assoc_value in delayed_ack socket option. [ 975.666280][T23062] Use struct sctp_sack_info instead [ 975.850699][T23080] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12351'. [ 975.976328][T23091] blktrace: Concurrent blktraces are not allowed on loop18 [ 976.128727][T23096] rdma_rxe: rxe_newlink: failed to add lo [ 976.166170][T23098] hub 9-0:1.0: USB hub found [ 976.191778][T23098] hub 9-0:1.0: 8 ports detected [ 976.209638][T23100] blktrace: Concurrent blktraces are not allowed on loop16 [ 976.300668][T23099] lo speed is unknown, defaulting to 1000 [ 976.306667][T23099] lo speed is unknown, defaulting to 1000 [ 976.543576][T23147] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12364'. [ 976.755093][T23168] rdma_rxe: rxe_newlink: failed to add lo [ 977.119978][T23210] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12376'. [ 977.269973][T23226] netlink: 'syz.2.12377': attribute type 5 has an invalid length. [ 977.429272][T23247] program syz.9.12385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 977.439279][T23242] FAULT_INJECTION: forcing a failure. [ 977.439279][T23242] name failslab, interval 1, probability 0, space 0, times 0 [ 977.451990][T23242] CPU: 1 UID: 0 PID: 23242 Comm: syz.5.12382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 977.452019][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 977.452077][T23242] Call Trace: [ 977.452083][T23242] [ 977.452090][T23242] __dump_stack+0x1d/0x30 [ 977.452111][T23242] dump_stack_lvl+0xe8/0x140 [ 977.452199][T23242] dump_stack+0x15/0x1b [ 977.452219][T23242] should_fail_ex+0x265/0x280 [ 977.452241][T23242] should_failslab+0x8c/0xb0 [ 977.452315][T23242] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 977.452343][T23242] ? __alloc_skb+0x101/0x320 [ 977.452451][T23242] __alloc_skb+0x101/0x320 [ 977.452477][T23242] netlink_alloc_large_skb+0xbf/0xf0 [ 977.452559][T23242] netlink_sendmsg+0x3cf/0x6b0 [ 977.452582][T23242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.452604][T23242] __sock_sendmsg+0x145/0x180 [ 977.452740][T23242] ____sys_sendmsg+0x31e/0x4e0 [ 977.452780][T23242] ___sys_sendmsg+0x17b/0x1d0 [ 977.452812][T23242] __x64_sys_sendmsg+0xd4/0x160 [ 977.452832][T23242] x64_sys_call+0x191e/0x3000 [ 977.452878][T23242] do_syscall_64+0xd2/0x200 [ 977.452899][T23242] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 977.452928][T23242] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 977.452956][T23242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.452991][T23242] RIP: 0033:0x7fcda334efc9 [ 977.453008][T23242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.453028][T23242] RSP: 002b:00007fcda1db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.453045][T23242] RAX: ffffffffffffffda RBX: 00007fcda35a5fa0 RCX: 00007fcda334efc9 [ 977.453094][T23242] RDX: 0000000004008000 RSI: 0000200000000400 RDI: 0000000000000008 [ 977.453108][T23242] RBP: 00007fcda1db7090 R08: 0000000000000000 R09: 0000000000000000 [ 977.453122][T23242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.453134][T23242] R13: 00007fcda35a6038 R14: 00007fcda35a5fa0 R15: 00007ffce22f1458 [ 977.453161][T23242] [ 977.682360][T23248] rdma_rxe: rxe_newlink: failed to add lo [ 977.744860][T23251] lo speed is unknown, defaulting to 1000 [ 977.753134][T23251] lo speed is unknown, defaulting to 1000 [ 977.831916][T23259] program syz.7.12384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.022515][T23287] lo speed is unknown, defaulting to 1000 [ 978.028879][T23287] lo speed is unknown, defaulting to 1000 [ 978.182925][T23318] bond1: Unable to set down delay as MII monitoring is disabled [ 978.191163][T23318] bond1 (unregistering): Released all slaves [ 978.495444][T23403] SELinux: failed to load policy [ 979.021168][T23413] wireguard2: entered promiscuous mode [ 979.026658][T23413] wireguard2: entered allmulticast mode [ 979.331514][T23424] lo speed is unknown, defaulting to 1000 [ 979.362387][T23424] lo speed is unknown, defaulting to 1000 [ 979.948256][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 979.948269][ T29] audit: type=1326 audit(2000001015.227:105596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.021089][ T29] audit: type=1326 audit(2000001015.257:105597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.044907][ T29] audit: type=1326 audit(2000001015.257:105598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.068560][ T29] audit: type=1326 audit(2000001015.257:105599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.092333][ T29] audit: type=1326 audit(2000001015.257:105600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.116052][ T29] audit: type=1326 audit(2000001015.257:105601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.139854][ T29] audit: type=1326 audit(2000001015.257:105602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.163620][ T29] audit: type=1326 audit(2000001015.257:105603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.187455][ T29] audit: type=1326 audit(2000001015.257:105604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.211463][ T29] audit: type=1326 audit(2000001015.257:105605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23514 comm="syz.8.12407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 980.336769][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12410'. [ 980.417454][T23523] wireguard12: entered promiscuous mode [ 980.423099][T23523] wireguard12: entered allmulticast mode [ 980.648686][T23542] bond1: Unable to set down delay as MII monitoring is disabled [ 980.664264][T23542] bond1 (unregistering): Released all slaves [ 981.177353][T23612] SELinux: failed to load policy [ 981.279573][T23615] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 981.296903][T23615] SELinux: failed to load policy [ 981.373039][T23619] program syz.7.12418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 981.700317][T23611] syz.9.12415 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 981.714555][T23611] CPU: 1 UID: 0 PID: 23611 Comm: syz.9.12415 Not tainted syzkaller #0 PREEMPT(voluntary) [ 981.714651][T23611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 981.714665][T23611] Call Trace: [ 981.714714][T23611] [ 981.714722][T23611] __dump_stack+0x1d/0x30 [ 981.714748][T23611] dump_stack_lvl+0xe8/0x140 [ 981.714767][T23611] dump_stack+0x15/0x1b [ 981.714799][T23611] dump_header+0x81/0x220 [ 981.714817][T23611] oom_kill_process+0x342/0x400 [ 981.714859][T23611] out_of_memory+0x979/0xb80 [ 981.714891][T23611] try_charge_memcg+0x610/0xa10 [ 981.714934][T23611] obj_cgroup_charge_pages+0xa6/0x150 [ 981.714955][T23611] __memcg_kmem_charge_page+0x9f/0x170 [ 981.714980][T23611] __alloc_frozen_pages_noprof+0x188/0x360 [ 981.715007][T23611] alloc_pages_mpol+0xb3/0x260 [ 981.715030][T23611] ? alloc_pages_noprof+0x61/0x130 [ 981.715072][T23611] alloc_pages_noprof+0x90/0x130 [ 981.715116][T23611] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 981.715165][T23611] __kvmalloc_node_noprof+0x483/0x670 [ 981.715231][T23611] ? ip_set_alloc+0x24/0x30 [ 981.715262][T23611] ? ip_set_alloc+0x24/0x30 [ 981.715292][T23611] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 981.715329][T23611] ip_set_alloc+0x24/0x30 [ 981.715372][T23611] hash_netiface_create+0x282/0x740 [ 981.715436][T23611] ? __pfx_hash_netiface_create+0x10/0x10 [ 981.715488][T23611] ip_set_create+0x3cc/0x970 [ 981.715520][T23611] ? __nla_parse+0x40/0x60 [ 981.715594][T23611] nfnetlink_rcv_msg+0x4c6/0x590 [ 981.715641][T23611] netlink_rcv_skb+0x123/0x220 [ 981.715704][T23611] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 981.715739][T23611] nfnetlink_rcv+0x167/0x16c0 [ 981.715765][T23611] ? __free_frozen_pages+0x284/0x510 [ 981.715851][T23611] ? free_large_kmalloc+0xb1/0x100 [ 981.715885][T23611] ? bpf_check+0xc239/0xd9d0 [ 981.715978][T23611] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 981.716016][T23611] ? trace_event_reg+0xdc/0x170 [ 981.716046][T23611] ? perf_trace_add+0x176/0x1a0 [ 981.716144][T23611] ? event_sched_in+0x675/0x750 [ 981.716182][T23611] ? should_fail_ex+0x30/0x280 [ 981.716332][T23611] ? selinux_nlmsg_lookup+0x99/0x890 [ 981.716437][T23611] ? __rcu_read_unlock+0x34/0x70 [ 981.716471][T23611] netlink_unicast+0x5c0/0x690 [ 981.716575][T23611] netlink_sendmsg+0x58b/0x6b0 [ 981.716599][T23611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 981.716699][T23611] __sock_sendmsg+0x145/0x180 [ 981.716728][T23611] ____sys_sendmsg+0x31e/0x4e0 [ 981.716764][T23611] ___sys_sendmsg+0x17b/0x1d0 [ 981.716793][T23611] __x64_sys_sendmsg+0xd4/0x160 [ 981.716871][T23611] x64_sys_call+0x191e/0x3000 [ 981.716896][T23611] do_syscall_64+0xd2/0x200 [ 981.716914][T23611] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 981.716983][T23611] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 981.717019][T23611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.717105][T23611] RIP: 0033:0x7f7b9148efc9 [ 981.717120][T23611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.717139][T23611] RSP: 002b:00007f7b8fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.717198][T23611] RAX: ffffffffffffffda RBX: 00007f7b916e5fa0 RCX: 00007f7b9148efc9 [ 981.717213][T23611] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000b [ 981.717303][T23611] RBP: 00007f7b91511f91 R08: 0000000000000000 R09: 0000000000000000 [ 981.717315][T23611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.717329][T23611] R13: 00007f7b916e6038 R14: 00007f7b916e5fa0 R15: 00007fff6c2d39c8 [ 981.717364][T23611] [ 982.061787][T23611] memory: usage 307072kB, limit 307200kB, failcnt 1762 [ 982.068727][T23611] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 982.076642][T23611] kmem: usage 307044kB, limit 9007199254740988kB, failcnt 0 [ 982.083941][T23611] Memory cgroup stats for /syz9: [ 982.087521][T23611] cache 0 [ 982.095429][T23611] rss 28672 [ 982.098588][T23611] shmem 0 [ 982.101513][T23611] mapped_file 0 [ 982.105021][T23611] dirty 0 [ 982.107999][T23611] writeback 0 [ 982.111274][T23611] workingset_refault_anon 6072 [ 982.116029][T23611] workingset_refault_file 85 [ 982.120666][T23611] swap 446464 [ 982.123942][T23611] swapcached 53248 [ 982.127710][T23611] pgpgin 1342127 [ 982.131247][T23611] pgpgout 1342113 [ 982.134863][T23611] pgfault 1076299 [ 982.138581][T23611] pgmajfault 1097 [ 982.142208][T23611] inactive_anon 0 [ 982.145846][T23611] active_anon 57344 [ 982.149652][T23611] inactive_file 0 [ 982.153278][T23611] active_file 0 [ 982.156725][T23611] unevictable 0 [ 982.160215][T23611] hierarchical_memory_limit 314572800 [ 982.165580][T23611] hierarchical_memsw_limit 9223372036854771712 [ 982.171737][T23611] total_cache 0 [ 982.175184][T23611] total_rss 28672 [ 982.178864][T23611] total_shmem 0 [ 982.182312][T23611] total_mapped_file 0 [ 982.186281][T23611] total_dirty 0 [ 982.189805][T23611] total_writeback 0 [ 982.193610][T23611] total_workingset_refault_anon 6072 [ 982.198900][T23611] total_workingset_refault_file 85 [ 982.204008][T23611] total_swap 446464 [ 982.207841][T23611] total_swapcached 53248 [ 982.212079][T23611] total_pgpgin 1342127 [ 982.216317][T23611] total_pgpgout 1342113 [ 982.220562][T23611] total_pgfault 1076299 [ 982.224748][T23611] total_pgmajfault 1097 [ 982.228930][T23611] total_inactive_anon 0 [ 982.233108][T23611] total_active_anon 57344 [ 982.237452][T23611] total_inactive_file 0 [ 982.241618][T23611] total_active_file 0 [ 982.245599][T23611] total_unevictable 0 [ 982.249617][T23611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.12415,pid=23610,uid=0 [ 982.264448][T23611] Memory cgroup out of memory: Killed process 23610 (syz.9.12415) total-vm:93956kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 982.282362][T23656] wireguard17: entered promiscuous mode [ 982.287975][T23656] wireguard17: entered allmulticast mode [ 982.340482][T23662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12422'. [ 982.601992][T23680] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12429'. [ 982.625616][T23691] program syz.9.12432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 982.647507][T23693] sd 0:0:1:0: device reset [ 982.667022][T23672] wireguard3: entered promiscuous mode [ 982.672506][T23672] wireguard3: entered allmulticast mode [ 982.803171][T23714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12437'. [ 983.316185][T23731] blktrace: Concurrent blktraces are not allowed on loop4 [ 983.510886][T23746] netlink: 'syz.7.12444': attribute type 5 has an invalid length. [ 983.616226][T23744] SELinux: failed to load policy [ 983.737139][T23754] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12448'. [ 983.978606][T23781] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12454'. [ 984.097874][T23793] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12455'. [ 984.119886][T23790] wireguard13: entered promiscuous mode [ 984.125455][T23790] wireguard13: entered allmulticast mode [ 984.160261][T23738] syz.2.12443 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 984.174450][T23738] CPU: 1 UID: 0 PID: 23738 Comm: syz.2.12443 Not tainted syzkaller #0 PREEMPT(voluntary) [ 984.174535][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 984.174549][T23738] Call Trace: [ 984.174554][T23738] [ 984.174561][T23738] __dump_stack+0x1d/0x30 [ 984.174583][T23738] dump_stack_lvl+0xe8/0x140 [ 984.174602][T23738] dump_stack+0x15/0x1b [ 984.174717][T23738] dump_header+0x81/0x220 [ 984.174734][T23738] oom_kill_process+0x342/0x400 [ 984.174770][T23738] out_of_memory+0x979/0xb80 [ 984.174807][T23738] try_charge_memcg+0x610/0xa10 [ 984.174850][T23738] obj_cgroup_charge_pages+0xa6/0x150 [ 984.174872][T23738] __memcg_kmem_charge_page+0x9f/0x170 [ 984.174908][T23738] __alloc_frozen_pages_noprof+0x188/0x360 [ 984.174966][T23738] alloc_pages_mpol+0xb3/0x260 [ 984.174985][T23738] ? alloc_pages_noprof+0xf4/0x130 [ 984.175006][T23738] alloc_pages_noprof+0x90/0x130 [ 984.175029][T23738] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 984.175071][T23738] __kvmalloc_node_noprof+0x483/0x670 [ 984.175176][T23738] ? ip_set_alloc+0x24/0x30 [ 984.175208][T23738] ? ip_set_alloc+0x24/0x30 [ 984.175313][T23738] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 984.175350][T23738] ip_set_alloc+0x24/0x30 [ 984.175432][T23738] hash_netiface_create+0x282/0x740 [ 984.175467][T23738] ? __pfx_hash_netiface_create+0x10/0x10 [ 984.175504][T23738] ip_set_create+0x3cc/0x970 [ 984.175544][T23738] ? __nla_parse+0x40/0x60 [ 984.175629][T23738] nfnetlink_rcv_msg+0x4c6/0x590 [ 984.175682][T23738] netlink_rcv_skb+0x123/0x220 [ 984.175784][T23738] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 984.175880][T23738] nfnetlink_rcv+0x167/0x16c0 [ 984.175919][T23738] ? bpf_check+0xc239/0xd9d0 [ 984.176002][T23738] ? __list_add_valid_or_report+0x38/0xe0 [ 984.176070][T23738] ? merge_sched_in+0x605/0xa30 [ 984.176101][T23738] ? rb_next+0x5c/0x80 [ 984.176144][T23738] ? visit_groups_merge+0xf7e/0xfd0 [ 984.176184][T23738] ? should_fail_ex+0x30/0x280 [ 984.176257][T23738] ? selinux_nlmsg_lookup+0x99/0x890 [ 984.176285][T23738] ? __rcu_read_unlock+0x34/0x70 [ 984.176315][T23738] ? __netlink_lookup+0x266/0x2a0 [ 984.176400][T23738] netlink_unicast+0x5c0/0x690 [ 984.176559][T23738] netlink_sendmsg+0x58b/0x6b0 [ 984.176613][T23738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.176632][T23738] __sock_sendmsg+0x145/0x180 [ 984.176662][T23738] ____sys_sendmsg+0x31e/0x4e0 [ 984.176753][T23738] ___sys_sendmsg+0x17b/0x1d0 [ 984.176810][T23738] __x64_sys_sendmsg+0xd4/0x160 [ 984.176835][T23738] x64_sys_call+0x191e/0x3000 [ 984.176879][T23738] do_syscall_64+0xd2/0x200 [ 984.176909][T23738] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 984.177041][T23738] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 984.177074][T23738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.177097][T23738] RIP: 0033:0x7fd9e10cefc9 [ 984.177111][T23738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.177128][T23738] RSP: 002b:00007fd9dfb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.177151][T23738] RAX: ffffffffffffffda RBX: 00007fd9e1325fa0 RCX: 00007fd9e10cefc9 [ 984.177239][T23738] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000b [ 984.177254][T23738] RBP: 00007fd9e1151f91 R08: 0000000000000000 R09: 0000000000000000 [ 984.177268][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.177314][T23738] R13: 00007fd9e1326038 R14: 00007fd9e1325fa0 R15: 00007fffecddfe68 [ 984.177334][T23738] [ 984.515320][T23738] memory: usage 307200kB, limit 307200kB, failcnt 5150 [ 984.522218][T23738] memory+swap: usage 307852kB, limit 9007199254740988kB, failcnt 0 [ 984.530126][T23738] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 984.537479][T23738] Memory cgroup stats for /syz2: [ 984.537941][T23738] cache 0 [ 984.545782][T23738] rss 0 [ 984.548558][T23738] shmem 0 [ 984.551513][T23738] mapped_file 0 [ 984.554991][T23738] dirty 0 [ 984.557935][T23738] writeback 0 [ 984.561245][T23738] workingset_refault_anon 3366 [ 984.566083][T23738] workingset_refault_file 27388 [ 984.571001][T23738] swap 667648 [ 984.574288][T23738] swapcached 8192 [ 984.577934][T23738] pgpgin 1630327 [ 984.581470][T23738] pgpgout 1630325 [ 984.585134][T23738] pgfault 1273685 [ 984.588879][T23738] pgmajfault 1063 [ 984.592504][T23738] inactive_anon 8192 [ 984.596385][T23738] active_anon 0 [ 984.599866][T23738] inactive_file 0 [ 984.603485][T23738] active_file 0 [ 984.606958][T23738] unevictable 0 [ 984.610404][T23738] hierarchical_memory_limit 314572800 [ 984.615859][T23738] hierarchical_memsw_limit 9223372036854771712 [ 984.622020][T23738] total_cache 0 [ 984.625466][T23738] total_rss 0 [ 984.628750][T23738] total_shmem 0 [ 984.632189][T23738] total_mapped_file 0 [ 984.636180][T23738] total_dirty 0 [ 984.639635][T23738] total_writeback 0 [ 984.643476][T23738] total_workingset_refault_anon 3366 [ 984.648762][T23738] total_workingset_refault_file 27388 [ 984.654175][T23738] total_swap 667648 [ 984.657994][T23738] total_swapcached 8192 [ 984.662129][T23738] total_pgpgin 1630485 [ 984.666176][T23738] total_pgpgout 1630483 [ 984.670336][T23738] total_pgfault 1273890 [ 984.674461][T23738] total_pgmajfault 1063 [ 984.678672][T23738] total_inactive_anon 8192 [ 984.683056][T23738] total_active_anon 0 [ 984.687071][T23738] total_inactive_file 0 [ 984.691226][T23738] total_active_file 0 [ 984.695178][T23738] total_unevictable 0 [ 984.699142][T23738] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.12443,pid=23736,uid=0 [ 984.713845][T23738] Memory cgroup out of memory: Killed process 23736 (syz.2.12443) total-vm:93956kB, anon-rss:1132kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 984.828217][T23805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12459'. [ 984.842232][T23807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12460'. [ 984.852665][T23807] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.866743][T23807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.882173][T23807] bridge0: port 3(batadv0) entered disabled state [ 985.057493][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 985.057508][ T29] audit: type=1326 audit(2000001020.327:105723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.2.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 985.126348][T23828] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12467'. [ 985.138367][T23830] netlink: 'syz.2.12468': attribute type 21 has an invalid length. [ 985.176747][ T29] audit: type=1326 audit(2000001020.377:105724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.2.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 985.178280][T23831] lo speed is unknown, defaulting to 1000 [ 985.200529][ T29] audit: type=1326 audit(2000001020.377:105725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.2.12466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 985.387187][T23831] lo speed is unknown, defaulting to 1000 [ 985.626378][T23842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12471'. [ 985.635551][T23843] netlink: 'syz.2.12470': attribute type 21 has an invalid length. [ 985.670297][T23848] program syz.9.12473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 985.821157][T23889] netlink: 'syz.7.12480': attribute type 1 has an invalid length. [ 985.909165][T23930] FAULT_INJECTION: forcing a failure. [ 985.909165][T23930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.919958][T23845] sctp: [Deprecated]: syz.5.12472 (pid 23845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 985.919958][T23845] Use struct sctp_sack_info instead [ 985.922367][T23930] CPU: 0 UID: 0 PID: 23930 Comm: syz.8.12483 Not tainted syzkaller #0 PREEMPT(voluntary) [ 985.922462][T23930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 985.922500][T23930] Call Trace: [ 985.922507][T23930] [ 985.922514][T23930] __dump_stack+0x1d/0x30 [ 985.922537][T23930] dump_stack_lvl+0xe8/0x140 [ 985.922628][T23930] dump_stack+0x15/0x1b [ 985.922647][T23930] should_fail_ex+0x265/0x280 [ 985.922668][T23930] should_fail+0xb/0x20 [ 985.922685][T23930] should_fail_usercopy+0x1a/0x20 [ 985.922752][T23930] _copy_from_iter+0xd2/0xe80 [ 985.922775][T23930] ? __build_skb_around+0x1ab/0x200 [ 985.922807][T23930] ? __alloc_skb+0x223/0x320 [ 985.922878][T23930] netlink_sendmsg+0x471/0x6b0 [ 985.922901][T23930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.922921][T23930] __sock_sendmsg+0x145/0x180 [ 985.922947][T23930] ____sys_sendmsg+0x31e/0x4e0 [ 985.923021][T23930] ___sys_sendmsg+0x17b/0x1d0 [ 985.923052][T23930] __x64_sys_sendmsg+0xd4/0x160 [ 985.923075][T23930] x64_sys_call+0x191e/0x3000 [ 985.923099][T23930] do_syscall_64+0xd2/0x200 [ 985.923154][T23930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 985.923184][T23930] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 985.923218][T23930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.923313][T23930] RIP: 0033:0x7f398eacefc9 [ 985.923408][T23930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.923427][T23930] RSP: 002b:00007f398d52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.923447][T23930] RAX: ffffffffffffffda RBX: 00007f398ed25fa0 RCX: 00007f398eacefc9 [ 985.923460][T23930] RDX: 0000000000008814 RSI: 0000200000005840 RDI: 0000000000000003 [ 985.923474][T23930] RBP: 00007f398d52f090 R08: 0000000000000000 R09: 0000000000000000 [ 985.923492][T23930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.923505][T23930] R13: 00007f398ed26038 R14: 00007f398ed25fa0 R15: 00007ffc8d258be8 [ 985.923551][T23930] [ 985.964968][T23892] bond1: Unable to set down delay as MII monitoring is disabled [ 986.058686][T23974] program syz.7.12487 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 986.156198][T23892] bond1 (unregistering): Released all slaves [ 986.202730][ T29] audit: type=1326 audit(2000001021.477:105726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.5.12488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x0 [ 986.369340][ T29] audit: type=1326 audit(2000001021.647:105727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.5.12488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 986.393142][ T29] audit: type=1326 audit(2000001021.647:105728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24015 comm="syz.5.12488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcda334efc9 code=0x7ffc0000 [ 986.448827][ T29] audit: type=1326 audit(2000001021.707:105729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.8.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 986.472681][ T29] audit: type=1326 audit(2000001021.707:105730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.8.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 986.478416][T24031] lo speed is unknown, defaulting to 1000 [ 986.496481][ T29] audit: type=1326 audit(2000001021.707:105731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.8.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 986.525933][ T29] audit: type=1326 audit(2000001021.707:105732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24028 comm="syz.8.12493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 986.537563][T24031] lo speed is unknown, defaulting to 1000 [ 986.553984][T24034] sd 0:0:1:0: device reset [ 986.898924][T24069] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 986.920543][T24069] SELinux: failed to load policy [ 986.961638][T24068] blktrace: Concurrent blktraces are not allowed on loop4 [ 987.001711][T24076] program syz.2.12501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.128312][T24079] sctp: [Deprecated]: syz.8.12499 (pid 24079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 987.128312][T24079] Use struct sctp_sack_info instead [ 987.325786][T24086] rdma_rxe: rxe_newlink: failed to add lo [ 987.523073][T24099] netlink: 'syz.8.12507': attribute type 21 has an invalid length. [ 987.552905][T24103] sd 0:0:1:0: device reset [ 987.582228][T24105] __nla_validate_parse: 6 callbacks suppressed [ 987.582243][T24105] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12509'. [ 987.795666][T24111] blktrace: Concurrent blktraces are not allowed on loop16 [ 987.845658][T24125] blktrace: Concurrent blktraces are not allowed on loop18 [ 988.071594][T24151] rdma_rxe: rxe_newlink: failed to add lo [ 988.212105][T24156] program syz.5.12520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 988.285143][T24157] lo speed is unknown, defaulting to 1000 [ 988.334977][T24157] lo speed is unknown, defaulting to 1000 [ 988.423204][T24166] netlink: 'syz.5.12521': attribute type 5 has an invalid length. [ 988.524301][T24167] SELinux: failed to load policy [ 989.305193][T24198] program syz.7.12523 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 989.604061][T24201] blktrace: Concurrent blktraces are not allowed on loop16 [ 989.700264][T24210] rdma_rxe: rxe_newlink: failed to add lo [ 989.827212][T24214] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 989.861429][T24214] SELinux: failed to load policy [ 990.196845][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 990.196862][ T29] audit: type=1326 audit(2000001025.467:105839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.7.12530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 990.226919][ T29] audit: type=1326 audit(2000001025.467:105840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.7.12530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 990.250844][ T29] audit: type=1326 audit(2000001025.467:105841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.7.12530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 990.274597][ T29] audit: type=1326 audit(2000001025.467:105842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24217 comm="syz.7.12530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 990.316046][T24220] program syz.7.12531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.496831][T24239] rdma_rxe: rxe_newlink: failed to add lo [ 991.263712][T24276] SELinux: failed to load policy [ 991.277892][T24286] netlink: 'syz.7.12540': attribute type 16 has an invalid length. [ 991.285811][T24286] netlink: 'syz.7.12540': attribute type 17 has an invalid length. [ 991.348695][T24286] 8021q: adding VLAN 0 to HW filter on device .` [ 991.419422][T24286] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.491458][T24286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 991.544291][ T29] audit: type=1326 audit(2000001026.817:105843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.2.12542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 991.568045][ T29] audit: type=1326 audit(2000001026.817:105844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.2.12542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 991.646855][ T29] audit: type=1326 audit(2000001026.877:105845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.2.12542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 991.670656][ T29] audit: type=1326 audit(2000001026.877:105846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24305 comm="syz.2.12542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 991.738759][T24319] bond2: Unable to set down delay as MII monitoring is disabled [ 991.757341][T24319] bond2 (unregistering): Released all slaves [ 992.351294][T24450] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 992.373173][T24450] SELinux: failed to load policy [ 992.533337][T24465] lo speed is unknown, defaulting to 1000 [ 992.576366][T24465] lo speed is unknown, defaulting to 1000 [ 992.678898][T24484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.700776][T24484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.121063][T24565] program syz.8.12560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 993.193263][T24569] wireguard2: entered promiscuous mode [ 993.198774][T24569] wireguard2: entered allmulticast mode [ 993.575407][T24595] blktrace: Concurrent blktraces are not allowed on loop16 [ 993.837913][T24630] netlink: 'syz.5.12572': attribute type 21 has an invalid length. [ 993.994623][T24654] FAULT_INJECTION: forcing a failure. [ 993.994623][T24654] name failslab, interval 1, probability 0, space 0, times 0 [ 994.002431][T24638] lo speed is unknown, defaulting to 1000 [ 994.007322][T24654] CPU: 0 UID: 0 PID: 24654 Comm: syz.7.12575 Not tainted syzkaller #0 PREEMPT(voluntary) [ 994.007358][T24654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 994.007372][T24654] Call Trace: [ 994.007379][T24654] [ 994.007386][T24654] __dump_stack+0x1d/0x30 [ 994.007409][T24654] dump_stack_lvl+0xe8/0x140 [ 994.007502][T24654] dump_stack+0x15/0x1b [ 994.007521][T24654] should_fail_ex+0x265/0x280 [ 994.007542][T24654] should_failslab+0x8c/0xb0 [ 994.007624][T24654] kmem_cache_alloc_noprof+0x50/0x480 [ 994.007654][T24654] ? getname_flags+0x80/0x3b0 [ 994.007722][T24654] getname_flags+0x80/0x3b0 [ 994.007785][T24654] user_path_at+0x28/0x130 [ 994.007821][T24654] __se_sys_quotactl+0xb6/0x670 [ 994.007850][T24654] __x64_sys_quotactl+0x55/0x70 [ 994.007875][T24654] x64_sys_call+0x15d6/0x3000 [ 994.007927][T24654] do_syscall_64+0xd2/0x200 [ 994.007947][T24654] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 994.008003][T24654] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 994.008036][T24654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.008059][T24654] RIP: 0033:0x7f884602efc9 [ 994.008074][T24654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.008151][T24654] RSP: 002b:00007f8844a97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 994.008209][T24654] RAX: ffffffffffffffda RBX: 00007f8846285fa0 RCX: 00007f884602efc9 [ 994.008222][T24654] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffff80000201 [ 994.008304][T24654] RBP: 00007f8844a97090 R08: 0000000000000000 R09: 0000000000000000 [ 994.008317][T24654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.008330][T24654] R13: 00007f8846286038 R14: 00007f8846285fa0 R15: 00007fffc56887b8 [ 994.008350][T24654] [ 994.194049][T24638] lo speed is unknown, defaulting to 1000 [ 994.437588][ T29] audit: type=1326 audit(2000001029.717:105847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.2.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 994.461451][ T29] audit: type=1326 audit(2000001029.717:105848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24713 comm="syz.2.12578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd9e10cefc9 code=0x7ffc0000 [ 994.506554][T24720] lo speed is unknown, defaulting to 1000 [ 994.512564][T24720] lo speed is unknown, defaulting to 1000 [ 994.567717][T24731] netlink: 'syz.2.12578': attribute type 5 has an invalid length. [ 994.593549][T24728] syzkaller1: entered promiscuous mode [ 994.599206][T24728] syzkaller1: entered allmulticast mode [ 994.621709][T24754] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12585'. [ 994.828367][T24773] netlink: 'syz.5.12588': attribute type 13 has an invalid length. [ 995.302398][T24809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12596'. [ 995.322016][T24811] lo speed is unknown, defaulting to 1000 [ 995.328259][T24811] lo speed is unknown, defaulting to 1000 [ 995.468383][T24841] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12601'. [ 995.539367][T24845] rdma_rxe: rxe_newlink: failed to add lo [ 995.699252][T24858] FAULT_INJECTION: forcing a failure. [ 995.699252][T24858] name failslab, interval 1, probability 0, space 0, times 0 [ 995.711917][T24858] CPU: 1 UID: 0 PID: 24858 Comm: syz.7.12602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 995.712017][T24858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 995.712032][T24858] Call Trace: [ 995.712039][T24858] [ 995.712047][T24858] __dump_stack+0x1d/0x30 [ 995.712072][T24858] dump_stack_lvl+0xe8/0x140 [ 995.712093][T24858] dump_stack+0x15/0x1b [ 995.712173][T24858] should_fail_ex+0x265/0x280 [ 995.712195][T24858] should_failslab+0x8c/0xb0 [ 995.712226][T24858] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 995.712266][T24858] ? __alloc_skb+0x101/0x320 [ 995.712364][T24858] __alloc_skb+0x101/0x320 [ 995.712466][T24858] netlink_alloc_large_skb+0xbf/0xf0 [ 995.712501][T24858] netlink_sendmsg+0x3cf/0x6b0 [ 995.712524][T24858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 995.712591][T24858] __sock_sendmsg+0x145/0x180 [ 995.712670][T24858] ____sys_sendmsg+0x31e/0x4e0 [ 995.712708][T24858] ___sys_sendmsg+0x17b/0x1d0 [ 995.712753][T24858] __x64_sys_sendmsg+0xd4/0x160 [ 995.712825][T24858] x64_sys_call+0x191e/0x3000 [ 995.712851][T24858] do_syscall_64+0xd2/0x200 [ 995.712869][T24858] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 995.712938][T24858] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 995.712974][T24858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.712995][T24858] RIP: 0033:0x7f884602efc9 [ 995.713011][T24858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.713074][T24858] RSP: 002b:00007f8844a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.713096][T24858] RAX: ffffffffffffffda RBX: 00007f8846285fa0 RCX: 00007f884602efc9 [ 995.713110][T24858] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 995.713124][T24858] RBP: 00007f8844a97090 R08: 0000000000000000 R09: 0000000000000000 [ 995.713209][T24858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.713223][T24858] R13: 00007f8846286038 R14: 00007f8846285fa0 R15: 00007fffc56887b8 [ 995.713244][T24858] [ 995.975437][T24872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12609'. [ 996.022163][T24881] netlink: 'syz.9.12612': attribute type 21 has an invalid length. [ 996.177555][T24889] lo speed is unknown, defaulting to 1000 [ 996.203812][T24889] lo speed is unknown, defaulting to 1000 [ 996.234888][T24908] program syz.8.12616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.469585][T24911] lo speed is unknown, defaulting to 1000 [ 996.511481][T24911] lo speed is unknown, defaulting to 1000 [ 996.950751][T24961] FAULT_INJECTION: forcing a failure. [ 996.950751][T24961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.963822][T24961] CPU: 1 UID: 0 PID: 24961 Comm: syz.2.12619 Not tainted syzkaller #0 PREEMPT(voluntary) [ 996.963852][T24961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 996.963864][T24961] Call Trace: [ 996.963871][T24961] [ 996.963877][T24961] __dump_stack+0x1d/0x30 [ 996.963898][T24961] dump_stack_lvl+0xe8/0x140 [ 996.963918][T24961] dump_stack+0x15/0x1b [ 996.963935][T24961] should_fail_ex+0x265/0x280 [ 996.963955][T24961] should_fail+0xb/0x20 [ 996.963973][T24961] should_fail_usercopy+0x1a/0x20 [ 996.964051][T24961] _copy_from_user+0x1c/0xb0 [ 996.964080][T24961] memdup_user+0x5e/0xd0 [ 996.964108][T24961] strndup_user+0x68/0xb0 [ 996.964168][T24961] __se_sys_mount+0x4d/0x2e0 [ 996.964197][T24961] ? fput+0x8f/0xc0 [ 996.964216][T24961] ? ksys_write+0x192/0x1a0 [ 996.964311][T24961] __x64_sys_mount+0x67/0x80 [ 996.964340][T24961] x64_sys_call+0x2b51/0x3000 [ 996.964364][T24961] do_syscall_64+0xd2/0x200 [ 996.964459][T24961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 996.964489][T24961] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 996.964518][T24961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.964570][T24961] RIP: 0033:0x7fd9e10cefc9 [ 996.964586][T24961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.964643][T24961] RSP: 002b:00007fd9dfb37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 996.964664][T24961] RAX: ffffffffffffffda RBX: 00007fd9e1325fa0 RCX: 00007fd9e10cefc9 [ 996.964688][T24961] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 996.964699][T24961] RBP: 00007fd9dfb37090 R08: 0000200000000180 R09: 0000000000000000 [ 996.964711][T24961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.964725][T24961] R13: 00007fd9e1326038 R14: 00007fd9e1325fa0 R15: 00007fffecddfe68 [ 996.964746][T24961] [ 997.174227][T24966] sctp: [Deprecated]: syz.8.12617 (pid 24966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 997.174227][T24966] Use struct sctp_sack_info instead [ 997.230219][T24968] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12620'. [ 997.347044][T24981] netlink: 24 bytes leftover after parsing attributes in process `syz.9.12623'. [ 997.394617][T24984] netlink: 'syz.9.12624': attribute type 21 has an invalid length. [ 997.522008][T24998] program syz.8.12627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.754883][T25015] blktrace: Concurrent blktraces are not allowed on loop18 [ 997.787130][T25038] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12635'. [ 997.838895][T25061] program syz.7.12639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 998.042964][T25075] SELinux: failed to load policy [ 998.090871][T25087] FAULT_INJECTION: forcing a failure. [ 998.090871][T25087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.104047][T25087] CPU: 1 UID: 0 PID: 25087 Comm: syz.9.12644 Not tainted syzkaller #0 PREEMPT(voluntary) [ 998.104083][T25087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 998.104097][T25087] Call Trace: [ 998.104104][T25087] [ 998.104112][T25087] __dump_stack+0x1d/0x30 [ 998.104137][T25087] dump_stack_lvl+0xe8/0x140 [ 998.104212][T25087] dump_stack+0x15/0x1b [ 998.104232][T25087] should_fail_ex+0x265/0x280 [ 998.104255][T25087] should_fail+0xb/0x20 [ 998.104273][T25087] should_fail_usercopy+0x1a/0x20 [ 998.104296][T25087] _copy_from_user+0x1c/0xb0 [ 998.104327][T25087] ___sys_sendmsg+0xc1/0x1d0 [ 998.104362][T25087] __x64_sys_sendmsg+0xd4/0x160 [ 998.104388][T25087] x64_sys_call+0x191e/0x3000 [ 998.104414][T25087] do_syscall_64+0xd2/0x200 [ 998.104499][T25087] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 998.104544][T25087] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 998.104652][T25087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.104675][T25087] RIP: 0033:0x7f7b9148efc9 [ 998.104692][T25087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.104712][T25087] RSP: 002b:00007f7b8fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.104759][T25087] RAX: ffffffffffffffda RBX: 00007f7b916e5fa0 RCX: 00007f7b9148efc9 [ 998.104828][T25087] RDX: 0000000020004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 998.104840][T25087] RBP: 00007f7b8fef7090 R08: 0000000000000000 R09: 0000000000000000 [ 998.104854][T25087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.104867][T25087] R13: 00007f7b916e6038 R14: 00007f7b916e5fa0 R15: 00007fff6c2d39c8 [ 998.104888][T25087] [ 998.171043][T25093] sctp: [Deprecated]: syz.2.12637 (pid 25093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.171043][T25093] Use struct sctp_sack_info instead [ 998.361514][T25078] sctp: [Deprecated]: syz.8.12642 (pid 25078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 998.361514][T25078] Use struct sctp_sack_info instead [ 998.770581][T25104] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 998.796693][T25104] SELinux: failed to load policy [ 999.095790][T25108] blktrace: Concurrent blktraces are not allowed on loop4 [ 999.234398][T25132] FAULT_INJECTION: forcing a failure. [ 999.234398][T25132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.247535][T25132] CPU: 0 UID: 0 PID: 25132 Comm: syz.5.12656 Not tainted syzkaller #0 PREEMPT(voluntary) [ 999.247599][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 999.247613][T25132] Call Trace: [ 999.247620][T25132] [ 999.247626][T25132] __dump_stack+0x1d/0x30 [ 999.247647][T25132] dump_stack_lvl+0xe8/0x140 [ 999.247732][T25132] dump_stack+0x15/0x1b [ 999.247752][T25132] should_fail_ex+0x265/0x280 [ 999.247775][T25132] should_fail+0xb/0x20 [ 999.247793][T25132] should_fail_usercopy+0x1a/0x20 [ 999.247815][T25132] _copy_from_iter+0xd2/0xe80 [ 999.247915][T25132] ? __build_skb_around+0x1ab/0x200 [ 999.247947][T25132] ? __alloc_skb+0x223/0x320 [ 999.247975][T25132] netlink_sendmsg+0x471/0x6b0 [ 999.248043][T25132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 999.248061][T25132] __sock_sendmsg+0x145/0x180 [ 999.248085][T25132] ____sys_sendmsg+0x31e/0x4e0 [ 999.248185][T25132] ___sys_sendmsg+0x17b/0x1d0 [ 999.248257][T25132] __x64_sys_sendmsg+0xd4/0x160 [ 999.248280][T25132] x64_sys_call+0x191e/0x3000 [ 999.248304][T25132] do_syscall_64+0xd2/0x200 [ 999.248326][T25132] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 999.248353][T25132] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 999.248427][T25132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.248451][T25132] RIP: 0033:0x7fcda334efc9 [ 999.248467][T25132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.248510][T25132] RSP: 002b:00007fcda1db7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.248584][T25132] RAX: ffffffffffffffda RBX: 00007fcda35a5fa0 RCX: 00007fcda334efc9 [ 999.248599][T25132] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 999.248613][T25132] RBP: 00007fcda1db7090 R08: 0000000000000000 R09: 0000000000000000 [ 999.248624][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.248703][T25132] R13: 00007fcda35a6038 R14: 00007fcda35a5fa0 R15: 00007ffce22f1458 [ 999.248730][T25132] [ 999.480770][T25139] program syz.9.12657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.516339][T25144] rdma_rxe: rxe_newlink: failed to add lo [ 999.705354][T25165] sctp: [Deprecated]: syz.5.12658 (pid 25165) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.705354][T25165] Use struct sctp_sack_info instead [ 999.834883][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 999.834898][ T29] audit: type=1400 audit(2000001035.107:105875): avc: denied { connect } for pid=25173 comm="syz.2.12664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 999.922837][T25179] sctp: [Deprecated]: syz.7.12659 (pid 25179) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.922837][T25179] Use struct sctp_sack_info instead [ 999.983624][T25178] blktrace: Concurrent blktraces are not allowed on loop4 [ 1000.012723][T25185] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12666'. [ 1000.062940][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12668'. [ 1000.078987][T25189] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12668'. [ 1000.089343][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12669'. [ 1000.137688][T25195] netlink: 'syz.5.12671': attribute type 21 has an invalid length. [ 1000.178078][T25197] netlink: 96 bytes leftover after parsing attributes in process `syz.8.12672'. [ 1000.242948][T25208] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12675'. [ 1000.301443][T25220] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12679'. [ 1000.345527][ T29] audit: type=1326 audit(2000001035.617:105876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25225 comm="syz.7.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 1000.369402][ T29] audit: type=1326 audit(2000001035.617:105877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25225 comm="syz.7.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 1000.410561][ T29] audit: type=1326 audit(2000001035.617:105878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25225 comm="syz.7.12681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f884602efc9 code=0x7ffc0000 [ 1000.434407][ T29] audit: type=1326 audit(2000001035.617:105879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25225 comm="syz.7.12681" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x0 [ 1000.472281][T25237] netlink: 'syz.8.12684': attribute type 21 has an invalid length. [ 1000.472578][T25234] netlink: 'syz.7.12681': attribute type 5 has an invalid length. [ 1000.510594][T25212] blktrace: Concurrent blktraces are not allowed on loop10 [ 1000.560442][T25247] sctp: [Deprecated]: syz.9.12682 (pid 25247) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1000.560442][T25247] Use struct sctp_sack_info instead [ 1000.563629][T25248] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12685'. [ 1000.585930][T25248] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12685'. [ 1000.594986][T25248] netlink: 36 bytes leftover after parsing attributes in process `syz.8.12685'. [ 1000.637228][T25248] FAULT_INJECTION: forcing a failure. [ 1000.637228][T25248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.650360][T25248] CPU: 0 UID: 0 PID: 25248 Comm: syz.8.12685 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1000.650388][T25248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1000.650400][T25248] Call Trace: [ 1000.650405][T25248] [ 1000.650412][T25248] __dump_stack+0x1d/0x30 [ 1000.650433][T25248] dump_stack_lvl+0xe8/0x140 [ 1000.650452][T25248] dump_stack+0x15/0x1b [ 1000.650472][T25248] should_fail_ex+0x265/0x280 [ 1000.650524][T25248] should_fail+0xb/0x20 [ 1000.650539][T25248] should_fail_usercopy+0x1a/0x20 [ 1000.650558][T25248] _copy_to_user+0x20/0xa0 [ 1000.650581][T25248] simple_read_from_buffer+0xb5/0x130 [ 1000.650610][T25248] proc_fail_nth_read+0x10e/0x150 [ 1000.650671][T25248] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1000.650699][T25248] vfs_read+0x1a8/0x770 [ 1000.650783][T25248] ? __rcu_read_unlock+0x4f/0x70 [ 1000.650809][T25248] ? __fget_files+0x184/0x1c0 [ 1000.650837][T25248] ksys_read+0xda/0x1a0 [ 1000.650860][T25248] __x64_sys_read+0x40/0x50 [ 1000.650937][T25248] x64_sys_call+0x27c0/0x3000 [ 1000.650999][T25248] do_syscall_64+0xd2/0x200 [ 1000.651168][T25248] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1000.651272][T25248] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1000.651303][T25248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.651346][T25248] RIP: 0033:0x7f398eacd9dc [ 1000.651361][T25248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1000.651377][T25248] RSP: 002b:00007f398d50e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1000.651395][T25248] RAX: ffffffffffffffda RBX: 00007f398ed26090 RCX: 00007f398eacd9dc [ 1000.651407][T25248] RDX: 000000000000000f RSI: 00007f398d50e0a0 RDI: 0000000000000007 [ 1000.651418][T25248] RBP: 00007f398d50e090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.651431][T25248] R10: 00000000000003e8 R11: 0000000000000246 R12: 0000000000000001 [ 1000.651490][T25248] R13: 00007f398ed26128 R14: 00007f398ed26090 R15: 00007ffc8d258be8 [ 1000.651511][T25248] [ 1000.980167][T25246] sctp: [Deprecated]: syz.5.12686 (pid 25246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1000.980167][T25246] Use struct sctp_sack_info instead [ 1001.132837][T25280] program syz.9.12693 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.315093][T25300] lo speed is unknown, defaulting to 1000 [ 1001.327011][ T29] audit: type=1326 audit(2000001036.577:105880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.12696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x0 [ 1001.335395][T25300] lo speed is unknown, defaulting to 1000 [ 1001.409943][ T29] audit: type=1326 audit(2000001036.687:105881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.12696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 1001.647707][ T29] audit: type=1326 audit(2000001036.717:105882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.12696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 1001.671602][ T29] audit: type=1326 audit(2000001036.717:105883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.12696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 1001.695370][ T29] audit: type=1326 audit(2000001036.717:105884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25302 comm="syz.8.12696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398eacefc9 code=0x7ffc0000 [ 1002.249255][T25344] lo speed is unknown, defaulting to 1000 [ 1002.267487][T25344] lo speed is unknown, defaulting to 1000 [ 1002.336390][T25359] sctp: [Deprecated]: syz.2.12701 (pid 25359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1002.336390][T25359] Use struct sctp_sack_info instead [ 1002.456729][T25360] netlink: 'syz.9.12704': attribute type 5 has an invalid length. [ 1002.652043][T25390] SELinux: failed to load policy [ 1002.699968][T25389] blktrace: Concurrent blktraces are not allowed on loop16 [ 1003.362092][T25402] wireguard14: entered promiscuous mode [ 1003.367699][T25402] wireguard14: entered allmulticast mode [ 1003.532805][T25407] blktrace: Concurrent blktraces are not allowed on loop10 [ 1003.876496][T25453] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 1003.897184][T25453] SELinux: failed to load policy [ 1003.952621][T25458] lo speed is unknown, defaulting to 1000 [ 1003.979118][T25458] lo speed is unknown, defaulting to 1000 [ 1004.274332][T25491] lo speed is unknown, defaulting to 1000 [ 1004.297361][T25491] lo speed is unknown, defaulting to 1000 [ 1004.713021][T25441] syz.8.12722 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1004.727242][T25441] CPU: 1 UID: 0 PID: 25441 Comm: syz.8.12722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1004.727268][T25441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1004.727282][T25441] Call Trace: [ 1004.727291][T25441] [ 1004.727299][T25441] __dump_stack+0x1d/0x30 [ 1004.727457][T25441] dump_stack_lvl+0xe8/0x140 [ 1004.727480][T25441] dump_stack+0x15/0x1b [ 1004.727499][T25441] dump_header+0x81/0x220 [ 1004.727521][T25441] oom_kill_process+0x342/0x400 [ 1004.727604][T25441] out_of_memory+0x979/0xb80 [ 1004.727634][T25441] try_charge_memcg+0x610/0xa10 [ 1004.727668][T25441] obj_cgroup_charge_pages+0xa6/0x150 [ 1004.727748][T25441] __memcg_kmem_charge_page+0x9f/0x170 [ 1004.727773][T25441] __alloc_frozen_pages_noprof+0x188/0x360 [ 1004.727799][T25441] alloc_pages_mpol+0xb3/0x260 [ 1004.727821][T25441] ? alloc_pages_noprof+0xf4/0x130 [ 1004.727845][T25441] alloc_pages_noprof+0x90/0x130 [ 1004.727880][T25441] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1004.727929][T25441] __kvmalloc_node_noprof+0x483/0x670 [ 1004.728017][T25441] ? ip_set_alloc+0x24/0x30 [ 1004.728052][T25441] ? ip_set_alloc+0x24/0x30 [ 1004.728082][T25441] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1004.728113][T25441] ip_set_alloc+0x24/0x30 [ 1004.728169][T25441] hash_netiface_create+0x282/0x740 [ 1004.728252][T25441] ? __pfx_hash_netiface_create+0x10/0x10 [ 1004.728291][T25441] ip_set_create+0x3cc/0x970 [ 1004.728322][T25441] ? __nla_parse+0x40/0x60 [ 1004.728348][T25441] nfnetlink_rcv_msg+0x4c6/0x590 [ 1004.728432][T25441] netlink_rcv_skb+0x123/0x220 [ 1004.728468][T25441] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1004.728552][T25441] nfnetlink_rcv+0x167/0x16c0 [ 1004.728597][T25441] ? __pmu_ctx_sched_in+0x8a/0xb0 [ 1004.728710][T25441] ? __list_add_valid_or_report+0x38/0xe0 [ 1004.728768][T25441] ? merge_sched_in+0x605/0xa30 [ 1004.728806][T25441] ? rb_next+0x5c/0x80 [ 1004.728835][T25441] ? visit_groups_merge+0xf7e/0xfd0 [ 1004.728942][T25441] ? should_fail_ex+0x30/0x280 [ 1004.728987][T25441] ? selinux_nlmsg_lookup+0x99/0x890 [ 1004.729086][T25441] ? __rcu_read_unlock+0x34/0x70 [ 1004.729113][T25441] ? __netlink_lookup+0x266/0x2a0 [ 1004.729133][T25441] netlink_unicast+0x5c0/0x690 [ 1004.729168][T25441] netlink_sendmsg+0x58b/0x6b0 [ 1004.729211][T25441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1004.729229][T25441] __sock_sendmsg+0x145/0x180 [ 1004.729253][T25441] ____sys_sendmsg+0x31e/0x4e0 [ 1004.729303][T25441] ___sys_sendmsg+0x17b/0x1d0 [ 1004.729338][T25441] __x64_sys_sendmsg+0xd4/0x160 [ 1004.729396][T25441] x64_sys_call+0x191e/0x3000 [ 1004.729418][T25441] do_syscall_64+0xd2/0x200 [ 1004.729449][T25441] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1004.729481][T25441] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1004.729513][T25441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.729616][T25441] RIP: 0033:0x7f398eacefc9 [ 1004.729631][T25441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1004.729669][T25441] RSP: 002b:00007f398d52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1004.729691][T25441] RAX: ffffffffffffffda RBX: 00007f398ed25fa0 RCX: 00007f398eacefc9 [ 1004.729706][T25441] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000d [ 1004.729796][T25441] RBP: 00007f398eb51f91 R08: 0000000000000000 R09: 0000000000000000 [ 1004.729810][T25441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1004.729823][T25441] R13: 00007f398ed26038 R14: 00007f398ed25fa0 R15: 00007ffc8d258be8 [ 1004.729841][T25441] [ 1004.729847][T25441] memory: usage 307200kB, limit 307200kB, failcnt 4483 [ 1005.075894][T25441] memory+swap: usage 375784kB, limit 9007199254740988kB, failcnt 0 [ 1005.075911][T25441] kmem: usage 307072kB, limit 9007199254740988kB, failcnt 0 [ 1005.091106][T25441] Memory cgroup stats for /syz8: [ 1005.097772][T25441] cache 0 [ 1005.105670][T25441] rss 12288 [ 1005.108825][T25441] shmem 0 [ 1005.111746][T25441] mapped_file 0 [ 1005.115182][T25441] dirty 0 [ 1005.118134][T25441] writeback 0 [ 1005.121402][T25441] workingset_refault_anon 4967 [ 1005.126148][T25441] workingset_refault_file 96 [ 1005.130812][T25441] swap 70344704 [ 1005.134249][T25441] swapcached 4096 [ 1005.137980][T25441] pgpgin 1302097 [ 1005.141580][T25441] pgpgout 1302093 [ 1005.145226][T25441] pgfault 994125 [ 1005.148803][T25441] pgmajfault 1286 [ 1005.148811][T25441] inactive_anon 0 [ 1005.148818][T25441] active_anon 16384 [ 1005.148825][T25441] inactive_file 0 [ 1005.148864][T25441] active_file 0 [ 1005.148872][T25441] unevictable 0 [ 1005.148880][T25441] hierarchical_memory_limit 314572800 [ 1005.148889][T25441] hierarchical_memsw_limit 9223372036854771712 [ 1005.148897][T25441] total_cache 0 [ 1005.148903][T25441] total_rss 12288 [ 1005.148910][T25441] total_shmem 0 [ 1005.148916][T25441] total_mapped_file 0 [ 1005.148923][T25441] total_dirty 0 [ 1005.148929][T25441] total_writeback 0 [ 1005.148935][T25441] total_workingset_refault_anon 4967 [ 1005.148944][T25441] total_workingset_refault_file 96 [ 1005.149022][T25441] total_swap 70344704 [ 1005.149031][T25441] total_swapcached 4096 [ 1005.149039][T25441] total_pgpgin 1302097 [ 1005.149048][T25441] total_pgpgout 1302093 [ 1005.149056][T25441] total_pgfault 994125 [ 1005.149064][T25441] total_pgmajfault 1286 [ 1005.149072][T25441] total_inactive_anon 0 [ 1005.149156][T25441] total_active_anon 16384 [ 1005.149164][T25441] total_inactive_file 0 [ 1005.149173][T25441] total_active_file 0 [ 1005.149181][T25441] total_unevictable 0 [ 1005.149190][T25441] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.12722,pid=25440,uid=0 [ 1005.149307][T25441] Memory cgroup out of memory: Killed process 25440 (syz.8.12722) total-vm:96004kB, anon-rss:1136kB, file-rss:22460kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1005.259952][T25531] wireguard4: entered promiscuous mode [ 1005.259967][T25531] wireguard4: entered allmulticast mode [ 1005.393320][T25538] __nla_validate_parse: 8 callbacks suppressed [ 1005.393334][T25538] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12732'. [ 1006.416107][T25585] sctp: [Deprecated]: syz.8.12739 (pid 25585) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1006.416107][T25585] Use struct sctp_sack_info instead [ 1006.742270][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1006.742285][ T29] audit: type=1326 audit(2000001042.017:105914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x0 [ 1006.885995][ T29] audit: type=1326 audit(2000001042.157:105915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1006.909755][ T29] audit: type=1326 audit(2000001042.157:105916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1006.933528][ T29] audit: type=1326 audit(2000001042.157:105917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1006.957287][ T29] audit: type=1326 audit(2000001042.157:105918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1006.981072][ T29] audit: type=1326 audit(2000001042.157:105919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1007.004811][ T29] audit: type=1326 audit(2000001042.157:105920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1007.028441][ T29] audit: type=1326 audit(2000001042.157:105921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1007.052226][ T29] audit: type=1326 audit(2000001042.157:105922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1007.075884][ T29] audit: type=1326 audit(2000001042.157:105923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25617 comm="syz.9.12746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b9148efc9 code=0x7ffc0000 [ 1007.123529][T25628] sz1: rxe_newlink: already configured on lo [ 1007.325512][T25647] program syz.2.12750 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1007.620385][T25659] lo speed is unknown, defaulting to 1000 [ 1007.626477][T25659] lo speed is unknown, defaulting to 1000 [ 1007.767321][T25687] sctp: [Deprecated]: syz.7.12754 (pid 25687) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1007.767321][T25687] Use struct sctp_sack_info instead [ 1007.988074][T25700] sctp: [Deprecated]: syz.9.12758 (pid 25700) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1007.988074][T25700] Use struct sctp_sack_info instead [ 1008.667729][T25723] lo speed is unknown, defaulting to 1000 [ 1008.717096][T25723] lo speed is unknown, defaulting to 1000 [ 1008.794690][T25756] netlink: 'syz.9.12766': attribute type 3 has an invalid length. [ 1008.967232][T25723] chnl_net:caif_netlink_parms(): no params data found [ 1009.129789][T25723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.136944][T25723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.248572][T25723] bridge_slave_0: entered allmulticast mode [ 1009.255312][T25723] bridge_slave_0: entered promiscuous mode [ 1009.278081][T25723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.285132][T25723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.298904][T25723] bridge_slave_1: entered allmulticast mode [ 1009.305363][T25723] bridge_slave_1: entered promiscuous mode [ 1009.369807][T25723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.394946][T25723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.466284][T25723] team0: Port device team_slave_0 added [ 1009.485342][T25723] team0: Port device team_slave_1 added [ 1009.520208][ T9482] bridge_slave_1: left allmulticast mode [ 1009.522594][T25997] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 1009.525939][ T9482] bridge_slave_1: left promiscuous mode [ 1009.541221][ T9482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.557878][T25997] SELinux: failed to load policy [ 1009.563144][ T9482] bridge_slave_0: left allmulticast mode [ 1009.568854][ T9482] bridge_slave_0: left promiscuous mode [ 1009.574531][ T9482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.698802][ T9482] bond0 (unregistering): left promiscuous mode [ 1009.705026][ T9482] bond_slave_0: left promiscuous mode [ 1009.710518][ T9482] bond_slave_1: left promiscuous mode [ 1009.726605][ T9482] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1009.735547][ T9482] bond_slave_0: left allmulticast mode [ 1009.751743][ T9482] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1009.755330][T26008] SELinux: policydb magic number 0x80 does not match expected magic number 0xf97cff8c [ 1009.770087][ T9482] bond_slave_1: left allmulticast mode [ 1009.784227][T26008] SELinux: failed to load policy [ 1009.785976][ T9482] bond0 (unregistering): Released all slaves [ 1009.802460][T25723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.809430][T25723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.835555][T25723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.887456][T25723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.894397][T25723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.920312][T25723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.961917][T25723] hsr_slave_0: entered promiscuous mode [ 1009.975750][T25723] hsr_slave_1: entered promiscuous mode [ 1009.990024][T25723] debugfs: 'hsr0' already exists in 'hsr' [ 1009.995769][T25723] Cannot create hsr debugfs directory [ 1010.002786][ T9482] dummy0: left promiscuous mode [ 1010.011350][T26056] sctp: [Deprecated]: syz.5.12774 (pid 26056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1010.011350][T26056] Use struct sctp_sack_info instead [ 1010.089067][ T9482] team0 (unregistering): Port device team_slave_0 removed [ 1010.149200][T25952] syz.2.12769 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1010.163411][T25952] CPU: 1 UID: 0 PID: 25952 Comm: syz.2.12769 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1010.163446][T25952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1010.163460][T25952] Call Trace: [ 1010.163467][T25952] [ 1010.163476][T25952] __dump_stack+0x1d/0x30 [ 1010.163502][T25952] dump_stack_lvl+0xe8/0x140 [ 1010.163526][T25952] dump_stack+0x15/0x1b [ 1010.163547][T25952] dump_header+0x81/0x220 [ 1010.163632][T25952] oom_kill_process+0x342/0x400 [ 1010.163669][T25952] out_of_memory+0x979/0xb80 [ 1010.163726][T25952] try_charge_memcg+0x610/0xa10 [ 1010.163761][T25952] obj_cgroup_charge_pages+0xa6/0x150 [ 1010.163786][T25952] __memcg_kmem_charge_page+0x9f/0x170 [ 1010.163811][T25952] __alloc_frozen_pages_noprof+0x188/0x360 [ 1010.163866][T25952] alloc_pages_mpol+0xb3/0x260 [ 1010.163893][T25952] ? alloc_pages_noprof+0xf4/0x130 [ 1010.163981][T25952] alloc_pages_noprof+0x90/0x130 [ 1010.164004][T25952] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1010.164047][T25952] __kvmalloc_node_noprof+0x483/0x670 [ 1010.164086][T25952] ? ip_set_alloc+0x24/0x30 [ 1010.164115][T25952] ? ip_set_alloc+0x24/0x30 [ 1010.164146][T25952] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 1010.164260][T25952] ip_set_alloc+0x24/0x30 [ 1010.164294][T25952] hash_netiface_create+0x282/0x740 [ 1010.164330][T25952] ? __pfx_hash_netiface_create+0x10/0x10 [ 1010.164417][T25952] ip_set_create+0x3cc/0x970 [ 1010.164450][T25952] ? __nla_parse+0x40/0x60 [ 1010.164485][T25952] nfnetlink_rcv_msg+0x4c6/0x590 [ 1010.164536][T25952] netlink_rcv_skb+0x123/0x220 [ 1010.164589][T25952] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1010.164677][T25952] nfnetlink_rcv+0x167/0x16c0 [ 1010.164716][T25952] ? search_extable+0x53/0x80 [ 1010.164737][T25952] ? strncpy_from_kernel_nofault+0x78/0x130 [ 1010.164761][T25952] ? strncpy_from_kernel_nofault+0x78/0x130 [ 1010.164786][T25952] ? fixup_exception+0x741/0xd50 [ 1010.164895][T25952] ? __list_add_valid_or_report+0x38/0xe0 [ 1010.164921][T25952] ? merge_sched_in+0x605/0xa30 [ 1010.164957][T25952] ? rb_next+0x5c/0x80 [ 1010.165090][T25952] ? visit_groups_merge+0xf7e/0xfd0 [ 1010.165129][T25952] ? should_fail_ex+0x30/0x280 [ 1010.165151][T25952] ? selinux_nlmsg_lookup+0x99/0x890 [ 1010.165257][T25952] ? __rcu_read_unlock+0x34/0x70 [ 1010.165281][T25952] ? __netlink_lookup+0x266/0x2a0 [ 1010.165369][T25952] netlink_unicast+0x5c0/0x690 [ 1010.165404][T25952] netlink_sendmsg+0x58b/0x6b0 [ 1010.165428][T25952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1010.165451][T25952] __sock_sendmsg+0x145/0x180 [ 1010.165521][T25952] ____sys_sendmsg+0x31e/0x4e0 [ 1010.165607][T25952] ___sys_sendmsg+0x17b/0x1d0 [ 1010.165642][T25952] __x64_sys_sendmsg+0xd4/0x160 [ 1010.165674][T25952] x64_sys_call+0x191e/0x3000 [ 1010.165699][T25952] do_syscall_64+0xd2/0x200 [ 1010.165716][T25952] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1010.165742][T25952] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 1010.165805][T25952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.165826][T25952] RIP: 0033:0x7fd9e10cefc9 [ 1010.165840][T25952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.165858][T25952] RSP: 002b:00007fd9dfb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.165887][T25952] RAX: ffffffffffffffda RBX: 00007fd9e1325fa0 RCX: 00007fd9e10cefc9 [ 1010.165901][T25952] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 000000000000000e [ 1010.165913][T25952] RBP: 00007fd9e1151f91 R08: 0000000000000000 R09: 0000000000000000 [ 1010.165925][T25952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.165936][T25952] R13: 00007fd9e1326038 R14: 00007fd9e1325fa0 R15: 00007fffecddfe68 [ 1010.165956][T25952] [ 1010.165996][T25952] memory: usage 307200kB, limit 307200kB, failcnt 5456 [ 1010.528292][T25952] memory+swap: usage 307948kB, limit 9007199254740988kB, failcnt 0 [ 1010.536162][T25952] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 1010.543503][T25952] Memory cgroup stats for /syz2: [ 1010.543709][T25952] cache 0 [ 1010.551672][T25952] rss 0 [ 1010.554418][T25952] shmem 0 [ 1010.557374][T25952] mapped_file 0 [ 1010.560810][T25952] dirty 0 [ 1010.563748][T25952] writeback 0 [ 1010.567044][T25952] workingset_refault_anon 3411 [ 1010.571844][T25952] workingset_refault_file 28860 [ 1010.576671][T25952] swap 765952 [ 1010.580012][T25952] swapcached 8192 [ 1010.583652][T25952] pgpgin 1710786 [ 1010.587185][T25952] pgpgout 1710784 [ 1010.590812][T25952] pgfault 1306845 [ 1010.594433][T25952] pgmajfault 1092 [ 1010.598061][T25952] inactive_anon 4096 [ 1010.602001][T25952] active_anon 4096 [ 1010.605701][T25952] inactive_file 0 [ 1010.609388][T25952] active_file 0 [ 1010.612816][T25952] unevictable 0 [ 1010.616254][T25952] hierarchical_memory_limit 314572800 [ 1010.621609][T25952] hierarchical_memsw_limit 9223372036854771712 [ 1010.627761][T25952] total_cache 0 [ 1010.631198][T25952] total_rss 0 [ 1010.634452][T25952] total_shmem 0 [ 1010.637942][T25952] total_mapped_file 0 [ 1010.641895][T25952] total_dirty 0 [ 1010.645346][T25952] total_writeback 0 [ 1010.649140][T25952] total_workingset_refault_anon 3411 [ 1010.654394][T25952] total_workingset_refault_file 28860 [ 1010.659768][T25952] total_swap 765952 [ 1010.663547][T25952] total_swapcached 8192 [ 1010.667777][T25952] total_pgpgin 1710944 [ 1010.671837][T25952] total_pgpgout 1710942 [ 1010.675964][T25952] total_pgfault 1307050 [ 1010.680114][T25952] total_pgmajfault 1092 [ 1010.684238][T25952] total_inactive_anon 4096 [ 1010.688644][T25952] total_active_anon 4096 [ 1010.692854][T25952] total_inactive_file 0 [ 1010.697007][T25952] total_active_file 0 [ 1010.700959][T25952] total_unevictable 0 [ 1010.704970][T25952] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.12769,pid=25951,uid=0 [ 1010.719734][T25952] Memory cgroup out of memory: Killed process 25951 (syz.2.12769) total-vm:96004kB, anon-rss:1264kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1010.975035][T26125] blktrace: Concurrent blktraces are not allowed on loop10 [ 1011.032601][T26139] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12777'. [ 1011.309358][T26160] wireguard3: entered promiscuous mode [ 1011.314881][T26160] wireguard3: entered allmulticast mode [ 1011.344698][T25723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1011.368494][T25723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1011.390500][T25723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1011.411052][T25723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1011.495695][T25723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.521161][T25723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.539916][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.547027][ T9490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.580043][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.587153][T14972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.711969][T25723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.872813][T25723] veth0_vlan: entered promiscuous mode [ 1011.880977][T25723] veth1_vlan: entered promiscuous mode [ 1011.922034][T25723] veth0_macvtap: entered promiscuous mode [ 1011.943489][T25723] veth1_macvtap: entered promiscuous mode [ 1011.968680][T25723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.987717][T25723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.998541][ T9482] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.010602][ T9482] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.039562][ T9482] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.077319][ T9482] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.086906][T26214] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12787'. [ 1012.166835][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 1012.166849][ T29] audit: type=1326 audit(2000001047.437:105979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26209 comm="syz.7.12785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f884602efc9 code=0x0 [ 1012.224630][ T29] audit: type=1326 audit(2000001047.497:105980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.248480][ T29] audit: type=1326 audit(2000001047.497:105981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.420724][T26242] netlink: 'syz.2.12791': attribute type 21 has an invalid length. [ 1012.587169][ T29] audit: type=1326 audit(2000001047.557:105982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.610970][ T29] audit: type=1326 audit(2000001047.557:105983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.634730][ T29] audit: type=1326 audit(2000001047.557:105984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.658520][ T29] audit: type=1326 audit(2000001047.557:105985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.682205][ T29] audit: type=1326 audit(2000001047.557:105986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.706059][ T29] audit: type=1326 audit(2000001047.557:105987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.729803][ T29] audit: type=1326 audit(2000001047.557:105988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26221 comm="syz.8.12788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff7efb5efc9 code=0x7ffc0000 [ 1012.939273][T26266] program syz.8.12797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1013.121467][T26271] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.318610][T26276] netlink: 24 bytes leftover after parsing attributes in process `syz.7.12799'. [ 1013.617445][T26299] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 1013.644404][T26299] SELinux: failed to load policy [ 1013.749310][T26312] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 1013.766655][T26296] ================================================================== [ 1013.774727][T26296] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 1013.782512][T26296] [ 1013.784808][T26296] write to 0xffffea0005ca6018 of 8 bytes by task 26256 on cpu 0: [ 1013.792506][T26296] __filemap_remove_folio+0x1a5/0x2a0 [ 1013.797856][T26296] filemap_remove_folio+0x6d/0x1d0 [ 1013.802942][T26296] truncate_inode_folio+0x42/0x50 [ 1013.807938][T26296] shmem_undo_range+0x244/0xa80 [ 1013.812767][T26296] shmem_evict_inode+0x134/0x520 [ 1013.817676][T26296] evict+0x2e3/0x550 [ 1013.821545][T26296] iput+0x4ed/0x650 [ 1013.825327][T26296] dentry_unlink_inode+0x24f/0x260 [ 1013.830433][T26296] __dentry_kill+0x18d/0x4b0 [ 1013.834999][T26296] dput+0x5e/0xd0 [ 1013.838610][T26296] __fput+0x444/0x650 [ 1013.842562][T26296] ____fput+0x1c/0x30 [ 1013.846543][T26296] task_work_run+0x131/0x1a0 [ 1013.851118][T26296] do_exit+0x483/0x15c0 [ 1013.855251][T26296] do_group_exit+0xff/0x140 [ 1013.859724][T26296] get_signal+0xe58/0xf70 [ 1013.864055][T26296] arch_do_signal_or_restart+0x96/0x440 [ 1013.869574][T26296] irqentry_exit_to_user_mode+0x5b/0xa0 [ 1013.875104][T26296] irqentry_exit+0x12/0x50 [ 1013.879503][T26296] asm_exc_page_fault+0x26/0x30 [ 1013.884326][T26296] [ 1013.886631][T26296] read to 0xffffea0005ca6018 of 8 bytes by task 26296 on cpu 1: [ 1013.894228][T26296] folio_mapping+0xa1/0xe0 [ 1013.898623][T26296] evict_folios+0xe05/0x3590 [ 1013.903197][T26296] try_to_shrink_lruvec+0x5b5/0x950 [ 1013.908372][T26296] shrink_lruvec+0x22e/0x1b50 [ 1013.913030][T26296] shrink_node+0x686/0x2120 [ 1013.917508][T26296] do_try_to_free_pages+0x3f6/0xcd0 [ 1013.922676][T26296] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 1013.928550][T26296] try_charge_memcg+0x383/0xa10 [ 1013.933388][T26296] obj_cgroup_charge_pages+0xa6/0x150 [ 1013.938731][T26296] __memcg_kmem_charge_page+0x9f/0x170 [ 1013.944195][T26296] __alloc_frozen_pages_noprof+0x188/0x360 [ 1013.949975][T26296] alloc_pages_mpol+0xb3/0x260 [ 1013.954710][T26296] alloc_pages_noprof+0x90/0x130 [ 1013.959619][T26296] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 1013.965402][T26296] __kvmalloc_node_noprof+0x483/0x670 [ 1013.970749][T26296] ip_set_alloc+0x24/0x30 [ 1013.975055][T26296] hash_netiface_create+0x282/0x740 [ 1013.980230][T26296] ip_set_create+0x3cc/0x970 [ 1013.984800][T26296] nfnetlink_rcv_msg+0x4c6/0x590 [ 1013.989722][T26296] netlink_rcv_skb+0x123/0x220 [ 1013.994465][T26296] nfnetlink_rcv+0x167/0x16c0 [ 1013.999115][T26296] netlink_unicast+0x5c0/0x690 [ 1014.003855][T26296] netlink_sendmsg+0x58b/0x6b0 [ 1014.008592][T26296] __sock_sendmsg+0x145/0x180 [ 1014.013242][T26296] ____sys_sendmsg+0x31e/0x4e0 [ 1014.017983][T26296] ___sys_sendmsg+0x17b/0x1d0 [ 1014.022629][T26296] __x64_sys_sendmsg+0xd4/0x160 [ 1014.027449][T26296] x64_sys_call+0x191e/0x3000 [ 1014.032122][T26296] do_syscall_64+0xd2/0x200 [ 1014.036605][T26296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.042470][T26296] [ 1014.044765][T26296] value changed: 0xffff88811a3207c0 -> 0x0000000000000000 [ 1014.051838][T26296] [ 1014.054144][T26296] Reported by Kernel Concurrency Sanitizer on: [ 1014.060265][T26296] CPU: 1 UID: 0 PID: 26296 Comm: syz.2.12806 Not tainted syzkaller #0 PREEMPT(voluntary) [ 1014.070132][T26296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1014.080166][T26296] ================================================================== [ 1014.088333][T26312] SELinux: failed to load policy [ 1014.909184][T26271] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.019075][T26271] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.069139][T26271] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.122173][ T9532] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.133319][ T9482] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.144200][ T9482] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.154928][ T9532] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0