last executing test programs: 2.104811546s ago: executing program 0 (id=985): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r4, 0x0, r5}, 0x60) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0xb}}}, 0x24}}, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r9, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000428bd7000ffdbdf2516000000050002000100000005fe020000000000050004000000000005000400000000000500030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4004, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$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") pivot_root(0x0, 0x0) 1.836275451s ago: executing program 0 (id=990): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r4, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="f14889c2ad234ad6f0a71da72859c7c1e176134eff431253493482c723f8633d838bf127adff9f48a8854702b889321dfefd5644a03e0e41fb1cd1e442", 0x3d}], 0x1}, 0x20000044) 1.748195392s ago: executing program 0 (id=995): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 1.706393282s ago: executing program 1 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x108) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt(r7, 0x1, 0x5, &(0x7f0000000600)=""/68, &(0x7f0000000000)=0x44) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x2003, 0xfffffffffffffffc, 0xa, 0xfffffffffffffffc, 0xffffffffffffffff, 0x53b0}, {0x0, 0x0, 0x7}, 0x0, 0x9, 0x0, 0x0, 0x4, 0x1}, {{@in=@remote, 0x4d4, 0x33}, 0x0, @in=@empty, 0x20000, 0x3, 0x0, 0xb7, 0xfffffffb}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r8, 0x0) socket(0x17, 0x1, 0x7ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000180)='cpu==0||!') r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r10, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) 1.595540664s ago: executing program 3 (id=1001): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000000340), 0x0}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYRESOCT=r2, @ANYRESHEX=r5]) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 1.484459296s ago: executing program 3 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000504000000000000000000097100", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e00001000028004001200050016"], 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3e}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socket$key(0xf, 0x3, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000b80), 0x301, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x4000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x4000800) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)="edfd2c48eba24f8459482e34135c44b3ac60b1254d280fb5f0298d0c680f04bf4d79d62b9a5a55e2cded62fb0c5505b1ae7e4f8a4544282c5588ba283f0f410b6e59094bd760f16e1205667ba14656a01fc804bbd20857daf59409bef47d3d98562f720b3a2be7c47a25d37d8a0d6853afcfb6b8c857dca56da261983b64ee4656", 0x81}, {&(0x7f00000001c0)="d07e0a6efc11d588c0ee5e15", 0xc}, {&(0x7f0000000840)="fb4ace9469b34801d970cf1b316a031dfeb98916d01536d1ed1e11a72f6b41f35f1d62c1fbd59db9e3f86e72a09653e3e4508440f9d5b67de2aae7a4b9a340b231a7bd", 0x43}, {&(0x7f0000000680)="17b36c98251e66909923479f0e603906c1d04adb96374afb8ca69f971a727556b795a132abaf04e897c589ba59260bda48f3c238224a", 0x36}], 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x13b0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000900)="4807362f7e4564aa234fd575195d42dd0872b17ba67ae55a2a2afa11ba97e9e056ac828468ae2e098e8958804052d001de8cfe42ea3dbccb22cf96c828ae6d43064ede5e0819afade3da2af6a6f7c230", 0x50}, {&(0x7f0000000980)="7ea2b893e071807f5b77e8c46ce84dd01dda5825f6928aa3f2ea5e51cc8cf42cd17565543e5c42b284d599d79a4793e2563402f0b2e437bd1a20a4aa40cfa26deb475c6b24c85db98bf024d5e7f1b2e3ead29a", 0x53}, {&(0x7f0000000a00)="18d23aa08961602e0f978b23ce6b1fcd6b8495d9e17bd258d2428fd38aaa80e78bca2caf0b1561b1472575a42da75f4d6e5218d11acf2dc76db7bacdf8d982e7cfad2dfb6621d95d9f709dce219c994a04f662282c4b36876390d760f6f1c5c88212dfc27feb3de521733afbd1cb2ff601fc9ec7b090d18546df611654ed8cb4a63ac93db0c4da8908cb7da731cad82ff1f26898166c9ac1b82c2078a9fdf97cadd64a6a9f2d1c24", 0xa8}], 0x3, &(0x7f0000002cc0)=[{0xb0, 0x6, 0x1, "eb3a105a1e484e9d1caf08b59368c2655d7413838e4b8a36ae98e0d4d3846cf16b7aa4ead20bb630d1fd5d3ceb353022d62f8c6ea2d723c025fdd8d9c98463aafeeb992383d4a60486fd1ece5ed3ae80414ea8f0295f4543524ec26169b2d324868740c66e81904a5a2b03711fe62dd416788d0cf7a6a23d3a3fc772eb26ea3d16f4485ac5eea26c04a6b8899716150376a910cd85f527dc884320ee63"}, {0x70, 0x3a, 0x9, "730660d6b16ce685455dbaefec30ac5d0122f88206cd630cc12b3d9076d63d363e9d046d399db6fcb0e0dde58e65bfc11b7d7bb99495f6da05ce4ea57e61638371c9b78e4c3cdc6f4c7ca0ac3673505426c98eed00ca8eed20ef75235b7f838d"}, {0x90, 0x103, 0x9, "f4acc1d5c5c333f847da03c74d00ab46b4209507f7f9b83f3d22395514d63df24a06a32cbd4972fbf3ccf30513e49d66dd7d6accaaf0d36e08d802cf6f7c26dbe18feca2258c3ae5f87d9d2ad5bc73ec2a9b790d03b76b3ae4d96653531025f0127b6d97e4e6e589b66db6f5f47f046e5e0b6f622ca993f01e76"}, {0xa8, 0x114, 0x7a97, "cc037115883aeaea675cf3b75890fad6305bf329032ce92aa752fb21e978cc92d4cb5b4646c80118b68d317c0436078209844d337c6e2223dd85b5eb7b6add9eea72c0516fd0cbdda74b9c4832b79b9d644a67c1905cfcde2ced161b30841f0a13bb84ae6408bb8204033d0ed44746ec9110ffe08d0ed95ed49796957a54596970babb6b5325ed5e003a8c23ec1ab0c0ac"}, {0x100, 0x0, 0x80000000, "12ae28c4916f2f14a2ee2b43d7b40233c4a566466b78a1a23d6fb311ba8b2c81b2a17b8542651f34021a0c6760eb3bae35f0c3a9e9eead1106ec3b19e7ffad2ac4983a66041ab9adeac0457b9f95fd4e784d14b7e2e6f358eb25175634fbccae4786edce91c8f83f09f1b6c98017091a89ed11d10baf9b6244c3087c3893588553fd9ce2499992c5a5fd28b2706b6dc07cb233d3f79645eb41741ade79a5c284d81e427047497c6f731db985166b384ba48ee76f8456740ad667724774ee74d192700e40debe53ae09485ad53e42c2b3c17ca38a7fe1c5286b34aa657572f134e96bd6693f6e98dd63ec4e"}, {0x68, 0x1, 0x458, "71670305cb448f9f4be507972c7940820ba809cd122c4e1e4e9620f17b1fbb6bf0113aa7e484ea758318cb2fd459786c312b90a287dde6ab043fdbf63e0031aca960a8875c0dad1173f824bbf0c4f2755f069881cd0895b4"}, {0x1010, 0x1, 0x9, "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"}, {0x108, 0x10e, 0x7, "118a83918a02d612ced29dbd02e80c98364c85480ef0a8be98f383727b746b9ba3ce111289c1a833b5404b87920c8e1acd6101131c9766c14c1cfb9f8a64d6c06f0958e89cff33d17ea5093550bfd6f129385e295b4cb4105247d3cf6f8f50655b238229822c0a21d80570144e089153df98d3d149a42ee98eb7663d6c3b307fd085dbd55ba1cb4bf1c843cc247a7d65e0f5a98907a12015781715bd435ed22c6cfd89a1608997792bff6997664f03ab17f88198e9b0764e5aa2239d5862e94a255be2e223ebe12b923ada22beb4d482d2bccd115ce41ad93409497bf3ec626afd60b5fcdda2b438cd3cdda783343f79fba6"}], 0x14d8}}], 0x2, 0x0) ioctl$TCSETSF(r3, 0x5432, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {0x3}}, './bus\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4d000000030301020000000000000000030000056a33b04a5acb0fa8224757b2af8007d2a66d536a39b464246cbda28233f78bfa8c147894b12bafb84c5e88682fc46685d16e0c0db3eb45e0a287ac74b0d8ef3dbaab79020a273422362f3f51f63fab6757fc6b4f61130a6ae8a65713b036c3e7644fd065469a786b0638d0644688d2246ed1bc30f9b930b9fc5cb86ff9afeded699772fc244433b6c1dcfdbda6f0d80f616520f5ab16290000000000"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x800) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18004a5b0f49720000000000000000000095000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x9}, 0x18) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) statfs(&(0x7f0000000300)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffbffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) 1.470300147s ago: executing program 3 (id=1005): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r0, 0x300, 0x400000000000000, 0x7) 1.450011657s ago: executing program 3 (id=1006): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYBLOB='\b\x00', @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r8 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008000300", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=r8], 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TIOCL_BLANKSCREEN(r10, 0x541c, &(0x7f0000000480)) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100027bd7000ffdbdf250c0000000c000600030000000300000008000b007f000000080001000000000008000300", @ANYRES32=r9], 0x50}, 0x1, 0x0, 0x0, 0x14}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c804}, 0x4040841) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r13, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="2a8452dcdec3e2542f16f61df2103645ac34b60e2745eb4503e595bfd8778d0e6bb83a8cbfa651fa", 0x28}, {0x0}], 0x2}, 0x811) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x0) 1.434433297s ago: executing program 1 (id=1008): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="c4e92c5a2142ddbab1e1fe6d84728cc09d18c0486e17f060c3c5107f7467d3ec65c92b54442b6005db971f8035b1a41fd582679b8e76db6582baef9bb5adcaf2335cd518bce375fd5c09f656d1", 0x4d, 0xc0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) io_setup(0xb2, &(0x7f0000000200)) 1.141217712s ago: executing program 4 (id=1009): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 1.140570102s ago: executing program 4 (id=1010): r0 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 1.089623973s ago: executing program 4 (id=1011): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x6be53a9e97bb733e, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x18, 0x2d, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r3}, 0x18) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x3fffff) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f2, &(0x7f0000000b00)="$eJzs3M9PE1sUwPHTH5S2BMri5b28l7xwoxvdTKC6VhoDibGJBKnxR2IywFSbji3pNDU1RnTl1vhHuCAs2ZEo/wAbd7px446NiQtZGMd0OkNpO4CU0iJ8PwmZw9x7eu9tB3LuhGHrzuvH+aylZfWyBKNKAiIi2yKjEhRPwD0GnTgiu72Qi0PfPv5/6+69G6l0empWqenU3KWkUmpk7N2TZzG32/qgbI4+2Pqa/LL59+a/Wz/nHuUslbNUoVhWupovfi7r86ahFnNWXlNqxjR0y1C5gmWU6u3FenvWLC4tVZVeWByOL5UMy1J6oaryRlWVi6pcqqrQQz1XUJqmqeG44CCZldlZPdVh8kKXJ4NjUiql9JCIxNpaMit9mRAAAOir1vo/KKqb9f/quY3y0O21Ebf+X4/41f+XP9Vfq6n+j4qIb/3vje9b/+uHq//bK6Kz5Uj1P06GsUjbqUAjrDWWUnrc/fl1vLy/Ou4E1P8AAAAAAAAAAAAAAAAAAAAAAPwJtm07Ydt2wjt6X4MiEhUR73uf1JCIXO3DlNFFR/j8cQo0HtwLj4iYryqZSqZ+dDtsiIgphoxLQn4414OrFntPHqmaUXlvLrv5y5VMyGlJZSXn5E9IYkBa8217+np6akLVNecPSHx3flIS8pd/frItf3C5konIhfO78jVJyIcFKYopi848GvnPJ5S6djPdMn7M6QcAAAAAwGmgqR2++3dN26u9nr+zv269PxBq7K/Hfff3Yfkv3N+1AwAAAABwVljVp3ndNI3SPkFMDu7TeRA+plf2Vvi7Wd7fMhzfSvcJvMGbmqLuya6/LYFDvC17BEHpJGusthp11FV4t4326iMzk737BJum8c+bt9+7N8SVtegBK+08CO1/AQz07BcQAAAAgJ5pFP3emcn+TggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDOoF/8mrd9rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6KXwEAAP//ziYEEA==") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x300, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x7fffffff, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xfffffff9, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x3}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x100000}, {0x0, 0x4000}, {0xfffffffe}, {0x1}, {0xd5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x1}, {0x2000000}, {}, {0x0, 0x1}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x4}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x400000, 0x0, 0x0, 0x0, 0xffffff81}, {0x814, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {0x0, 0x0, 0x0, 0xfffffff9}, {}, {0x0, 0x0, 0x0, 0x100, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x1, 0x0, 0xd}], [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1000000d) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0x1) 1.066921503s ago: executing program 1 (id=1012): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.selinux\x00', 0x0, 0x0) 1.065910233s ago: executing program 4 (id=1013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000658adc5c794136bc7892077af20311df34e89c8979632ac95e0c56e4dd3cefb0dc430d2c41"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYRESDEC=r2], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xffffff2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb000008000600"], 0xd0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'ip6gre0\x00'}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r9, 0x0, 0xffff}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000540)={{}, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f00000006c0)={0x2, 0x17, 0x4, 0x1, 0x0, 0xfff, 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r11}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1.030411653s ago: executing program 1 (id=1014): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000680)={0x806, 0xfffffffd, 0x8, 0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040810}, 0x200040c0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 976.707954ms ago: executing program 4 (id=1016): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x4, 0x8001, 0x0, 0x9}) 894.844465ms ago: executing program 0 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 859.009366ms ago: executing program 0 (id=1019): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x8b) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRESHEX=r2], 0x48) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) read(r5, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000740)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) tkill(r4, 0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_USERDATA={0x23, 0x7, 0x1, 0x0, "1ed1d6c935f31f834964f5dafe709f86155237599af0000000000000000000"}, @NFTA_RULE_USERDATA={0x11, 0x7, 0x1, 0x0, "1c9a378414ba357af570314c5e"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x2a, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000009000000000000000d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000003d2930000000000018000000f9ffffff000000004b04000095000000000000001800000009000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001831000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800006d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000d476060010000000bf91000000000000b7020000020000008500000085029352842e3a5e97d8fd7e000000b7000000000000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340), 0x480000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) socket$nl_route(0x10, 0x3, 0x0) close(r0) socket$pppl2tp(0x18, 0x1, 0x1) 847.076016ms ago: executing program 4 (id=1021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r3 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000001040)='xen_mmu_pte_clear\x00', r6, 0x0, 0x800000af8}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0xa}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) 811.807347ms ago: executing program 1 (id=1022): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="c4e92c5a2142ddbab1e1fe6d84728cc09d18c0486e17f060c3c5107f7467d3ec65c92b54442b6005db971f8035b1a41fd582679b8e76db6582baef9bb5adcaf2335cd518bce375fd5c09f656d1", 0x4d, 0xc0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) io_setup(0xb2, &(0x7f0000000200)) 772.989698ms ago: executing program 1 (id=1024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r3 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000001040)='xen_mmu_pte_clear\x00', r6, 0x0, 0x800000af8}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0xa}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, "ff00f7000000000000000000af88008300"}) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) 590.11828ms ago: executing program 0 (id=1027): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x16, &(0x7f0000000240)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='GPL\x00', 0x800000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000000)={'system_u:object_r:etc_mail_t:s0', 0x20, 'unconfined', 0x20, 0x1}, 0x40) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x8, 0x8004, 0x1) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20482, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040080}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 538.994272ms ago: executing program 3 (id=1029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='mm_page_alloc\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 538.240761ms ago: executing program 2 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) msgget$private(0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4085, 0xff5}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 468.606153ms ago: executing program 3 (id=1031): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20000000, 0x4b}, 0x10, 0x0, 0x0, 0x1, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r3 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3e, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000001040)='xen_mmu_pte_clear\x00', r6, 0x0, 0x800000af8}, 0x18) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000140)='sched_switch\x00', r7, 0x0, 0xa}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, 0x0) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r8, 0xffffffffffffffff, 0x0) 461.380972ms ago: executing program 2 (id=1032): socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setscheduler(0x0, 0x2, 0x0) unshare(0x8040600) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x4, 0x8001, 0x0, 0x9}) 392.074044ms ago: executing program 2 (id=1033): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x10, 0x3, 0x0) epoll_create1(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 363.640734ms ago: executing program 2 (id=1034): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000840)={0x45c, r0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x68, 0x3, "d8160d0fad417be8a4c20492b57bc52705da0ddb70de135fab3e4eddb9d8d82f6fe7109a83b7782138bbf11bdfa364c03fb1ac4e503c92a76c5a64558379595ce029dcda006765e319eabaf1657e99cb23c3a246fcad28e5a60e45c8aaa22b48f28db0bf"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x48}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x31e1}, @TIPC_NLA_NODE_ID={0x3c, 0x3, "a6ba1f4e6e44232452b18c9763a1186e5189c0d50e9755d7b12c838b23c2e8797be5234d3c53a963850ac75836bd00ffb997b6452a220f99"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "0c3f61c5469f0e41d02cf4038e711df6ba9f99d1611439f2ba65dd11824e81"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x40}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x9b, 0x3, "5aaea42e3206229df63bcbd2871dc84e793feb309687aaceeebd14049d41629b0b4d01fb9a5971b8100949345b6fa1b57be3bf46eb34b7cdb41fc8e7c20302685714844c0f76f741c93c6a5c9f2dfd4b5d87ac9e6b0643a8ed688f892da3b715599c3d7bb74d22a41f85a695e10ea94fb2ac105f01092ca77ddfd73e7b4d30e4290c1eaca0729e97f571c3c331cf88dc101d9510950c65"}, @TIPC_NLA_NODE_ID={0x80, 0x3, "171252e23c3787587454e9b8a1928713d7079f582be88f4d506e743c53a357c2d68dd4bd562dd0fb8a10e8495875933d7d8d0228d8820794a66d27dbe93192682662fe9178096a011af271b182857ac45ce4e31d44422c1fb079aaf9a91e07c7b2fc160fce90afd53c5f543a5f8ce4eb21499e96b0f0fbd01ed55202"}, @TIPC_NLA_NODE_ID={0x88, 0x3, "e4a1c3e8ba1b3436f4555821ec1bab5010dc8736a5be9eeb2733d5304f0e684a12938f426a84391170a68c4f38cfd29d8620d035bc080091d7e52efcaa0e4c7c4d88ef2f18f9cf5cc62147c56fb2097db87cbe7f5666723e8823b950ca598355a6fcda92b76d47d1d649a927c9cb2c0dd7619ba1c031d7a1c53835c763cc0a843f06eb17"}]}, @TIPC_NLA_NODE={0x154, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b78ad00fe411d3ac1636ad039abbd1dc923625cc1f3de524c92766bab2dac2e3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "6ea8b145313ed2caeba99da0b9d997f61e80e2cf78401a"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "fd91fdc2fcf97ab51539b55223e180b733e2e47ec0207b5a95f6bbd57ab10997debc5f2051a605a652d12cb1ceb125cf3fe3e84c3dd5aa"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "dbbded1010cd34765b5cbbac372c90e11cbced7e8e545a272f2e7af26af8"}}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "9e8812b00083c8d79bf58d741fc5a0a39e4b84364b62b115a489057dba1aafd82a4e916cedab39fb38d1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x45c}, 0x1, 0x0, 0x0, 0xc0}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703017e000008000000b7"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r3, @ANYRES8=r1, @ANYRESOCT=r2, @ANYBLOB="6dd41f35ad695a0ce1376f07474cda4a4eabccc93a7633a3b299a18761449403ddece126b496ed646faf72f1feb79d02226e44062f871c56822fdd1ce04f7768ff30f09721b07f924f155aac2368990c41abfec060db49ffd80d9c4df48bc7825fdb92a49353b72ac7edf05ecaf0c519866bf44ba462fd5c989a6ae3e01a86b672d057d26b837e969a1f578875d92fb1d568f8e2fd077b1b9a638efaa2965e39efc785b754062303c36ffcc6caba8405d9050fac04d15bb025baea592a9905b7273ca61e0aac766b02a4a7dea3a8fcb06dcfa8870efcbb3d8a728223a995c5bc75ec0c0cab5111b1861c"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x2, 0x2) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110faff0000000063012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x6, @rand_addr=0x64010101}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002f40)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000800000002000000000000930100000000005f615f2e3000"], 0x0, 0x2c, 0x0, 0x1, 0x6}, 0x28) r7 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r7, 0x0, 0x400000000000000, 0x7) 733.83µs ago: executing program 2 (id=1035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffeea) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{}, [@TCA_NETEM_LOSS={0x34, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x7f, 0x1, 0x4000, 0xfffff3e3}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xa0}}, 0x0) 0s ago: executing program 2 (id=1036): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20000087}, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4) kernel console output (not intermixed with test programs): : Interface deactivated: batadv_slave_1 [ 77.177168][ T5032] loop4: detected capacity change from 0 to 512 [ 77.209571][ T5010] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.218712][ T5010] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.218789][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.227799][ T5010] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.241617][ T5032] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.249933][ T5010] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.287762][ T5032] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.474: Allocating blocks 18-19 which overlap fs metadata [ 77.320042][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.332985][ T5013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.341486][ T5013] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.351320][ T5013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.368613][ T5019] FAULT_INJECTION: forcing a failure. [ 77.368613][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 77.381481][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.1.471 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 77.381505][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.381517][ T5019] Call Trace: [ 77.381578][ T5019] [ 77.381614][ T5019] __dump_stack+0x1d/0x30 [ 77.381633][ T5019] dump_stack_lvl+0xe8/0x140 [ 77.381684][ T5019] dump_stack+0x15/0x1b [ 77.381698][ T5019] should_fail_ex+0x265/0x280 [ 77.381724][ T5019] should_failslab+0x8c/0xb0 [ 77.381743][ T5019] __kmalloc_node_noprof+0xa9/0x410 [ 77.381846][ T5019] ? x64_sys_call+0x2999/0x2fb0 [ 77.381875][ T5019] ? qdisc_alloc+0x65/0x440 [ 77.381910][ T5019] qdisc_alloc+0x65/0x440 [ 77.381952][ T5019] qdisc_create_dflt+0x7f/0x2d0 [ 77.381979][ T5019] taprio_init+0x286/0x5f0 [ 77.381999][ T5019] ? __pfx_taprio_init+0x10/0x10 [ 77.382016][ T5019] qdisc_create+0x58e/0x9e0 [ 77.382109][ T5019] tc_modify_qdisc+0xe2c/0x1380 [ 77.382138][ T5019] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 77.382160][ T5019] rtnetlink_rcv_msg+0x657/0x6d0 [ 77.382182][ T5019] netlink_rcv_skb+0x123/0x220 [ 77.382236][ T5019] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.382260][ T5019] rtnetlink_rcv+0x1c/0x30 [ 77.382276][ T5019] netlink_unicast+0x5a1/0x670 [ 77.382303][ T5019] netlink_sendmsg+0x58b/0x6b0 [ 77.382436][ T5019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.382465][ T5019] __sock_sendmsg+0x145/0x180 [ 77.382523][ T5019] ____sys_sendmsg+0x31e/0x4e0 [ 77.382611][ T5019] ___sys_sendmsg+0x17b/0x1d0 [ 77.382652][ T5019] __x64_sys_sendmsg+0xd4/0x160 [ 77.382720][ T5019] x64_sys_call+0x2999/0x2fb0 [ 77.382739][ T5019] do_syscall_64+0xd2/0x200 [ 77.382783][ T5019] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.382806][ T5019] ? clear_bhb_loop+0x40/0x90 [ 77.382824][ T5019] ? clear_bhb_loop+0x40/0x90 [ 77.382843][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.382894][ T5019] RIP: 0033:0x7f009320e929 [ 77.382907][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.382996][ T5019] RSP: 002b:00007f0091877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.383013][ T5019] RAX: ffffffffffffffda RBX: 00007f0093435fa0 RCX: 00007f009320e929 [ 77.383024][ T5019] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 77.383034][ T5019] RBP: 00007f0091877090 R08: 0000000000000000 R09: 0000000000000000 [ 77.383045][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.383056][ T5019] R13: 0000000000000000 R14: 00007f0093435fa0 R15: 00007fff0de689b8 [ 77.383073][ T5019] [ 77.383402][ T5028] netlink: 'syz.0.472': attribute type 298 has an invalid length. [ 77.653856][ T5036] netlink: 'syz.4.475': attribute type 298 has an invalid length. [ 77.709176][ T5045] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 77.724013][ T5046] loop2: detected capacity change from 0 to 128 [ 77.778268][ T5050] netlink: 128 bytes leftover after parsing attributes in process `syz.4.480'. [ 77.787796][ T5050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.480'. [ 77.816171][ T5054] openvswitch: netlink: Message has 6 unknown bytes. [ 77.840371][ T5056] tmpfs: Bad value for 'mpol' [ 78.002970][ T29] audit: type=1400 audit(1751891744.711:2434): avc: denied { read } for pid=5051 comm="syz.2.482" name="file0" dev="tmpfs" ino=544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.089597][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.171779][ T5068] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.193185][ T5069] loop3: detected capacity change from 0 to 512 [ 78.217110][ T5069] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.295934][ T5069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.334677][ T5069] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.390434][ T29] audit: type=1400 audit(1751891745.101:2435): avc: denied { read write } for pid=5067 comm="syz.3.487" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.437015][ T29] audit: type=1400 audit(1751891745.101:2436): avc: denied { open } for pid=5067 comm="syz.3.487" path="/21/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 78.665741][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.771265][ T5084] netlink: 'syz.3.493': attribute type 298 has an invalid length. [ 78.798458][ T5088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.817011][ T5086] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.868621][ T5086] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.896929][ T5095] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 78.917346][ T5086] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.977664][ T5086] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.012086][ T5099] loop3: detected capacity change from 0 to 128 [ 79.047086][ T5086] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.069856][ T5086] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102648][ T5086] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.111625][ T5106] FAULT_INJECTION: forcing a failure. [ 79.111625][ T5106] name failslab, interval 1, probability 0, space 0, times 0 [ 79.124380][ T5106] CPU: 1 UID: 0 PID: 5106 Comm: syz.4.501 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 79.124414][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.124430][ T5106] Call Trace: [ 79.124438][ T5106] [ 79.124447][ T5106] __dump_stack+0x1d/0x30 [ 79.124480][ T5106] dump_stack_lvl+0xe8/0x140 [ 79.124504][ T5106] dump_stack+0x15/0x1b [ 79.124521][ T5106] should_fail_ex+0x265/0x280 [ 79.124550][ T5106] ? __hw_addr_add_ex+0x162/0x440 [ 79.124589][ T5106] should_failslab+0x8c/0xb0 [ 79.124647][ T5106] __kmalloc_cache_noprof+0x4c/0x320 [ 79.124682][ T5106] ? obj_cgroup_charge_account+0xba/0x1a0 [ 79.124722][ T5106] __hw_addr_add_ex+0x162/0x440 [ 79.124830][ T5106] dev_mc_add+0x66/0xb0 [ 79.124892][ T5106] garp_init_applicant+0xeb/0x2d0 [ 79.125129][ T5106] vlan_gvrp_init_applicant+0x1c/0x30 [ 79.125177][ T5106] register_vlan_dev+0xfb/0x480 [ 79.125205][ T5106] vlan_newlink+0x32a/0x370 [ 79.125245][ T5106] ? __pfx_vlan_newlink+0x10/0x10 [ 79.125312][ T5106] rtnl_newlink_create+0x1b9/0x620 [ 79.125378][ T5106] ? __list_del_entry_valid_or_report+0x65/0x130 [ 79.125413][ T5106] rtnl_newlink+0xf29/0x12d0 [ 79.125478][ T5106] ? __kfree_skb+0x109/0x150 [ 79.125507][ T5106] ? __rcu_read_unlock+0x4f/0x70 [ 79.125559][ T5106] ? avc_has_perm_noaudit+0x1b1/0x200 [ 79.125608][ T5106] ? selinux_capable+0x1f9/0x270 [ 79.125651][ T5106] ? security_capable+0x83/0x90 [ 79.125684][ T5106] ? ns_capable+0x7d/0xb0 [ 79.125783][ T5106] ? __pfx_rtnl_newlink+0x10/0x10 [ 79.125810][ T5106] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 79.125842][ T5106] netlink_rcv_skb+0x123/0x220 [ 79.125882][ T5106] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.126002][ T5106] rtnetlink_rcv+0x1c/0x30 [ 79.126031][ T5106] netlink_unicast+0x5a1/0x670 [ 79.126073][ T5106] netlink_sendmsg+0x58b/0x6b0 [ 79.126162][ T5106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.126209][ T5106] __sock_sendmsg+0x145/0x180 [ 79.126244][ T5106] ____sys_sendmsg+0x31e/0x4e0 [ 79.126338][ T5106] ___sys_sendmsg+0x17b/0x1d0 [ 79.126408][ T5106] __x64_sys_sendmsg+0xd4/0x160 [ 79.126467][ T5106] x64_sys_call+0x2999/0x2fb0 [ 79.126498][ T5106] do_syscall_64+0xd2/0x200 [ 79.126557][ T5106] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 79.126607][ T5106] ? clear_bhb_loop+0x40/0x90 [ 79.126639][ T5106] ? clear_bhb_loop+0x40/0x90 [ 79.126695][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.126726][ T5106] RIP: 0033:0x7f65b73ce929 [ 79.126747][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.126773][ T5106] RSP: 002b:00007f65b5a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.126799][ T5106] RAX: ffffffffffffffda RBX: 00007f65b75f5fa0 RCX: 00007f65b73ce929 [ 79.126847][ T5106] RDX: 0000000000008000 RSI: 0000200000000840 RDI: 0000000000000005 [ 79.126864][ T5106] RBP: 00007f65b5a37090 R08: 0000000000000000 R09: 0000000000000000 [ 79.126882][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.126903][ T5106] R13: 0000000000000000 R14: 00007f65b75f5fa0 R15: 00007fff47cc0008 [ 79.126929][ T5106] [ 79.173365][ T5086] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.238440][ T5113] netlink: 'syz.4.506': attribute type 298 has an invalid length. [ 79.588451][ T5115] loop2: detected capacity change from 0 to 128 [ 79.705883][ T5139] x_tables: unsorted underflow at hook 2 [ 79.765290][ T5142] serio: Serial port ptm0 [ 79.828959][ T5134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 80.038165][ T5152] netlink: 'syz.2.518': attribute type 13 has an invalid length. [ 80.052309][ T5134] bridge0: port 3(macvlan2) entered blocking state [ 80.059716][ T5134] bridge0: port 3(macvlan2) entered disabled state [ 80.067430][ T3402] usb 5-1: enqueue for inactive port 0 [ 80.074178][ T3402] usb 5-1: enqueue for inactive port 0 [ 80.080255][ T5134] macvlan2: entered allmulticast mode [ 80.086382][ T5134] bridge0: entered allmulticast mode [ 80.094433][ T5134] macvlan2: left allmulticast mode [ 80.099761][ T5134] bridge0: left allmulticast mode [ 80.125739][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 80.125757][ T29] audit: type=1400 audit(1751891746.831:2547): avc: denied { create } for pid=5151 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.152462][ T3402] vhci_hcd: vhci_device speed not set [ 80.175971][ T5152] gretap0: refused to change device tx_queue_len [ 80.182429][ T5152] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 80.182874][ T29] audit: type=1326 audit(1751891746.891:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.222192][ T29] audit: type=1326 audit(1751891746.891:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.246387][ T29] audit: type=1326 audit(1751891746.891:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.269785][ T29] audit: type=1326 audit(1751891746.891:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.293882][ T29] audit: type=1326 audit(1751891746.891:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.317975][ T29] audit: type=1326 audit(1751891746.891:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.341430][ T29] audit: type=1326 audit(1751891746.891:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.365570][ T29] audit: type=1326 audit(1751891746.891:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.389859][ T29] audit: type=1326 audit(1751891746.891:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5151 comm="syz.2.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b6473e929 code=0x7ffc0000 [ 80.498018][ T5160] loop0: detected capacity change from 0 to 512 [ 80.512876][ T5160] EXT4-fs: Mount option(s) incompatible with ext2 [ 80.650022][ T5169] loop3: detected capacity change from 0 to 1024 [ 80.681843][ T5169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.720565][ T5126] lo speed is unknown, defaulting to 1000 [ 81.431407][ T5199] loop0: detected capacity change from 0 to 512 [ 81.447790][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.460430][ T5199] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.501780][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.512540][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.528681][ T5203] xt_nfacct: accounting object `syz0' does not exists [ 81.538854][ T5203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.536'. [ 81.612204][ T5208] netlink: 268 bytes leftover after parsing attributes in process `syz.0.537'. [ 81.685389][ T5217] FAULT_INJECTION: forcing a failure. [ 81.685389][ T5217] name failslab, interval 1, probability 0, space 0, times 0 [ 81.698133][ T5217] CPU: 0 UID: 0 PID: 5217 Comm: syz.0.541 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 81.698237][ T5217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.698253][ T5217] Call Trace: [ 81.698266][ T5217] [ 81.698275][ T5217] __dump_stack+0x1d/0x30 [ 81.698301][ T5217] dump_stack_lvl+0xe8/0x140 [ 81.698324][ T5217] dump_stack+0x15/0x1b [ 81.698355][ T5217] should_fail_ex+0x265/0x280 [ 81.698391][ T5217] should_failslab+0x8c/0xb0 [ 81.698483][ T5217] kmem_cache_alloc_node_noprof+0x57/0x320 [ 81.698514][ T5217] ? __alloc_skb+0x101/0x320 [ 81.698589][ T5217] __alloc_skb+0x101/0x320 [ 81.698624][ T5217] netlink_alloc_large_skb+0xba/0xf0 [ 81.698662][ T5217] netlink_sendmsg+0x3cf/0x6b0 [ 81.698704][ T5217] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.698840][ T5217] __sock_sendmsg+0x145/0x180 [ 81.698941][ T5217] ____sys_sendmsg+0x31e/0x4e0 [ 81.698986][ T5217] ___sys_sendmsg+0x17b/0x1d0 [ 81.699061][ T5217] __x64_sys_sendmsg+0xd4/0x160 [ 81.699171][ T5217] x64_sys_call+0x2999/0x2fb0 [ 81.699236][ T5217] do_syscall_64+0xd2/0x200 [ 81.699283][ T5217] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.699316][ T5217] ? clear_bhb_loop+0x40/0x90 [ 81.699342][ T5217] ? clear_bhb_loop+0x40/0x90 [ 81.699430][ T5217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.699457][ T5217] RIP: 0033:0x7f3c4263e929 [ 81.699478][ T5217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.699501][ T5217] RSP: 002b:00007f3c40ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.699596][ T5217] RAX: ffffffffffffffda RBX: 00007f3c42865fa0 RCX: 00007f3c4263e929 [ 81.699612][ T5217] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 81.699627][ T5217] RBP: 00007f3c40ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 81.699720][ T5217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.699735][ T5217] R13: 0000000000000000 R14: 00007f3c42865fa0 R15: 00007ffd6201dc88 [ 81.699758][ T5217] [ 81.963847][ T5229] FAULT_INJECTION: forcing a failure. [ 81.963847][ T5229] name failslab, interval 1, probability 0, space 0, times 0 [ 81.976765][ T5229] CPU: 1 UID: 0 PID: 5229 Comm: syz.4.546 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 81.976806][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.976821][ T5229] Call Trace: [ 81.976828][ T5229] [ 81.976837][ T5229] __dump_stack+0x1d/0x30 [ 81.976860][ T5229] dump_stack_lvl+0xe8/0x140 [ 81.976883][ T5229] dump_stack+0x15/0x1b [ 81.976903][ T5229] should_fail_ex+0x265/0x280 [ 81.976964][ T5229] should_failslab+0x8c/0xb0 [ 81.976993][ T5229] kmem_cache_alloc_node_noprof+0x57/0x320 [ 81.977099][ T5229] ? __alloc_skb+0x101/0x320 [ 81.977132][ T5229] __alloc_skb+0x101/0x320 [ 81.977168][ T5230] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 81.977161][ T5229] ? pfkey_broadcast+0x223/0x240 [ 81.977269][ T5229] pfkey_sendmsg+0x7e4/0x900 [ 81.977331][ T5229] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 81.977515][ T5229] __sock_sendmsg+0x145/0x180 [ 81.977550][ T5229] ____sys_sendmsg+0x345/0x4e0 [ 81.977683][ T5229] ___sys_sendmsg+0x17b/0x1d0 [ 81.977796][ T5229] __sys_sendmmsg+0x178/0x300 [ 81.977924][ T5229] __x64_sys_sendmmsg+0x57/0x70 [ 81.977968][ T5229] x64_sys_call+0x2f2f/0x2fb0 [ 81.978026][ T5229] do_syscall_64+0xd2/0x200 [ 81.978084][ T5229] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.978173][ T5229] ? clear_bhb_loop+0x40/0x90 [ 81.978203][ T5229] ? clear_bhb_loop+0x40/0x90 [ 81.978234][ T5229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.978263][ T5229] RIP: 0033:0x7f65b73ce929 [ 81.978284][ T5229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.978375][ T5229] RSP: 002b:00007f65b5a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.978447][ T5229] RAX: ffffffffffffffda RBX: 00007f65b75f5fa0 RCX: 00007f65b73ce929 [ 81.978465][ T5229] RDX: 00000000000003ef RSI: 0000200000000180 RDI: 0000000000000004 [ 81.978482][ T5229] RBP: 00007f65b5a37090 R08: 0000000000000000 R09: 0000000000000000 [ 81.978499][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.978516][ T5229] R13: 0000000000000000 R14: 00007f65b75f5fa0 R15: 00007fff47cc0008 [ 81.978543][ T5229] [ 82.420043][ T5248] loop4: detected capacity change from 0 to 512 [ 82.426776][ T5248] EXT4-fs: inline encryption not supported [ 82.432890][ T5248] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 82.901783][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 83.112068][ T5276] IPVS: set_ctl: invalid protocol: 60 172.30.1.2:20001 [ 83.137647][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 83.172739][ T5280] xt_socket: unknown flags 0xc [ 83.235817][ T5284] UHID_CREATE from different security context by process 315 (syz.1.566), this is not allowed. [ 83.410584][ T5300] netlink: 'syz.4.574': attribute type 298 has an invalid length. [ 83.736303][ T5312] netlink: 128 bytes leftover after parsing attributes in process `syz.0.578'. [ 83.745422][ T5312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.578'. [ 84.044124][ T5324] loop3: detected capacity change from 0 to 164 [ 84.052940][ T5324] ISOFS: unable to read i-node block [ 84.059394][ T5324] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 84.071063][ T5324] isofs_fill_super: get root inode failed [ 84.102036][ T5330] netlink: 'syz.3.586': attribute type 298 has an invalid length. [ 84.154898][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.588'. [ 84.212182][ T5335] lo speed is unknown, defaulting to 1000 [ 84.329816][ T5350] netlink: 'syz.2.593': attribute type 1 has an invalid length. [ 84.342924][ T5341] loop3: detected capacity change from 0 to 164 [ 84.347422][ T5350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.356641][ T5341] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 84.473923][ T5363] netlink: 'syz.2.598': attribute type 298 has an invalid length. [ 84.668696][ T5376] loop2: detected capacity change from 0 to 512 [ 84.675881][ T5376] /dev/loop2: Can't open blockdev [ 84.681931][ T5376] FAULT_INJECTION: forcing a failure. [ 84.681931][ T5376] name failslab, interval 1, probability 0, space 0, times 0 [ 84.695915][ T5376] CPU: 1 UID: 0 PID: 5376 Comm: syz.2.603 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 84.695944][ T5376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.695960][ T5376] Call Trace: [ 84.695966][ T5376] [ 84.695976][ T5376] __dump_stack+0x1d/0x30 [ 84.695999][ T5376] dump_stack_lvl+0xe8/0x140 [ 84.696053][ T5376] dump_stack+0x15/0x1b [ 84.696069][ T5376] should_fail_ex+0x265/0x280 [ 84.696103][ T5376] should_failslab+0x8c/0xb0 [ 84.696130][ T5376] kmem_cache_alloc_node_noprof+0x57/0x320 [ 84.696242][ T5376] ? __alloc_skb+0x101/0x320 [ 84.696356][ T5376] __alloc_skb+0x101/0x320 [ 84.696389][ T5376] ? audit_log_start+0x365/0x6c0 [ 84.696428][ T5376] audit_log_start+0x380/0x6c0 [ 84.696458][ T5376] ? should_fail_ex+0xdb/0x280 [ 84.696554][ T5376] audit_seccomp+0x48/0x100 [ 84.696584][ T5376] ? __seccomp_filter+0x68c/0x10d0 [ 84.696632][ T5376] __seccomp_filter+0x69d/0x10d0 [ 84.696660][ T5376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.696759][ T5376] ? vfs_read+0x47f/0x6f0 [ 84.696851][ T5376] ? __rcu_read_unlock+0x4f/0x70 [ 84.696876][ T5376] ? __fget_files+0x184/0x1c0 [ 84.696951][ T5376] __secure_computing+0x82/0x150 [ 84.696973][ T5376] syscall_trace_enter+0xcf/0x1e0 [ 84.696997][ T5376] do_syscall_64+0xac/0x200 [ 84.697099][ T5376] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 84.697206][ T5376] ? clear_bhb_loop+0x40/0x90 [ 84.697228][ T5376] ? clear_bhb_loop+0x40/0x90 [ 84.697249][ T5376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.697270][ T5376] RIP: 0033:0x7f8b6473d3df [ 84.697284][ T5376] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 84.697321][ T5376] RSP: 002b:00007f8b62da7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 84.697345][ T5376] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b6473d3df [ 84.697361][ T5376] RDX: 0000000000000001 RSI: 00007f8b62da70a0 RDI: 0000000000000005 [ 84.697376][ T5376] RBP: 00007f8b62da7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.697389][ T5376] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 84.697400][ T5376] R13: 0000000000000000 R14: 00007f8b64965fa0 R15: 00007ffeaf2688e8 [ 84.697448][ T5376] [ 84.965296][ T5380] pim6reg1: entered promiscuous mode [ 84.970879][ T5380] pim6reg1: entered allmulticast mode [ 84.978767][ T5380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 84.978769][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.605'. [ 84.978840][ T5381] bridge_slave_0: left allmulticast mode [ 84.978855][ T5381] bridge_slave_0: left promiscuous mode [ 85.008643][ T5381] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.125334][ T5392] netlink: 'syz.3.610': attribute type 298 has an invalid length. [ 85.251278][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 85.251299][ T29] audit: type=1400 audit(1751891980.945:2924): avc: denied { create } for pid=5398 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.300823][ T5403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 85.327786][ T29] audit: type=1400 audit(1751891980.955:2925): avc: denied { module_request } for pid=5398 comm="syz.4.612" kmod="bpf_preload" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.350578][ T29] audit: type=1400 audit(1751891981.005:2926): avc: denied { mount } for pid=5398 comm="syz.4.612" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.372266][ T29] audit: type=1400 audit(1751891981.025:2927): avc: denied { create } for pid=5402 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.393252][ T29] audit: type=1400 audit(1751891981.025:2928): avc: denied { write } for pid=5402 comm="syz.2.613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.413662][ T29] audit: type=1400 audit(1751891981.025:2929): avc: denied { read } for pid=5398 comm=ACED name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.437052][ T29] audit: type=1400 audit(1751891981.025:2930): avc: denied { open } for pid=5398 comm=ACED path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.460198][ T29] audit: type=1400 audit(1751891981.025:2931): avc: denied { ioctl } for pid=5398 comm=ACED path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.484762][ T29] audit: type=1400 audit(1751891981.025:2932): avc: denied { write } for pid=5398 comm=ACED scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.505790][ T29] audit: type=1400 audit(1751891981.065:2933): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.547837][ T5409] lo speed is unknown, defaulting to 1000 [ 85.558463][ T5414] netlink: 'syz.1.617': attribute type 16 has an invalid length. [ 85.566266][ T5414] netlink: 'syz.1.617': attribute type 17 has an invalid length. [ 85.590935][ T5414] FAULT_INJECTION: forcing a failure. [ 85.590935][ T5414] name failslab, interval 1, probability 0, space 0, times 0 [ 85.603696][ T5414] CPU: 0 UID: 0 PID: 5414 Comm: syz.1.617 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 85.603786][ T5414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.603802][ T5414] Call Trace: [ 85.603810][ T5414] [ 85.603820][ T5414] __dump_stack+0x1d/0x30 [ 85.603899][ T5414] dump_stack_lvl+0xe8/0x140 [ 85.603918][ T5414] dump_stack+0x15/0x1b [ 85.603986][ T5414] should_fail_ex+0x265/0x280 [ 85.604024][ T5414] should_failslab+0x8c/0xb0 [ 85.604050][ T5414] __kmalloc_noprof+0xa5/0x3e0 [ 85.604113][ T5414] ? resize+0x1da/0x1430 [ 85.604137][ T5414] resize+0x1da/0x1430 [ 85.604158][ T5414] ? should_fail_ex+0xdb/0x280 [ 85.604187][ T5414] ? fib_insert_alias+0x291/0x770 [ 85.604207][ T5414] ? should_failslab+0x8c/0xb0 [ 85.604254][ T5414] ? put_child+0x2af/0x2d0 [ 85.604280][ T5414] fib_insert_alias+0x65a/0x770 [ 85.604383][ T5414] fib_table_insert+0x2a6/0xeb0 [ 85.604458][ T5414] ? fib_new_table+0xad/0x1c0 [ 85.604492][ T5414] fib_magic+0x19a/0x1f0 [ 85.604534][ T5414] fib_add_ifaddr+0x2ce/0x320 [ 85.604645][ T5414] fib_netdev_event+0x355/0x430 [ 85.604683][ T5414] ? __pfx_fib_netdev_event+0x10/0x10 [ 85.604718][ T5414] raw_notifier_call_chain+0x6f/0x1b0 [ 85.604740][ T5414] ? call_netdevice_notifiers_info+0x9c/0x100 [ 85.604768][ T5414] call_netdevice_notifiers_info+0xae/0x100 [ 85.604885][ T5414] __dev_notify_flags+0xff/0x1a0 [ 85.604918][ T5414] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 85.605002][ T5414] netif_change_flags+0xac/0xd0 [ 85.605031][ T5414] do_setlink+0x9d2/0x2810 [ 85.605084][ T5414] ? __schedule+0x6a8/0xb30 [ 85.605106][ T5414] ? schedule+0x5f/0xd0 [ 85.605191][ T5414] ? __list_del_entry_valid_or_report+0x65/0x130 [ 85.605223][ T5414] rtnl_newlink+0xd8b/0x12d0 [ 85.605257][ T5414] ? xas_load+0x413/0x430 [ 85.605294][ T5414] ? xas_load+0x413/0x430 [ 85.605349][ T5414] ? __rcu_read_unlock+0x4f/0x70 [ 85.605394][ T5414] ? xa_load+0xb1/0xe0 [ 85.605425][ T5414] ? __kfree_skb+0x109/0x150 [ 85.605453][ T5414] ? __rcu_read_unlock+0x4f/0x70 [ 85.605478][ T5414] ? avc_has_perm_noaudit+0x1b1/0x200 [ 85.605605][ T5414] ? selinux_capable+0x1f9/0x270 [ 85.605709][ T5414] ? security_capable+0x83/0x90 [ 85.605742][ T5414] ? ns_capable+0x7d/0xb0 [ 85.605765][ T5414] ? __pfx_rtnl_newlink+0x10/0x10 [ 85.605790][ T5414] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 85.605877][ T5414] netlink_rcv_skb+0x123/0x220 [ 85.605911][ T5414] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 85.605938][ T5414] rtnetlink_rcv+0x1c/0x30 [ 85.606028][ T5414] netlink_unicast+0x5a1/0x670 [ 85.606133][ T5414] netlink_sendmsg+0x58b/0x6b0 [ 85.606175][ T5414] ? __pfx_netlink_sendmsg+0x10/0x10 [ 85.606214][ T5414] __sock_sendmsg+0x145/0x180 [ 85.606309][ T5414] ____sys_sendmsg+0x31e/0x4e0 [ 85.606343][ T5414] ___sys_sendmsg+0x17b/0x1d0 [ 85.606392][ T5414] __x64_sys_sendmsg+0xd4/0x160 [ 85.606451][ T5414] x64_sys_call+0x2999/0x2fb0 [ 85.606476][ T5414] do_syscall_64+0xd2/0x200 [ 85.606515][ T5414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 85.606575][ T5414] ? clear_bhb_loop+0x40/0x90 [ 85.606600][ T5414] ? clear_bhb_loop+0x40/0x90 [ 85.606625][ T5414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.606727][ T5414] RIP: 0033:0x7f009320e929 [ 85.606745][ T5414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.606778][ T5414] RSP: 002b:00007f0091856038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.606796][ T5414] RAX: ffffffffffffffda RBX: 00007f0093436080 RCX: 00007f009320e929 [ 85.606808][ T5414] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 85.606819][ T5414] RBP: 00007f0091856090 R08: 0000000000000000 R09: 0000000000000000 [ 85.606875][ T5414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.606914][ T5414] R13: 0000000000000000 R14: 00007f0093436080 R15: 00007fff0de689b8 [ 85.606934][ T5414] [ 86.017970][ T5416] loop0: detected capacity change from 0 to 2048 [ 86.050574][ T5416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.064920][ T5414] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.177881][ T5416] syz_tun: entered allmulticast mode [ 86.193791][ T5429] netlink: 'syz.4.621': attribute type 16 has an invalid length. [ 86.201668][ T5429] netlink: 'syz.4.621': attribute type 17 has an invalid length. [ 86.210569][ T5416] EXT4-fs error (device loop0): __ext4_iget:5379: inode #15: block 1803188595: comm syz.0.618: invalid block [ 86.268700][ T5426] lo speed is unknown, defaulting to 1000 [ 86.403260][ T5429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.408328][ T5442] FAULT_INJECTION: forcing a failure. [ 86.408328][ T5442] name failslab, interval 1, probability 0, space 0, times 0 [ 86.431363][ T5442] CPU: 0 UID: 0 PID: 5442 Comm: syz.1.624 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 86.431471][ T5442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.431546][ T5442] Call Trace: [ 86.431554][ T5442] [ 86.431564][ T5442] __dump_stack+0x1d/0x30 [ 86.431590][ T5442] dump_stack_lvl+0xe8/0x140 [ 86.431638][ T5442] dump_stack+0x15/0x1b [ 86.431658][ T5442] should_fail_ex+0x265/0x280 [ 86.431693][ T5442] should_failslab+0x8c/0xb0 [ 86.431720][ T5442] kmem_cache_alloc_node_noprof+0x57/0x320 [ 86.431761][ T5442] ? __alloc_skb+0x101/0x320 [ 86.431796][ T5442] __alloc_skb+0x101/0x320 [ 86.431830][ T5442] netlink_alloc_large_skb+0xba/0xf0 [ 86.431903][ T5442] netlink_sendmsg+0x3cf/0x6b0 [ 86.431946][ T5442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.431985][ T5442] __sock_sendmsg+0x145/0x180 [ 86.432048][ T5442] ____sys_sendmsg+0x31e/0x4e0 [ 86.432154][ T5442] ___sys_sendmsg+0x17b/0x1d0 [ 86.432233][ T5442] __x64_sys_sendmsg+0xd4/0x160 [ 86.432277][ T5442] x64_sys_call+0x2999/0x2fb0 [ 86.432302][ T5442] do_syscall_64+0xd2/0x200 [ 86.432382][ T5442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 86.432407][ T5442] ? clear_bhb_loop+0x40/0x90 [ 86.432432][ T5442] ? clear_bhb_loop+0x40/0x90 [ 86.432471][ T5442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.432506][ T5442] RIP: 0033:0x7f009320e929 [ 86.432525][ T5442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.432552][ T5442] RSP: 002b:00007f0091877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.432570][ T5442] RAX: ffffffffffffffda RBX: 00007f0093435fa0 RCX: 00007f009320e929 [ 86.432654][ T5442] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 86.432669][ T5442] RBP: 00007f0091877090 R08: 0000000000000000 R09: 0000000000000000 [ 86.432684][ T5442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.432699][ T5442] R13: 0000000000000000 R14: 00007f0093435fa0 R15: 00007fff0de689b8 [ 86.432729][ T5442] [ 86.432994][ T5415] syz_tun: left allmulticast mode [ 86.574534][ T5444] loop3: detected capacity change from 0 to 512 [ 86.621001][ T3394] lo speed is unknown, defaulting to 1000 [ 86.621062][ T3394] qyz2: Port: 1 Link ACTIVE [ 86.664061][ T3794] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 86.679031][ T3794] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 86.691389][ T3794] EXT4-fs (loop0): This should not happen!! Data will be lost [ 86.691389][ T3794] [ 86.701190][ T3794] EXT4-fs (loop0): Total free blocks count 0 [ 86.707365][ T3794] EXT4-fs (loop0): Free/Dirty block details [ 86.713407][ T3794] EXT4-fs (loop0): free_blocks=2415919104 [ 86.719343][ T3794] EXT4-fs (loop0): dirty_blocks=16 [ 86.724527][ T3794] EXT4-fs (loop0): Block reservation details [ 86.730595][ T3794] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 86.737861][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.748382][ T5449] netlink: 'syz.4.629': attribute type 298 has an invalid length. [ 86.862204][ T5462] loop0: detected capacity change from 0 to 8192 [ 86.898279][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 86.906308][ T5462] FAT-fs (loop0): Filesystem has been set read-only [ 86.912944][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 86.920816][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 86.925978][ T5465] vhci_hcd: invalid port number 96 [ 86.928694][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 86.933808][ T5465] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 86.941636][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 86.971974][ T5462] syz.0.631: attempt to access beyond end of device [ 86.971974][ T5462] loop0: rw=0, sector=65368, nr_sectors = 1 limit=8192 [ 86.985391][ T5462] Buffer I/O error on dev loop0, logical block 65368, async page read [ 86.993606][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.004726][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.012624][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.020893][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.028915][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.033888][ T5475] netlink: 128 bytes leftover after parsing attributes in process `syz.3.634'. [ 87.036777][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.036836][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.036856][ T5462] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff12) [ 87.046576][ T5474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.054760][ T5462] syz.0.631: attempt to access beyond end of device [ 87.054760][ T5462] loop0: rw=0, sector=65368, nr_sectors = 1 limit=8192 [ 87.079374][ T5474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.092440][ T5462] Buffer I/O error on dev loop0, logical block 65368, async page read [ 87.109509][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 87.134467][ T5475] usb usb1: check_ctrlrecip: process 5475 (syz.3.634) requesting ep 01 but needs 81 [ 87.144445][ T5475] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 87.195113][ T5478] loop3: detected capacity change from 0 to 1024 [ 87.205567][ T5478] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 87.216758][ T5478] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 87.222112][ T5476] lo speed is unknown, defaulting to 1000 [ 87.248540][ T5478] JBD2: no valid journal superblock found [ 87.254417][ T5478] EXT4-fs (loop3): Could not load journal inode [ 87.274829][ T5480] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.636'. [ 87.282796][ T5478] loop3: detected capacity change from 0 to 1024 [ 87.296342][ T5478] EXT4-fs: Ignoring removed orlov option [ 87.302051][ T5478] EXT4-fs: Ignoring removed nobh option [ 87.307817][ T5478] EXT4-fs: inline encryption not supported [ 87.330710][ T5478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.374173][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.464807][ T5495] loop3: detected capacity change from 0 to 512 [ 87.757932][ T5502] loop3: detected capacity change from 0 to 512 [ 87.809237][ T5502] journal_path: Lookup failure for './file0/../file0' [ 87.816107][ T5502] EXT4-fs: error: could not find journal device path [ 87.959614][ T5502] vhci_hcd: invalid port number 96 [ 87.964802][ T5502] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 87.984914][ T5506] block device autoloading is deprecated and will be removed. [ 88.126638][ T5517] netlink: 'syz.0.650': attribute type 298 has an invalid length. [ 88.208167][ T5520] loop3: detected capacity change from 0 to 512 [ 88.215201][ T5520] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.277895][ T5520] EXT4-fs (loop3): 1 truncate cleaned up [ 88.284110][ T5520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.301743][ T5520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.345494][ T5529] loop4: detected capacity change from 0 to 1024 [ 88.352200][ T5529] EXT4-fs: dax option not supported [ 88.420159][ T5536] loop4: detected capacity change from 0 to 1024 [ 88.428095][ T5536] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.441659][ T5536] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 88.442029][ T5535] vhci_hcd: invalid port number 96 [ 88.461608][ T5535] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 88.472771][ T5536] EXT4-fs (loop4): mount failed [ 88.476277][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.487221][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.601745][ T5541] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.628093][ T5541] loop3: detected capacity change from 0 to 128 [ 88.634701][ T5541] ext4: Unknown parameter 'subj_user' [ 88.695775][ T5546] loop3: detected capacity change from 0 to 164 [ 88.734376][ T5550] netlink: 'syz.3.662': attribute type 298 has an invalid length. [ 88.907873][ T5559] netlink: 'syz.2.666': attribute type 298 has an invalid length. [ 89.007887][ T5567] netlink: 'syz.2.669': attribute type 298 has an invalid length. [ 89.227884][ T5576] loop3: detected capacity change from 0 to 1024 [ 89.268245][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.269958][ T5576] netlink: 132 bytes leftover after parsing attributes in process `syz.3.673'. [ 89.520975][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.667661][ T5613] vhci_hcd: invalid port number 96 [ 89.672926][ T5613] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 89.681139][ T5613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.689881][ T5613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.982377][ T5622] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 89.991037][ T5622] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 89.999950][ T5622] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 90.033373][ T5628] loop2: detected capacity change from 0 to 512 [ 90.061470][ T5631] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.693'. [ 90.159951][ T5641] FAULT_INJECTION: forcing a failure. [ 90.159951][ T5641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.173963][ T5641] CPU: 1 UID: 0 PID: 5641 Comm: syz.4.699 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 90.174051][ T5641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.174068][ T5641] Call Trace: [ 90.174077][ T5641] [ 90.174086][ T5641] __dump_stack+0x1d/0x30 [ 90.174109][ T5641] dump_stack_lvl+0xe8/0x140 [ 90.174207][ T5641] dump_stack+0x15/0x1b [ 90.174227][ T5641] should_fail_ex+0x265/0x280 [ 90.174259][ T5641] should_fail+0xb/0x20 [ 90.174285][ T5641] should_fail_usercopy+0x1a/0x20 [ 90.174425][ T5641] _copy_from_user+0x1c/0xb0 [ 90.174447][ T5641] ___sys_sendmsg+0xc1/0x1d0 [ 90.174494][ T5641] __x64_sys_sendmsg+0xd4/0x160 [ 90.174614][ T5641] x64_sys_call+0x2999/0x2fb0 [ 90.174641][ T5641] do_syscall_64+0xd2/0x200 [ 90.174674][ T5641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.174698][ T5641] ? clear_bhb_loop+0x40/0x90 [ 90.174766][ T5641] ? clear_bhb_loop+0x40/0x90 [ 90.174785][ T5641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.174803][ T5641] RIP: 0033:0x7f65b73ce929 [ 90.174815][ T5641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.174830][ T5641] RSP: 002b:00007f65b5a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.174963][ T5641] RAX: ffffffffffffffda RBX: 00007f65b75f5fa0 RCX: 00007f65b73ce929 [ 90.174974][ T5641] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 90.174984][ T5641] RBP: 00007f65b5a37090 R08: 0000000000000000 R09: 0000000000000000 [ 90.174995][ T5641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.175005][ T5641] R13: 0000000000000000 R14: 00007f65b75f5fa0 R15: 00007fff47cc0008 [ 90.175022][ T5641] [ 90.359153][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 90.359172][ T29] audit: type=1400 audit(1751891986.065:3004): avc: denied { watch } for pid=5644 comm="syz.0.698" path="/148/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.387910][ T29] audit: type=1400 audit(1751891986.075:3005): avc: denied { execute } for pid=5644 comm="syz.0.698" name="file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.410130][ T29] audit: type=1400 audit(1751891986.075:3006): avc: denied { execute_no_trans } for pid=5644 comm="syz.0.698" path="/148/file0" dev="tmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 90.458302][ T5652] loop4: detected capacity change from 0 to 512 [ 90.566148][ T5662] loop0: detected capacity change from 0 to 1764 [ 90.574830][ T29] audit: type=1326 audit(1751891986.275:3007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 90.599816][ T5664] FAULT_INJECTION: forcing a failure. [ 90.599816][ T5664] name failslab, interval 1, probability 0, space 0, times 0 [ 90.612717][ T5664] CPU: 1 UID: 0 PID: 5664 Comm: syz.1.708 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 90.612852][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.612870][ T5664] Call Trace: [ 90.612878][ T5664] [ 90.612888][ T5664] __dump_stack+0x1d/0x30 [ 90.612914][ T5664] dump_stack_lvl+0xe8/0x140 [ 90.612938][ T5664] dump_stack+0x15/0x1b [ 90.613024][ T5664] should_fail_ex+0x265/0x280 [ 90.613061][ T5664] should_failslab+0x8c/0xb0 [ 90.613130][ T5664] kmem_cache_alloc_node_noprof+0x57/0x320 [ 90.613158][ T5664] ? __alloc_skb+0x101/0x320 [ 90.613253][ T5664] __alloc_skb+0x101/0x320 [ 90.613307][ T5664] ? audit_log_start+0x365/0x6c0 [ 90.613345][ T5664] audit_log_start+0x380/0x6c0 [ 90.613408][ T5664] audit_seccomp+0x48/0x100 [ 90.613439][ T5664] ? __seccomp_filter+0x68c/0x10d0 [ 90.613461][ T5664] __seccomp_filter+0x69d/0x10d0 [ 90.613551][ T5664] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 90.613590][ T5664] ? vfs_write+0x75e/0x8e0 [ 90.613625][ T5664] ? __rcu_read_unlock+0x4f/0x70 [ 90.613631][ T29] audit: type=1326 audit(1751891986.275:3008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 90.613653][ T5664] ? __fget_files+0x184/0x1c0 [ 90.613723][ T5664] __secure_computing+0x82/0x150 [ 90.613755][ T5664] syscall_trace_enter+0xcf/0x1e0 [ 90.613852][ T5664] do_syscall_64+0xac/0x200 [ 90.613916][ T5664] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 90.614022][ T5664] ? clear_bhb_loop+0x40/0x90 [ 90.614092][ T5664] ? clear_bhb_loop+0x40/0x90 [ 90.614129][ T5664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.614160][ T5664] RIP: 0033:0x7f009320e929 [ 90.614181][ T5664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.614207][ T5664] RSP: 002b:00007f0091877038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 90.614233][ T5664] RAX: ffffffffffffffda RBX: 00007f0093435fa0 RCX: 00007f009320e929 [ 90.614272][ T5664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 90.614289][ T5664] RBP: 00007f0091877090 R08: 0000000000000000 R09: 0000000000000000 [ 90.614307][ T5664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.614324][ T5664] R13: 0000000000000000 R14: 00007f0093435fa0 R15: 00007fff0de689b8 [ 90.614351][ T5664] [ 90.614377][ T5664] audit: audit_lost=5 audit_rate_limit=0 audit_backlog_limit=64 [ 90.624310][ T29] audit: type=1326 audit(1751891986.275:3009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 90.624441][ T29] audit: type=1326 audit(1751891986.315:3010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 90.624476][ T29] audit: type=1326 audit(1751891986.315:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5663 comm="syz.1.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f009320d290 code=0x7ffc0000 [ 90.635404][ T5664] audit: out of memory in audit_log_start [ 90.989841][ T5674] validate_nla: 1 callbacks suppressed [ 90.989860][ T5674] netlink: 'syz.2.714': attribute type 298 has an invalid length. [ 91.033653][ T5679] netlink: 'syz.4.716': attribute type 21 has an invalid length. [ 91.042387][ T5679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.716'. [ 91.057787][ T5679] loop4: detected capacity change from 0 to 512 [ 91.064728][ T5681] loop3: detected capacity change from 0 to 764 [ 91.073783][ T5681] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 91.085851][ T5676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.715'. [ 91.100943][ T5676] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5676 comm=syz.1.715 [ 91.100972][ T5679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.128353][ T5681] syz.3.711 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.150710][ T5681] SELinux: security_context_str_to_sid () failed with errno=-22 [ 91.159385][ T5679] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.198323][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.211716][ T5695] loop3: detected capacity change from 0 to 512 [ 91.219253][ T5695] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 91.230169][ T5695] EXT4-fs (loop3): orphan cleanup on readonly fs [ 91.238763][ T5695] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.719: Block bitmap for bg 0 marked uninitialized [ 91.253420][ T5695] EXT4-fs (loop3): Remounting filesystem read-only [ 91.262891][ T5695] EXT4-fs (loop3): 1 orphan inode deleted [ 91.269242][ T5695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 91.425460][ T5714] netlink: 'syz.2.727': attribute type 298 has an invalid length. [ 91.496641][ T5717] netlink: 'syz.2.728': attribute type 298 has an invalid length. [ 91.587317][ T5724] futex_wake_op: syz.2.730 tries to shift op by -1; fix this program [ 91.615996][ T5726] openvswitch: netlink: Message has 6 unknown bytes. [ 91.750322][ T5730] FAULT_INJECTION: forcing a failure. [ 91.750322][ T5730] name failslab, interval 1, probability 0, space 0, times 0 [ 91.763564][ T5730] CPU: 1 UID: 0 PID: 5730 Comm: syz.2.733 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 91.763660][ T5730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.763671][ T5730] Call Trace: [ 91.763677][ T5730] [ 91.763684][ T5730] __dump_stack+0x1d/0x30 [ 91.763762][ T5730] dump_stack_lvl+0xe8/0x140 [ 91.763796][ T5730] dump_stack+0x15/0x1b [ 91.763809][ T5730] should_fail_ex+0x265/0x280 [ 91.763836][ T5730] should_failslab+0x8c/0xb0 [ 91.763854][ T5730] kmem_cache_alloc_node_noprof+0x57/0x320 [ 91.763885][ T5730] ? __alloc_skb+0x101/0x320 [ 91.763910][ T5730] __alloc_skb+0x101/0x320 [ 91.763997][ T5730] netlink_ack+0xfd/0x500 [ 91.764039][ T5730] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 91.764129][ T5730] netlink_rcv_skb+0x192/0x220 [ 91.764155][ T5730] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.764182][ T5730] genl_rcv+0x28/0x40 [ 91.764207][ T5730] netlink_unicast+0x5a1/0x670 [ 91.764257][ T5730] netlink_sendmsg+0x58b/0x6b0 [ 91.764294][ T5730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.764324][ T5730] __sock_sendmsg+0x145/0x180 [ 91.764393][ T5730] ____sys_sendmsg+0x31e/0x4e0 [ 91.764426][ T5730] ___sys_sendmsg+0x17b/0x1d0 [ 91.764507][ T5730] __x64_sys_sendmsg+0xd4/0x160 [ 91.764540][ T5730] x64_sys_call+0x2999/0x2fb0 [ 91.764558][ T5730] do_syscall_64+0xd2/0x200 [ 91.764587][ T5730] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 91.764669][ T5730] ? clear_bhb_loop+0x40/0x90 [ 91.764687][ T5730] ? clear_bhb_loop+0x40/0x90 [ 91.764705][ T5730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.764756][ T5730] RIP: 0033:0x7f8b6473e929 [ 91.764770][ T5730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.764784][ T5730] RSP: 002b:00007f8b62da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.764824][ T5730] RAX: ffffffffffffffda RBX: 00007f8b64965fa0 RCX: 00007f8b6473e929 [ 91.764835][ T5730] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 91.764845][ T5730] RBP: 00007f8b62da7090 R08: 0000000000000000 R09: 0000000000000000 [ 91.764901][ T5730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.764911][ T5730] R13: 0000000000000000 R14: 00007f8b64965fa0 R15: 00007ffeaf2688e8 [ 91.764929][ T5730] [ 92.035232][ T5735] netlink: 'syz.2.735': attribute type 298 has an invalid length. [ 92.090998][ T5741] openvswitch: netlink: Message has 6 unknown bytes. [ 92.121146][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.132498][ T5746] usb usb1: check_ctrlrecip: process 5746 (syz.0.740) requesting ep 01 but needs 81 [ 92.142083][ T5746] vhci_hcd: default hub control req: 020f v0004 i0001 l0 [ 92.167765][ T5752] loop3: detected capacity change from 0 to 128 [ 92.171656][ T5753] loop2: detected capacity change from 0 to 256 [ 92.191623][ T5753] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.251957][ T5756] loop0: detected capacity change from 0 to 764 [ 92.259301][ T5756] iso9660: Unknown parameter 'ƒÝ¦ãœ÷ÆãC®Ö×^üIGþ`ËÈ€ùi¯73©!HFÅ™}Gõ–‘vèëAŽ”.·Ê&Šê#3nl [ 92.259301][ T5756] ‹Šœ' [ 92.471568][ T5752] syz.3.742: attempt to access beyond end of device [ 92.471568][ T5752] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 92.485242][ T5752] syz.3.742: attempt to access beyond end of device [ 92.485242][ T5752] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 92.498958][ T5752] syz.3.742: attempt to access beyond end of device [ 92.498958][ T5752] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 92.512521][ T5752] syz.3.742: attempt to access beyond end of device [ 92.512521][ T5752] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 92.526187][ T5752] syz.3.742: attempt to access beyond end of device [ 92.526187][ T5752] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 92.792456][ T5748] syz.1.741 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 92.806628][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: syz.1.741 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 92.806711][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.806754][ T5748] Call Trace: [ 92.806762][ T5748] [ 92.806837][ T5748] __dump_stack+0x1d/0x30 [ 92.806865][ T5748] dump_stack_lvl+0xe8/0x140 [ 92.806890][ T5748] dump_stack+0x15/0x1b [ 92.806909][ T5748] dump_header+0x81/0x220 [ 92.806954][ T5748] oom_kill_process+0x334/0x3f0 [ 92.806986][ T5748] out_of_memory+0x979/0xb80 [ 92.807023][ T5748] try_charge_memcg+0x5e6/0x9e0 [ 92.807133][ T5748] obj_cgroup_charge_pages+0xa6/0x150 [ 92.807165][ T5748] __memcg_kmem_charge_page+0x9f/0x170 [ 92.807204][ T5748] __alloc_frozen_pages_noprof+0x188/0x360 [ 92.807247][ T5748] alloc_pages_mpol+0xb3/0x250 [ 92.807279][ T5748] alloc_pages_noprof+0x90/0x130 [ 92.807308][ T5748] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 92.807399][ T5748] __kvmalloc_node_noprof+0x30f/0x4e0 [ 92.807433][ T5748] ? ip_set_alloc+0x1f/0x30 [ 92.807460][ T5748] ? ip_set_alloc+0x1f/0x30 [ 92.807554][ T5748] ? __kmalloc_cache_noprof+0x189/0x320 [ 92.807654][ T5748] ip_set_alloc+0x1f/0x30 [ 92.807690][ T5748] hash_netiface_create+0x282/0x740 [ 92.807730][ T5748] ? __pfx_hash_netiface_create+0x10/0x10 [ 92.807767][ T5748] ip_set_create+0x3cc/0x960 [ 92.807894][ T5748] ? __nla_parse+0x40/0x60 [ 92.807935][ T5748] nfnetlink_rcv_msg+0x4c6/0x590 [ 92.807999][ T5748] ? should_fail_ex+0x30/0x280 [ 92.808078][ T5748] ? selinux_capable+0x1f9/0x270 [ 92.808172][ T5748] netlink_rcv_skb+0x123/0x220 [ 92.808256][ T5748] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 92.808296][ T5748] nfnetlink_rcv+0x16b/0x1690 [ 92.808323][ T5748] ? __kfree_skb+0x109/0x150 [ 92.808351][ T5748] ? nlmon_xmit+0x4f/0x60 [ 92.808374][ T5748] ? consume_skb+0x49/0x150 [ 92.808462][ T5748] ? nlmon_xmit+0x4f/0x60 [ 92.808487][ T5748] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 92.808532][ T5748] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 92.808616][ T5748] ? __dev_queue_xmit+0x182/0x1fb0 [ 92.808654][ T5748] ? ref_tracker_free+0x37d/0x3e0 [ 92.808709][ T5748] ? __netlink_deliver_tap+0x4dc/0x500 [ 92.808767][ T5748] netlink_unicast+0x5a1/0x670 [ 92.808861][ T5748] netlink_sendmsg+0x58b/0x6b0 [ 92.808908][ T5748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.808987][ T5748] __sock_sendmsg+0x145/0x180 [ 92.809018][ T5748] ____sys_sendmsg+0x31e/0x4e0 [ 92.809142][ T5748] ___sys_sendmsg+0x17b/0x1d0 [ 92.809270][ T5748] __x64_sys_sendmsg+0xd4/0x160 [ 92.809391][ T5748] x64_sys_call+0x2999/0x2fb0 [ 92.809420][ T5748] do_syscall_64+0xd2/0x200 [ 92.809476][ T5748] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 92.809505][ T5748] ? clear_bhb_loop+0x40/0x90 [ 92.809527][ T5748] ? clear_bhb_loop+0x40/0x90 [ 92.809622][ T5748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.809644][ T5748] RIP: 0033:0x7f009320e929 [ 92.809658][ T5748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.809676][ T5748] RSP: 002b:00007f0091877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.809694][ T5748] RAX: ffffffffffffffda RBX: 00007f0093435fa0 RCX: 00007f009320e929 [ 92.809706][ T5748] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 92.809749][ T5748] RBP: 00007f0093290b39 R08: 0000000000000000 R09: 0000000000000000 [ 92.809764][ T5748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.809859][ T5748] R13: 0000000000000000 R14: 00007f0093435fa0 R15: 00007fff0de689b8 [ 92.809885][ T5748] [ 92.809893][ T5748] memory: usage 307200kB, limit 307200kB, failcnt 1095 [ 93.166432][ T5748] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 93.166454][ T5748] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 93.166470][ T5748] Memory cgroup stats for /syz1: [ 93.182018][ T5748] cache 12288 [ 93.190357][ T5748] rss 4096 [ 93.193396][ T5748] shmem 0 [ 93.196347][ T5748] mapped_file 12288 [ 93.200149][ T5748] dirty 0 [ 93.203109][ T5748] writeback 0 [ 93.206494][ T5748] workingset_refault_anon 275 [ 93.211171][ T5748] workingset_refault_file 993 [ 93.215899][ T5748] swap 212992 [ 93.219194][ T5748] swapcached 4096 [ 93.222821][ T5748] pgpgin 78230 [ 93.226206][ T5748] pgpgout 78226 [ 93.229700][ T5748] pgfault 45119 [ 93.233153][ T5748] pgmajfault 240 [ 93.236803][ T5748] inactive_anon 4096 [ 93.240788][ T5748] active_anon 0 [ 93.244238][ T5748] inactive_file 0 [ 93.247929][ T5748] active_file 12288 [ 93.251848][ T5748] unevictable 0 [ 93.255304][ T5748] hierarchical_memory_limit 314572800 [ 93.260697][ T5748] hierarchical_memsw_limit 9223372036854771712 [ 93.266916][ T5748] total_cache 12288 [ 93.270715][ T5748] total_rss 4096 [ 93.274279][ T5748] total_shmem 0 [ 93.277814][ T5748] total_mapped_file 12288 [ 93.282139][ T5748] total_dirty 0 [ 93.285709][ T5748] total_writeback 0 [ 93.289520][ T5748] total_workingset_refault_anon 275 [ 93.294711][ T5748] total_workingset_refault_file 993 [ 93.299972][ T5748] total_swap 212992 [ 93.303771][ T5748] total_swapcached 4096 [ 93.307994][ T5748] total_pgpgin 78230 [ 93.311895][ T5748] total_pgpgout 78226 [ 93.315890][ T5748] total_pgfault 45119 [ 93.319869][ T5748] total_pgmajfault 240 [ 93.323962][ T5748] total_inactive_anon 4096 [ 93.328485][ T5748] total_active_anon 0 [ 93.332530][ T5748] total_inactive_file 0 [ 93.336692][ T5748] total_active_file 12288 [ 93.341088][ T5748] total_unevictable 0 [ 93.345072][ T5748] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.741,pid=5747,uid=0 [ 93.359673][ T5748] Memory cgroup out of memory: Killed process 5747 (syz.1.741) total-vm:93888kB, anon-rss:1068kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 93.404608][ T5776] FAULT_INJECTION: forcing a failure. [ 93.404608][ T5776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.417914][ T5776] CPU: 0 UID: 0 PID: 5776 Comm: syz.3.748 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 93.417983][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.417996][ T5776] Call Trace: [ 93.418003][ T5776] [ 93.418012][ T5776] __dump_stack+0x1d/0x30 [ 93.418039][ T5776] dump_stack_lvl+0xe8/0x140 [ 93.418062][ T5776] dump_stack+0x15/0x1b [ 93.418123][ T5776] should_fail_ex+0x265/0x280 [ 93.418152][ T5776] should_fail+0xb/0x20 [ 93.418184][ T5776] should_fail_usercopy+0x1a/0x20 [ 93.418222][ T5776] _copy_to_user+0x20/0xa0 [ 93.418246][ T5776] simple_read_from_buffer+0xb5/0x130 [ 93.418284][ T5776] proc_fail_nth_read+0x100/0x140 [ 93.418330][ T5776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.418391][ T5776] vfs_read+0x19d/0x6f0 [ 93.418440][ T5776] ? __rcu_read_unlock+0x4f/0x70 [ 93.418460][ T5776] ? __fget_files+0x184/0x1c0 [ 93.418486][ T5776] ksys_read+0xda/0x1a0 [ 93.418564][ T5776] __x64_sys_read+0x40/0x50 [ 93.418595][ T5776] x64_sys_call+0x2d77/0x2fb0 [ 93.418680][ T5776] do_syscall_64+0xd2/0x200 [ 93.418755][ T5776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 93.418788][ T5776] ? clear_bhb_loop+0x40/0x90 [ 93.418873][ T5776] ? clear_bhb_loop+0x40/0x90 [ 93.418933][ T5776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.418957][ T5776] RIP: 0033:0x7f7edf83d33c [ 93.418972][ T5776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.419030][ T5776] RSP: 002b:00007f7eddea7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.419050][ T5776] RAX: ffffffffffffffda RBX: 00007f7edfa65fa0 RCX: 00007f7edf83d33c [ 93.419061][ T5776] RDX: 000000000000000f RSI: 00007f7eddea70a0 RDI: 0000000000000007 [ 93.419072][ T5776] RBP: 00007f7eddea7090 R08: 0000000000000000 R09: 0000000000000000 [ 93.419084][ T5776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 93.419156][ T5776] R13: 0000000000000000 R14: 00007f7edfa65fa0 R15: 00007ffd2cba8f88 [ 93.419179][ T5776] [ 93.699563][ T5787] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 93.727949][ T5795] capability: warning: `syz.1.756' uses deprecated v2 capabilities in a way that may be insecure [ 93.738858][ T5794] loop2: detected capacity change from 0 to 164 [ 93.747982][ T5791] vhci_hcd: invalid port number 96 [ 93.753172][ T5791] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 93.762778][ T5790] vhci_hcd: invalid port number 96 [ 93.767969][ T5790] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 93.776639][ T5794] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 93.776635][ T5790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.793316][ T5791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.793578][ T5790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.806208][ T5797] bond1: entered promiscuous mode [ 93.814563][ T5797] bond1: entered allmulticast mode [ 93.820023][ T5791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.838297][ T5797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.848165][ T5797] bond1 (unregistering): Released all slaves [ 93.881722][ T5805] __nla_validate_parse: 2 callbacks suppressed [ 93.881739][ T5805] netlink: 128 bytes leftover after parsing attributes in process `syz.2.761'. [ 93.897803][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 93.916123][ T5805] usb usb1: check_ctrlrecip: process 5805 (syz.2.761) requesting ep 01 but needs 81 [ 93.926938][ T5805] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 93.963827][ T5810] loop2: detected capacity change from 0 to 2048 [ 93.997202][ T5810] loop2: p1 < > p4 [ 94.001941][ T5810] loop2: p4 size 8388608 extends beyond EOD, truncated [ 94.010660][ T5810] FAULT_INJECTION: forcing a failure. [ 94.010660][ T5810] name failslab, interval 1, probability 0, space 0, times 0 [ 94.023393][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.2.763 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 94.023496][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.023510][ T5810] Call Trace: [ 94.023518][ T5810] [ 94.023525][ T5810] __dump_stack+0x1d/0x30 [ 94.023549][ T5810] dump_stack_lvl+0xe8/0x140 [ 94.023570][ T5810] dump_stack+0x15/0x1b [ 94.023588][ T5810] should_fail_ex+0x265/0x280 [ 94.023661][ T5810] should_failslab+0x8c/0xb0 [ 94.023687][ T5810] __kmalloc_noprof+0xa5/0x3e0 [ 94.023744][ T5810] ? blkdev_direct_IO+0x50d/0xc20 [ 94.023773][ T5810] blkdev_direct_IO+0x50d/0xc20 [ 94.023812][ T5810] blkdev_direct_write+0x61/0x100 [ 94.023843][ T5810] blkdev_write_iter+0x3d2/0x4b0 [ 94.023872][ T5810] do_iter_readv_writev+0x41e/0x4c0 [ 94.023945][ T5810] vfs_writev+0x2df/0x8b0 [ 94.024049][ T5810] do_writev+0xe7/0x210 [ 94.024151][ T5810] __x64_sys_writev+0x45/0x50 [ 94.024172][ T5810] x64_sys_call+0x2006/0x2fb0 [ 94.024193][ T5810] do_syscall_64+0xd2/0x200 [ 94.024224][ T5810] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 94.024251][ T5810] ? clear_bhb_loop+0x40/0x90 [ 94.024297][ T5810] ? clear_bhb_loop+0x40/0x90 [ 94.024319][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.024355][ T5810] RIP: 0033:0x7f8b6473e929 [ 94.024372][ T5810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.024391][ T5810] RSP: 002b:00007f8b62da7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 94.024411][ T5810] RAX: ffffffffffffffda RBX: 00007f8b64965fa0 RCX: 00007f8b6473e929 [ 94.024424][ T5810] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 94.024436][ T5810] RBP: 00007f8b62da7090 R08: 0000000000000000 R09: 0000000000000000 [ 94.024484][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.024496][ T5810] R13: 0000000000000000 R14: 00007f8b64965fa0 R15: 00007ffeaf2688e8 [ 94.024516][ T5810] [ 94.276776][ T5821] loop2: detected capacity change from 0 to 128 [ 94.371945][ T5827] SELinux: failed to load policy [ 94.517939][ T5836] netlink: 'syz.1.772': attribute type 298 has an invalid length. [ 94.690436][ T5845] netlink: 7 bytes leftover after parsing attributes in process `syz.1.776'. [ 94.700552][ T5845] netlink: 76 bytes leftover after parsing attributes in process `syz.1.776'. [ 94.794806][ T4677] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 94.805832][ T4677] CPU: 1 UID: 0 PID: 4677 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 94.805867][ T4677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 94.805884][ T4677] Call Trace: [ 94.805893][ T4677] [ 94.805904][ T4677] __dump_stack+0x1d/0x30 [ 94.805928][ T4677] dump_stack_lvl+0xe8/0x140 [ 94.806012][ T4677] dump_stack+0x15/0x1b [ 94.806028][ T4677] dump_header+0x81/0x220 [ 94.806113][ T4677] oom_kill_process+0x334/0x3f0 [ 94.806189][ T4677] out_of_memory+0x979/0xb80 [ 94.806220][ T4677] try_charge_memcg+0x5e6/0x9e0 [ 94.806264][ T4677] charge_memcg+0x51/0xc0 [ 94.806299][ T4677] __mem_cgroup_charge+0x28/0xb0 [ 94.806451][ T4677] filemap_add_folio+0x4e/0x1b0 [ 94.806488][ T4677] __filemap_get_folio+0x31e/0x6b0 [ 94.806530][ T4677] filemap_fault+0x41d/0xb40 [ 94.806644][ T4677] __do_fault+0xbc/0x200 [ 94.806752][ T4677] handle_mm_fault+0xf78/0x2be0 [ 94.806775][ T4677] ? mas_walk+0xf2/0x120 [ 94.806810][ T4677] do_user_addr_fault+0x636/0x1090 [ 94.806851][ T4677] exc_page_fault+0x62/0xa0 [ 94.806923][ T4677] asm_exc_page_fault+0x26/0x30 [ 94.806947][ T4677] RIP: 0033:0x7f7edf715974 [ 94.806967][ T4677] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 [ 94.806991][ T4677] RSP: 002b:00007ffd2cba9310 EFLAGS: 00010206 [ 94.807011][ T4677] RAX: 0000001b2fe20000 RBX: 00000000000000da RCX: 0000000000016f30 [ 94.807055][ T4677] RDX: 000000000b7a2243 RSI: 00007ffd2cba93a0 RDI: 0000000000000001 [ 94.807067][ T4677] RBP: 00007ffd2cba934c R08: 000000002bc81753 R09: 7fffffffffffffff [ 94.807079][ T4677] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 94.807092][ T4677] R13: 00000000000927c0 R14: 000000000001700b R15: 00007ffd2cba93a0 [ 94.807111][ T4677] [ 94.807117][ T4677] memory: usage 307200kB, limit 307200kB, failcnt 529 [ 95.002445][ T4677] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 95.010954][ T4677] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 95.018374][ T4677] Memory cgroup stats for /syz3: [ 95.018690][ T4677] cache 0 [ 95.026690][ T4677] rss 0 [ 95.029574][ T4677] shmem 0 [ 95.032529][ T4677] mapped_file 0 [ 95.036052][ T4677] dirty 0 [ 95.039017][ T4677] writeback 0 [ 95.042324][ T4677] workingset_refault_anon 148 [ 95.047117][ T4677] workingset_refault_file 337 [ 95.051806][ T4677] swap 217088 [ 95.055110][ T4677] swapcached 12288 [ 95.058911][ T4677] pgpgin 68927 [ 95.062301][ T4677] pgpgout 68922 [ 95.065830][ T4677] pgfault 81582 [ 95.069307][ T4677] pgmajfault 97 [ 95.072811][ T4677] inactive_anon 12288 [ 95.076852][ T4677] active_anon 0 [ 95.080378][ T4677] inactive_file 8192 [ 95.084395][ T4677] active_file 0 [ 95.087898][ T4677] unevictable 0 [ 95.091383][ T4677] hierarchical_memory_limit 314572800 [ 95.096868][ T4677] hierarchical_memsw_limit 9223372036854771712 [ 95.103102][ T4677] total_cache 0 [ 95.106644][ T4677] total_rss 0 [ 95.109957][ T4677] total_shmem 0 [ 95.113495][ T4677] total_mapped_file 0 [ 95.117546][ T4677] total_dirty 0 [ 95.121049][ T4677] total_writeback 0 [ 95.124890][ T4677] total_workingset_refault_anon 148 [ 95.130139][ T4677] total_workingset_refault_file 337 [ 95.135355][ T4677] total_swap 217088 [ 95.139186][ T4677] total_swapcached 12288 [ 95.143436][ T4677] total_pgpgin 68927 [ 95.147346][ T4677] total_pgpgout 68922 [ 95.151332][ T4677] total_pgfault 81582 [ 95.155396][ T4677] total_pgmajfault 97 [ 95.159418][ T4677] total_inactive_anon 12288 [ 95.163924][ T4677] total_active_anon 0 [ 95.167950][ T4677] total_inactive_file 8192 [ 95.172412][ T4677] total_active_file 0 [ 95.176542][ T4677] total_unevictable 0 [ 95.180647][ T4677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.764,pid=5811,uid=0 [ 95.195224][ T4677] Memory cgroup out of memory: Killed process 5811 (syz.3.764) total-vm:93888kB, anon-rss:940kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 95.212899][ T5857] wireguard0: entered promiscuous mode [ 95.219126][ T5857] wireguard0: entered allmulticast mode [ 95.290906][ T5862] loop4: detected capacity change from 0 to 512 [ 95.312743][ T5864] netlink: 'syz.2.782': attribute type 298 has an invalid length. [ 95.430540][ T5873] vhci_hcd: invalid port number 96 [ 95.435809][ T5873] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 95.436624][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 95.436642][ T29] audit: type=1326 audit(1751891991.145:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.453574][ T5879] netlink: 'syz.2.790': attribute type 298 has an invalid length. [ 95.491434][ T5883] loop4: detected capacity change from 0 to 164 [ 95.496877][ T5873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.507481][ T5873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.553257][ T29] audit: type=1326 audit(1751891991.185:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.577366][ T29] audit: type=1326 audit(1751891991.185:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.600896][ T29] audit: type=1326 audit(1751891991.185:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.624983][ T29] audit: type=1326 audit(1751891991.185:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.649209][ T29] audit: type=1326 audit(1751891991.185:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.672747][ T29] audit: type=1326 audit(1751891991.185:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.696210][ T29] audit: type=1326 audit(1751891991.185:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.720352][ T29] audit: type=1326 audit(1751891991.195:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.743851][ T29] audit: type=1326 audit(1751891991.195:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5882 comm="syz.4.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 95.829327][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'. [ 95.886301][ T5897] bond0: (slave bond_slave_1): Releasing backup interface [ 96.031485][ T5902] netlink: 'syz.3.798': attribute type 298 has an invalid length. [ 96.154362][ T5910] netlink: 'syz.3.802': attribute type 20 has an invalid length. [ 96.164713][ T5910] loop3: detected capacity change from 0 to 128 [ 96.174654][ T5910] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.187742][ T5910] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.241997][ T5910] netlink: 'syz.3.802': attribute type 6 has an invalid length. [ 96.371033][ T4677] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.440216][ T5921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.805'. [ 96.739907][ T5938] netlink: 'syz.4.812': attribute type 298 has an invalid length. [ 96.848101][ T5941] netlink: 'syz.2.809': attribute type 13 has an invalid length. [ 96.875588][ T5942] loop4: detected capacity change from 0 to 2048 [ 96.888216][ T5941] FAULT_INJECTION: forcing a failure. [ 96.888216][ T5941] name failslab, interval 1, probability 0, space 0, times 0 [ 96.900967][ T5941] CPU: 1 UID: 0 PID: 5941 Comm: syz.2.809 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 96.900992][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.901008][ T5941] Call Trace: [ 96.901015][ T5941] [ 96.901072][ T5941] __dump_stack+0x1d/0x30 [ 96.901176][ T5941] dump_stack_lvl+0xe8/0x140 [ 96.901277][ T5941] dump_stack+0x15/0x1b [ 96.901379][ T5941] should_fail_ex+0x265/0x280 [ 96.901415][ T5941] should_failslab+0x8c/0xb0 [ 96.901439][ T5941] kmem_cache_alloc_node_noprof+0x57/0x320 [ 96.901468][ T5941] ? __alloc_skb+0x101/0x320 [ 96.901506][ T5941] __alloc_skb+0x101/0x320 [ 96.901533][ T5941] inet6_ifinfo_notify+0x48/0xf0 [ 96.901564][ T5941] addrconf_notify+0x82a/0x930 [ 96.901609][ T5941] ? __pfx_addrconf_notify+0x10/0x10 [ 96.901742][ T5941] raw_notifier_call_chain+0x6f/0x1b0 [ 96.901764][ T5941] ? call_netdevice_notifiers_info+0x9c/0x100 [ 96.901820][ T5941] call_netdevice_notifiers_info+0xae/0x100 [ 96.901845][ T5941] __dev_notify_flags+0xff/0x1a0 [ 96.901876][ T5941] netif_change_flags+0xac/0xd0 [ 96.901902][ T5941] do_setlink+0x9d2/0x2810 [ 96.902005][ T5941] ? save_fpregs_to_fpstate+0x100/0x160 [ 96.902040][ T5941] ? _raw_spin_unlock+0x26/0x50 [ 96.902141][ T5941] ? finish_task_switch+0xad/0x2b0 [ 96.902164][ T5941] ? __schedule+0x6a8/0xb30 [ 96.902195][ T5941] rtnl_newlink+0xd8b/0x12d0 [ 96.902224][ T5941] ? __rcu_read_unlock+0x34/0x70 [ 96.902258][ T5941] ? bpf_trace_run3+0x12c/0x1d0 [ 96.902288][ T5941] ? __kfree_skb+0x109/0x150 [ 96.902379][ T5941] ? __kfree_skb+0x109/0x150 [ 96.902459][ T5941] ? __traceiter_kmem_cache_free+0x38/0x60 [ 96.902481][ T5941] ? __kfree_skb+0x109/0x150 [ 96.902576][ T5941] ? __rcu_read_unlock+0x4f/0x70 [ 96.902645][ T5941] ? avc_has_perm_noaudit+0x1b1/0x200 [ 96.902678][ T5941] ? selinux_capable+0x1f9/0x270 [ 96.902713][ T5941] ? security_capable+0x83/0x90 [ 96.902786][ T5941] ? ns_capable+0x7d/0xb0 [ 96.902817][ T5941] ? __pfx_rtnl_newlink+0x10/0x10 [ 96.902841][ T5941] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 96.902887][ T5941] netlink_rcv_skb+0x123/0x220 [ 96.902944][ T5941] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.902972][ T5941] rtnetlink_rcv+0x1c/0x30 [ 96.903034][ T5941] netlink_unicast+0x5a1/0x670 [ 96.903069][ T5941] netlink_sendmsg+0x58b/0x6b0 [ 96.903104][ T5941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.903161][ T5941] __sock_sendmsg+0x145/0x180 [ 96.903188][ T5941] ____sys_sendmsg+0x31e/0x4e0 [ 96.903230][ T5941] ___sys_sendmsg+0x17b/0x1d0 [ 96.903319][ T5941] __x64_sys_sendmsg+0xd4/0x160 [ 96.903361][ T5941] x64_sys_call+0x2999/0x2fb0 [ 96.903383][ T5941] do_syscall_64+0xd2/0x200 [ 96.903417][ T5941] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 96.903498][ T5941] ? clear_bhb_loop+0x40/0x90 [ 96.903537][ T5941] ? clear_bhb_loop+0x40/0x90 [ 96.903558][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.903578][ T5941] RIP: 0033:0x7f8b6473e929 [ 96.903593][ T5941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.903613][ T5941] RSP: 002b:00007f8b62d86038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.903642][ T5941] RAX: ffffffffffffffda RBX: 00007f8b64966080 RCX: 00007f8b6473e929 [ 96.903686][ T5941] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 96.903700][ T5941] RBP: 00007f8b62d86090 R08: 0000000000000000 R09: 0000000000000000 [ 96.903714][ T5941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.903725][ T5941] R13: 0000000000000000 R14: 00007f8b64966080 R15: 00007ffeaf2688e8 [ 96.903821][ T5941] [ 97.317200][ T5942] loop4: p1 < > p4 [ 97.323141][ T5942] loop4: p4 size 8388608 extends beyond EOD, truncated [ 97.336040][ T5941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.415186][ T5948] lo speed is unknown, defaulting to 1000 [ 97.442065][ T5950] loop2: detected capacity change from 0 to 2048 [ 97.497801][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.526034][ T5950] hugetlbfs: Bad value '!' for mount option 'nr_inodes' [ 97.526034][ T5950] [ 97.552255][ T3321] EXT4-fs error (device loop2): ext4_read_inline_dir:1502: inode #12: block 9: comm syz-executor: path /172/file1/file0: bad entry in directory: rec_len % 4 != 0 - offset=24, inode=13, rec_len=21, size=80 fake=0 [ 97.577513][ T3321] EXT4-fs (loop2): Remounting filesystem read-only [ 97.587880][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.637616][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.815'. [ 97.652411][ T5948] netlink: 60 bytes leftover after parsing attributes in process `syz.0.815'. [ 97.782937][ T5989] netlink: 'syz.0.831': attribute type 20 has an invalid length. [ 97.793718][ T5989] loop0: detected capacity change from 0 to 128 [ 97.807982][ T5989] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.809463][ T5991] serio: Serial port ptm1 [ 97.825041][ T5989] ext4 filesystem being mounted at /172/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.874707][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.918091][ T5995] vhci_hcd: invalid port number 96 [ 97.923319][ T5995] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 97.931459][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.940818][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.323179][ T6010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.343884][ T6010] loop3: detected capacity change from 0 to 128 [ 98.350890][ T6010] /dev/loop3: Can't open blockdev [ 98.471926][ T6021] smc: net device bond0 applied user defined pnetid SYZ0 [ 98.489040][ T6022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6022 comm=syz.3.844 [ 98.712745][ T6034] netlink: 128 bytes leftover after parsing attributes in process `syz.0.849'. [ 98.723292][ T6034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 98.742363][ T6034] usb usb1: check_ctrlrecip: process 6034 (syz.0.849) requesting ep 01 but needs 81 [ 98.752166][ T6034] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 98.763880][ T6035] 9pnet_fd: Insufficient options for proto=fd [ 98.898923][ T6043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.921247][ T6043] loop0: detected capacity change from 0 to 128 [ 99.422203][ T6051] loop2: detected capacity change from 0 to 2048 [ 99.437831][ T6051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.658527][ T6072] netlink: 128 bytes leftover after parsing attributes in process `syz.1.864'. [ 99.667874][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.864'. [ 99.685525][ T6072] usb usb1: check_ctrlrecip: process 6072 (syz.1.864) requesting ep 01 but needs 81 [ 99.696131][ T6072] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 99.740354][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 99.749311][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.863'. [ 99.779552][ T6078] FAULT_INJECTION: forcing a failure. [ 99.779552][ T6078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.794243][ T6078] CPU: 0 UID: 0 PID: 6078 Comm: syz.1.866 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 99.794277][ T6078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.794293][ T6078] Call Trace: [ 99.794307][ T6078] [ 99.794336][ T6078] __dump_stack+0x1d/0x30 [ 99.794366][ T6078] dump_stack_lvl+0xe8/0x140 [ 99.794386][ T6078] dump_stack+0x15/0x1b [ 99.794401][ T6078] should_fail_ex+0x265/0x280 [ 99.794431][ T6078] should_fail+0xb/0x20 [ 99.794478][ T6078] should_fail_usercopy+0x1a/0x20 [ 99.794508][ T6078] _copy_to_user+0x20/0xa0 [ 99.794527][ T6078] simple_read_from_buffer+0xb5/0x130 [ 99.794611][ T6078] proc_fail_nth_read+0x100/0x140 [ 99.794653][ T6078] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.794741][ T6078] vfs_read+0x19d/0x6f0 [ 99.794770][ T6078] ? __rcu_read_unlock+0x4f/0x70 [ 99.794796][ T6078] ? __fget_files+0x184/0x1c0 [ 99.794822][ T6078] ksys_read+0xda/0x1a0 [ 99.794861][ T6078] __x64_sys_read+0x40/0x50 [ 99.794906][ T6078] x64_sys_call+0x2d77/0x2fb0 [ 99.794926][ T6078] do_syscall_64+0xd2/0x200 [ 99.794987][ T6078] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.795020][ T6078] ? clear_bhb_loop+0x40/0x90 [ 99.795173][ T6078] ? clear_bhb_loop+0x40/0x90 [ 99.795198][ T6078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.795218][ T6078] RIP: 0033:0x7f009320d33c [ 99.795233][ T6078] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.795270][ T6078] RSP: 002b:00007f0091877030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.795294][ T6078] RAX: ffffffffffffffda RBX: 00007f0093435fa0 RCX: 00007f009320d33c [ 99.795310][ T6078] RDX: 000000000000000f RSI: 00007f00918770a0 RDI: 0000000000000007 [ 99.795336][ T6078] RBP: 00007f0091877090 R08: 0000000000000000 R09: 0000000000000000 [ 99.795348][ T6078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.795359][ T6078] R13: 0000000000000000 R14: 00007f0093435fa0 R15: 00007fff0de689b8 [ 99.795460][ T6078] [ 100.063620][ T6084] loop3: detected capacity change from 0 to 1024 [ 100.083089][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.094328][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.137283][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.267539][ T6097] lo speed is unknown, defaulting to 1000 [ 100.532938][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.875'. [ 100.585700][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 100.585718][ T29] audit: type=1400 audit(1751891996.235:3294): avc: denied { mount } for pid=6101 comm="syz.1.875" name="/" dev="ramfs" ino=14191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 100.726263][ T29] audit: type=1400 audit(1751891996.405:3295): avc: denied { execute } for pid=6107 comm="syz.4.877" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=14200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 100.875001][ T6110] loop0: detected capacity change from 0 to 512 [ 100.881920][ T6110] EXT4-fs: Invalid want_extra_isize 5 [ 100.893987][ T6110] netlink: zone id is out of range [ 100.900089][ T29] audit: type=1400 audit(1751891996.605:3296): avc: denied { write } for pid=6107 comm="syz.4.877" path="socket:[14205]" dev="sockfs" ino=14205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.905978][ T6110] netlink: zone id is out of range [ 100.935917][ T6110] netlink: zone id is out of range [ 100.941190][ T6110] netlink: zone id is out of range [ 100.947222][ T6110] netlink: zone id is out of range [ 100.952431][ T6110] netlink: zone id is out of range [ 100.958418][ T6110] netlink: zone id is out of range [ 100.973473][ T6110] netlink: 'syz.0.878': attribute type 13 has an invalid length. [ 101.028925][ T6119] netlink: 'syz.2.880': attribute type 298 has an invalid length. [ 101.078414][ T6121] bridge_slave_0: default FDB implementation only supports local addresses [ 101.103450][ T29] audit: type=1400 audit(1751891996.795:3297): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 101.135137][ T29] audit: type=1326 audit(1751891996.835:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 101.168657][ T6123] loop4: detected capacity change from 0 to 512 [ 101.195119][ T6121] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.205562][ T29] audit: type=1326 audit(1751891996.835:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 101.229998][ T29] audit: type=1326 audit(1751891996.835:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 101.253471][ T29] audit: type=1326 audit(1751891996.835:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 101.277566][ T29] audit: type=1326 audit(1751891996.835:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009320e929 code=0x7ffc0000 [ 101.301140][ T29] audit: type=1326 audit(1751891996.835:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.1.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0093210847 code=0x7ffc0000 [ 101.327657][ T6123] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 101.343655][ T6123] EXT4-fs (loop4): mount failed [ 101.354060][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 101.362956][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'. [ 101.400458][ T6121] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.414558][ T6145] sg_write: process 475 (syz.2.890) changed security contexts after opening file descriptor, this is not allowed. [ 101.498733][ T6149] vhci_hcd: invalid port number 96 [ 101.504025][ T6149] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 101.523520][ T6121] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.569658][ T6156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 101.578579][ T6156] netlink: 2 bytes leftover after parsing attributes in process `syz.2.895'. [ 101.594108][ T6156] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.602663][ T6156] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.611196][ T6156] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.619783][ T6156] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.649458][ T6156] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.658009][ T6156] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.666407][ T6156] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.674791][ T6156] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.708959][ T6121] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.869433][ T6121] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.903970][ T6121] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.045136][ T6121] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.127197][ T6178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.903'. [ 102.159240][ T6121] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.298284][ T6189] vhci_hcd: invalid port number 96 [ 102.303514][ T6189] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 102.484606][ T6209] loop2: detected capacity change from 0 to 128 [ 102.550818][ T6216] loop3: detected capacity change from 0 to 1024 [ 102.587810][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.600557][ T6218] loop0: detected capacity change from 0 to 8192 [ 102.610371][ T6216] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 102.622833][ T6216] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.622833][ T6216] [ 102.632650][ T6216] EXT4-fs (loop3): Total free blocks count 0 [ 102.639376][ T6216] EXT4-fs (loop3): Free/Dirty block details [ 102.645299][ T6216] EXT4-fs (loop3): free_blocks=0 [ 102.650317][ T6216] EXT4-fs (loop3): dirty_blocks=0 [ 102.655424][ T6216] EXT4-fs (loop3): Block reservation details [ 102.661725][ T6216] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 102.745125][ T6233] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 102.788537][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.798409][ T6233] syz_tun: entered promiscuous mode [ 102.808564][ T6233] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.860604][ T6246] loop2: detected capacity change from 0 to 128 [ 102.925384][ T6249] net_ratelimit: 89 callbacks suppressed [ 102.925401][ T6249] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.077640][ T6257] FAULT_INJECTION: forcing a failure. [ 103.077640][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 103.090348][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.3.935 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 103.090380][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.090396][ T6257] Call Trace: [ 103.090405][ T6257] [ 103.090442][ T6257] __dump_stack+0x1d/0x30 [ 103.090470][ T6257] dump_stack_lvl+0xe8/0x140 [ 103.090495][ T6257] dump_stack+0x15/0x1b [ 103.090516][ T6257] should_fail_ex+0x265/0x280 [ 103.090548][ T6257] should_failslab+0x8c/0xb0 [ 103.090577][ T6257] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 103.090614][ T6257] ? sidtab_sid2str_get+0xa0/0x130 [ 103.090641][ T6257] kmemdup_noprof+0x2b/0x70 [ 103.090663][ T6257] sidtab_sid2str_get+0xa0/0x130 [ 103.090745][ T6257] security_sid_to_context_core+0x1eb/0x2e0 [ 103.090775][ T6257] security_sid_to_context+0x27/0x40 [ 103.090797][ T6257] avc_audit_post_callback+0x10f/0x520 [ 103.090839][ T6257] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 103.090874][ T6257] common_lsm_audit+0x1bb/0x230 [ 103.090897][ T6257] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 103.090925][ T6257] ? avc_denied+0xe4/0x100 [ 103.091020][ T6257] slow_avc_audit+0x104/0x140 [ 103.091058][ T6257] avc_has_perm+0x128/0x150 [ 103.091092][ T6257] selinux_mount+0x2ba/0x310 [ 103.091186][ T6257] security_sb_mount+0x5f/0xb0 [ 103.091221][ T6257] ? path_mount+0x89/0xb20 [ 103.091339][ T6257] path_mount+0xa9/0xb20 [ 103.091405][ T6257] ? user_path_at+0x109/0x130 [ 103.091468][ T6257] __se_sys_mount+0x28f/0x2e0 [ 103.091509][ T6257] ? fput+0x8f/0xc0 [ 103.091542][ T6257] __x64_sys_mount+0x67/0x80 [ 103.091577][ T6257] x64_sys_call+0xd36/0x2fb0 [ 103.091679][ T6257] do_syscall_64+0xd2/0x200 [ 103.091783][ T6257] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 103.091814][ T6257] ? clear_bhb_loop+0x40/0x90 [ 103.091879][ T6257] ? clear_bhb_loop+0x40/0x90 [ 103.091920][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.091949][ T6257] RIP: 0033:0x7f7edf83e929 [ 103.091983][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.092006][ T6257] RSP: 002b:00007f7eddea7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.092081][ T6257] RAX: ffffffffffffffda RBX: 00007f7edfa65fa0 RCX: 00007f7edf83e929 [ 103.092097][ T6257] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 103.092125][ T6257] RBP: 00007f7eddea7090 R08: 0000200000000300 R09: 0000000000000000 [ 103.092152][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.092167][ T6257] R13: 0000000000000000 R14: 00007f7edfa65fa0 R15: 00007ffd2cba8f88 [ 103.092192][ T6257] [ 103.522335][ T6267] loop3: detected capacity change from 0 to 1024 [ 103.551911][ T6272] x_tables: ip_tables: ah match: only valid for protocol 51 [ 103.646281][ T6267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.664040][ T6267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 103.677229][ T6267] EXT4-fs (loop3): This should not happen!! Data will be lost [ 103.677229][ T6267] [ 103.687059][ T6267] EXT4-fs (loop3): Total free blocks count 0 [ 103.687063][ T6285] vhci_hcd: invalid port number 96 [ 103.687079][ T6267] EXT4-fs (loop3): Free/Dirty block details [ 103.687091][ T6267] EXT4-fs (loop3): free_blocks=0 [ 103.687103][ T6267] EXT4-fs (loop3): dirty_blocks=0 [ 103.687114][ T6267] EXT4-fs (loop3): Block reservation details [ 103.687125][ T6267] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 103.726290][ T6285] vhci_hcd: default hub control req: 030e v0007 i0060 l0 [ 103.829508][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.840387][ T6293] gre0: Master is either lo or non-ether device [ 103.944689][ T6301] netlink: 'syz.0.950': attribute type 9 has an invalid length. [ 103.953236][ T6301] netlink: 'syz.0.950': attribute type 6 has an invalid length. [ 103.961079][ T6301] netlink: 'syz.0.950': attribute type 7 has an invalid length. [ 103.968797][ T6301] netlink: 'syz.0.950': attribute type 8 has an invalid length. [ 103.991553][ T6301] loop0: detected capacity change from 0 to 512 [ 104.045475][ T6306] loop3: detected capacity change from 0 to 164 [ 104.052771][ T6306] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 104.302299][ T6319] loop2: detected capacity change from 0 to 128 [ 104.766693][ T6333] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=6333 comm=syz.3.960 [ 104.806846][ T6333] __nla_validate_parse: 10 callbacks suppressed [ 104.806865][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.960'. [ 104.837064][ T6335] netlink: 'syz.1.962': attribute type 298 has an invalid length. [ 104.924301][ T6343] loop3: detected capacity change from 0 to 1024 [ 104.954588][ T6343] EXT4-fs: Ignoring removed nobh option [ 104.960345][ T6343] EXT4-fs: Ignoring removed nobh option [ 105.013431][ T6343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.057061][ T4677] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.108107][ T6342] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 105.301267][ T6363] netlink: 128 bytes leftover after parsing attributes in process `syz.4.974'. [ 105.329962][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 105.343869][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.974'. [ 105.478215][ T6363] usb usb1: check_ctrlrecip: process 6363 (syz.4.974) requesting ep 01 but needs 81 [ 105.539662][ T6363] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 105.847711][ T6380] FAULT_INJECTION: forcing a failure. [ 105.847711][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.861019][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.4.979 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 105.861051][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.861067][ T6380] Call Trace: [ 105.861076][ T6380] [ 105.861086][ T6380] __dump_stack+0x1d/0x30 [ 105.861111][ T6380] dump_stack_lvl+0xe8/0x140 [ 105.861133][ T6380] dump_stack+0x15/0x1b [ 105.861152][ T6380] should_fail_ex+0x265/0x280 [ 105.861317][ T6380] should_fail+0xb/0x20 [ 105.861347][ T6380] should_fail_usercopy+0x1a/0x20 [ 105.861383][ T6380] copy_folio_from_iter_atomic+0x278/0x1170 [ 105.861487][ T6380] ? shmem_write_begin+0xa8/0x190 [ 105.861524][ T6380] ? shmem_write_begin+0xe1/0x190 [ 105.861562][ T6380] generic_perform_write+0x2c2/0x490 [ 105.861652][ T6380] shmem_file_write_iter+0xc5/0xf0 [ 105.861717][ T6380] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 105.861737][ T6380] vfs_write+0x49d/0x8e0 [ 105.861775][ T6380] ksys_write+0xda/0x1a0 [ 105.861813][ T6380] __x64_sys_write+0x40/0x50 [ 105.861906][ T6380] x64_sys_call+0x2cdd/0x2fb0 [ 105.861929][ T6380] do_syscall_64+0xd2/0x200 [ 105.861959][ T6380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.861989][ T6380] ? clear_bhb_loop+0x40/0x90 [ 105.862073][ T6380] ? clear_bhb_loop+0x40/0x90 [ 105.862098][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.862123][ T6380] RIP: 0033:0x7f65b73cd3df [ 105.862143][ T6380] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 105.862164][ T6380] RSP: 002b:00007f65b5a36df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 105.862187][ T6380] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f65b73cd3df [ 105.862201][ T6380] RDX: 0000000000040000 RSI: 00007f65ad617000 RDI: 0000000000000004 [ 105.862263][ T6380] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000429 [ 105.862277][ T6380] R10: 0000200000000942 R11: 0000000000000293 R12: 0000000000000004 [ 105.862291][ T6380] R13: 00007f65b5a36ef0 R14: 00007f65b5a36eb0 R15: 00007f65ad617000 [ 105.862312][ T6380] [ 106.080905][ T6380] loop4: detected capacity change from 0 to 512 [ 106.088104][ T6380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.112279][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 106.112293][ T29] audit: type=1400 audit(1751892001.815:3564): avc: denied { bind } for pid=6381 comm="syz.1.980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 106.149730][ T6380] EXT4-fs (loop4): 1 truncate cleaned up [ 106.153728][ T6326] syz.2.959 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 106.156025][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.170274][ T6326] CPU: 1 UID: 0 PID: 6326 Comm: syz.2.959 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 106.170326][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.170343][ T6326] Call Trace: [ 106.170354][ T6326] [ 106.170435][ T6326] __dump_stack+0x1d/0x30 [ 106.170464][ T6326] dump_stack_lvl+0xe8/0x140 [ 106.170491][ T6326] dump_stack+0x15/0x1b [ 106.170514][ T6326] dump_header+0x81/0x220 [ 106.170562][ T6326] oom_kill_process+0x334/0x3f0 [ 106.170604][ T6326] out_of_memory+0x979/0xb80 [ 106.170680][ T6326] try_charge_memcg+0x5e6/0x9e0 [ 106.170739][ T6326] obj_cgroup_charge_pages+0xa6/0x150 [ 106.170780][ T6326] __memcg_kmem_charge_page+0x9f/0x170 [ 106.170885][ T6326] __alloc_frozen_pages_noprof+0x188/0x360 [ 106.171014][ T6326] alloc_pages_mpol+0xb3/0x250 [ 106.171059][ T6326] alloc_pages_noprof+0x90/0x130 [ 106.171101][ T6326] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 106.171187][ T6326] __kvmalloc_node_noprof+0x30f/0x4e0 [ 106.171224][ T6326] ? ip_set_alloc+0x1f/0x30 [ 106.171287][ T6326] ? ip_set_alloc+0x1f/0x30 [ 106.171323][ T6326] ? __kmalloc_cache_noprof+0x189/0x320 [ 106.171368][ T6326] ip_set_alloc+0x1f/0x30 [ 106.171413][ T6326] hash_netiface_create+0x282/0x740 [ 106.171456][ T6326] ? __pfx_hash_netiface_create+0x10/0x10 [ 106.171499][ T6326] ip_set_create+0x3cc/0x960 [ 106.171625][ T6326] ? __nla_parse+0x40/0x60 [ 106.171723][ T6326] nfnetlink_rcv_msg+0x4c6/0x590 [ 106.171756][ T6326] ? should_fail_ex+0x30/0x280 [ 106.171870][ T6326] ? selinux_capable+0x1f9/0x270 [ 106.171913][ T6326] netlink_rcv_skb+0x123/0x220 [ 106.171956][ T6326] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 106.172028][ T6326] nfnetlink_rcv+0x16b/0x1690 [ 106.172063][ T6326] ? __kfree_skb+0x109/0x150 [ 106.172103][ T6326] ? nlmon_xmit+0x4f/0x60 [ 106.172130][ T6326] ? consume_skb+0x49/0x150 [ 106.172182][ T6326] ? nlmon_xmit+0x4f/0x60 [ 106.172283][ T6326] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 106.172373][ T6326] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 106.172451][ T6326] ? __dev_queue_xmit+0x182/0x1fb0 [ 106.172517][ T6326] ? ref_tracker_free+0x37d/0x3e0 [ 106.172590][ T6326] ? __netlink_deliver_tap+0x4dc/0x500 [ 106.172662][ T6326] netlink_unicast+0x5a1/0x670 [ 106.172708][ T6326] netlink_sendmsg+0x58b/0x6b0 [ 106.172792][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.172841][ T6326] __sock_sendmsg+0x145/0x180 [ 106.172877][ T6326] ____sys_sendmsg+0x31e/0x4e0 [ 106.172961][ T6326] ___sys_sendmsg+0x17b/0x1d0 [ 106.173028][ T6326] __x64_sys_sendmsg+0xd4/0x160 [ 106.173156][ T6326] x64_sys_call+0x2999/0x2fb0 [ 106.173189][ T6326] do_syscall_64+0xd2/0x200 [ 106.173276][ T6326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.173314][ T6326] ? clear_bhb_loop+0x40/0x90 [ 106.173416][ T6326] ? clear_bhb_loop+0x40/0x90 [ 106.173448][ T6326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.173479][ T6326] RIP: 0033:0x7f8b6473e929 [ 106.173500][ T6326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.173527][ T6326] RSP: 002b:00007f8b62da7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.173609][ T6326] RAX: ffffffffffffffda RBX: 00007f8b64965fa0 RCX: 00007f8b6473e929 [ 106.173627][ T6326] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000007 [ 106.173645][ T6326] RBP: 00007f8b647c0b39 R08: 0000000000000000 R09: 0000000000000000 [ 106.173662][ T6326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.173680][ T6326] R13: 0000000000000000 R14: 00007f8b64965fa0 R15: 00007ffeaf2688e8 [ 106.173708][ T6326] [ 106.173717][ T6326] memory: usage 307200kB, limit 307200kB, failcnt 243 [ 106.216224][ T29] audit: type=1326 audit(1751892001.915:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 106.218718][ T6326] memory+swap: usage 307932kB, limit 9007199254740988kB, failcnt 0 [ 106.223278][ T29] audit: type=1326 audit(1751892001.935:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 106.228187][ T6326] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 106.238718][ T29] audit: type=1400 audit(1751892001.945:3567): avc: denied { read } for pid=6381 comm="syz.1.980" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.241781][ T6326] Memory cgroup stats for [ 106.247210][ T29] audit: type=1400 audit(1751892001.945:3568): avc: denied { open } for pid=6381 comm="syz.1.980" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.252668][ T6326] /syz2 [ 106.272417][ T29] audit: type=1400 audit(1751892001.955:3569): avc: denied { ioctl } for pid=6381 comm="syz.1.980" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 106.274853][ T6326] : [ 106.328114][ T29] audit: type=1400 audit(1751892002.035:3570): avc: denied { getopt } for pid=6389 comm="syz.0.981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 106.330799][ T6326] cache 0 [ 106.337495][ T29] audit: type=1326 audit(1751892002.045:3571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 106.339122][ T6326] rss 0 [ 106.344544][ T29] audit: type=1326 audit(1751892002.045:3572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 106.349234][ T6326] shmem 0 [ 106.349244][ T6326] mapped_file 0 [ 106.349252][ T6326] dirty 0 [ 106.349258][ T6326] writeback 0 [ 106.349265][ T6326] workingset_refault_anon 114 [ 106.349274][ T6326] workingset_refault_file 254 [ 106.349284][ T6326] swap 749568 [ 106.353862][ T29] audit: type=1326 audit(1751892002.045:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6379 comm="syz.4.979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65b73ce929 code=0x7ffc0000 [ 106.648485][ T6402] netlink: 'syz.0.984': attribute type 20 has an invalid length. [ 106.663244][ T6326] swapcached 0 [ 106.754710][ T6402] loop0: detected capacity change from 0 to 128 [ 106.767385][ T6326] pgpgin 61817 [ 106.772948][ T6402] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.773104][ T6326] pgpgout 61817 [ 106.773115][ T6326] pgfault 56335 [ 106.776792][ T6402] ext4 filesystem being mounted at /205/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.779371][ T6326] pgmajfault 80 [ 106.779382][ T6326] inactive_anon 0 [ 106.779391][ T6326] active_anon 0 [ 106.779399][ T6326] inactive_file 0 [ 106.903815][ T6326] active_file 0 [ 106.907294][ T6326] unevictable 0 [ 106.910792][ T6326] hierarchical_memory_limit 314572800 [ 106.916809][ T6326] hierarchical_memsw_limit 9223372036854771712 [ 106.922992][ T6326] total_cache 0 [ 106.926508][ T6326] total_rss 0 [ 106.929867][ T6326] total_shmem 0 [ 106.933340][ T6326] total_mapped_file 0 [ 106.937341][ T6326] total_dirty 0 [ 106.940813][ T6326] total_writeback 0 [ 106.944632][ T6326] total_workingset_refault_anon 114 [ 106.950424][ T6326] total_workingset_refault_file 254 [ 106.955641][ T6326] total_swap 749568 [ 106.959486][ T6326] total_swapcached 0 [ 106.963397][ T6326] total_pgpgin 61817 [ 106.967360][ T6326] total_pgpgout 61817 [ 106.971429][ T6326] total_pgfault 56335 [ 106.975420][ T6326] total_pgmajfault 80 [ 106.979959][ T6326] total_inactive_anon 0 [ 106.984120][ T6326] total_active_anon 0 [ 106.988120][ T6326] total_inactive_file 0 [ 106.992305][ T6326] total_active_file 0 [ 106.996359][ T6326] total_unevictable 0 [ 107.000386][ T6326] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.959,pid=6325,uid=0 [ 107.015483][ T6326] Memory cgroup out of memory: Killed process 6325 (syz.2.959) total-vm:95936kB, anon-rss:944kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 107.054579][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.088398][ T6405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 107.098177][ T6405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.099463][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.117673][ T6405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.150714][ T6408] loop0: detected capacity change from 0 to 512 [ 107.170724][ T6408] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 107.195282][ T6413] loop4: detected capacity change from 0 to 512 [ 107.203423][ T6408] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 107.222305][ T6413] EXT4-fs (loop4): 1 orphan inode deleted [ 107.228735][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.241587][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 107.254074][ T6408] EXT4-fs (loop0): 1 truncate cleaned up [ 107.260635][ T6408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.291344][ T6413] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.302835][ T6413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.302948][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.422718][ T6428] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 107.429313][ T6428] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.437001][ T6428] vhci_hcd vhci_hcd.0: Device attached [ 107.529671][ T6431] vhci_hcd: connection closed [ 107.535866][ T31] vhci_hcd: stop threads [ 107.544875][ T31] vhci_hcd: release socket [ 107.550245][ T31] vhci_hcd: disconnect device [ 107.581225][ T6450] netlink: 'syz.4.1002': attribute type 20 has an invalid length. [ 107.591780][ T6450] loop4: detected capacity change from 0 to 128 [ 107.602242][ T6450] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 107.616080][ T6448] 9pnet_fd: Insufficient options for proto=fd [ 107.625524][ T6450] ext4 filesystem being mounted at /178/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.679582][ T3316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.726667][ T6462] FAULT_INJECTION: forcing a failure. [ 107.726667][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 107.739471][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.4.1007 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 107.739507][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.739522][ T6462] Call Trace: [ 107.739531][ T6462] [ 107.739541][ T6462] __dump_stack+0x1d/0x30 [ 107.739648][ T6462] dump_stack_lvl+0xe8/0x140 [ 107.739673][ T6462] dump_stack+0x15/0x1b [ 107.739694][ T6462] should_fail_ex+0x265/0x280 [ 107.739731][ T6462] should_failslab+0x8c/0xb0 [ 107.739756][ T6462] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 107.739839][ T6462] ? sidtab_sid2str_get+0xa0/0x130 [ 107.739869][ T6462] kmemdup_noprof+0x2b/0x70 [ 107.739894][ T6462] sidtab_sid2str_get+0xa0/0x130 [ 107.739985][ T6462] security_sid_to_context_core+0x1eb/0x2e0 [ 107.740022][ T6462] security_sid_to_context+0x27/0x40 [ 107.740047][ T6462] selinux_lsmprop_to_secctx+0x67/0xf0 [ 107.740125][ T6462] security_lsmprop_to_secctx+0x43/0x80 [ 107.740156][ T6462] audit_log_task_context+0x77/0x190 [ 107.740194][ T6462] audit_log_task+0xf4/0x250 [ 107.740280][ T6462] audit_seccomp+0x61/0x100 [ 107.740305][ T6462] ? __seccomp_filter+0x68c/0x10d0 [ 107.740333][ T6462] __seccomp_filter+0x69d/0x10d0 [ 107.740391][ T6462] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.740428][ T6462] ? vfs_write+0x75e/0x8e0 [ 107.740477][ T6462] __secure_computing+0x82/0x150 [ 107.740500][ T6462] syscall_trace_enter+0xcf/0x1e0 [ 107.740601][ T6462] do_syscall_64+0xac/0x200 [ 107.740640][ T6462] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.740748][ T6462] ? clear_bhb_loop+0x40/0x90 [ 107.740772][ T6462] ? clear_bhb_loop+0x40/0x90 [ 107.740794][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.740820][ T6462] RIP: 0033:0x7f65b73ce929 [ 107.740839][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.740860][ T6462] RSP: 002b:00007f65b5a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 107.740886][ T6462] RAX: ffffffffffffffda RBX: 00007f65b75f5fa0 RCX: 00007f65b73ce929 [ 107.740899][ T6462] RDX: 0400000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 107.740913][ T6462] RBP: 00007f65b5a37090 R08: 0000000000000000 R09: 0000000000000000 [ 107.740928][ T6462] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 107.740942][ T6462] R13: 0000000000000000 R14: 00007f65b75f5fa0 R15: 00007fff47cc0008 [ 107.740965][ T6462] [ 107.994300][ T6471] wireguard0: entered promiscuous mode [ 108.000776][ T6471] wireguard0: entered allmulticast mode [ 108.049435][ T6478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.064710][ T36] lo speed is unknown, defaulting to 1000 [ 108.070707][ T36] qyz2: Port: 1 Link DOWN [ 108.075217][ T6478] loop4: detected capacity change from 0 to 128 [ 108.105153][ T6482] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1013'. [ 108.120561][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1013'. [ 108.139773][ T6482] usb usb1: check_ctrlrecip: process 6482 (syz.4.1013) requesting ep 01 but needs 81 [ 108.150753][ T6482] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 108.161588][ T6486] netlink: 'syz.2.1015': attribute type 20 has an invalid length. [ 108.177563][ T6486] loop2: detected capacity change from 0 to 128 [ 108.189402][ T6486] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.202878][ T6486] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.225445][ T6484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1024 sclass=netlink_route_socket pid=6484 comm=syz.1.1014 [ 108.268239][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.472678][ T6521] loop2: detected capacity change from 0 to 128 [ 108.504808][ T6524] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1026'. [ 108.513994][ T6524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'. [ 108.534138][ T6524] usb usb1: check_ctrlrecip: process 6524 (syz.2.1026) requesting ep 01 but needs 81 [ 108.545197][ T6524] vhci_hcd: default hub control req: 0217 v0004 i0001 l0 [ 108.604255][ T6529] blktrace: Concurrent blktraces are not allowed on loop4 [ 108.845354][ T6541] lo speed is unknown, defaulting to 1000 [ 109.178647][ T6552] tipc: Started in network mode [ 109.183786][ T6552] tipc: Node identity 5ab6706e96de, cluster identity 4711 [ 109.185723][ T6499] syz.4.1021 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 109.191050][ T6552] tipc: Enabled bearer , priority 0 [ 109.202755][ T6499] CPU: 1 UID: 0 PID: 6499 Comm: syz.4.1021 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 109.202808][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.202826][ T6499] Call Trace: [ 109.202836][ T6499] [ 109.202892][ T6499] __dump_stack+0x1d/0x30 [ 109.202996][ T6499] dump_stack_lvl+0xe8/0x140 [ 109.203023][ T6499] dump_stack+0x15/0x1b [ 109.203047][ T6499] dump_header+0x81/0x220 [ 109.203093][ T6499] oom_kill_process+0x334/0x3f0 [ 109.203136][ T6499] out_of_memory+0x979/0xb80 [ 109.203252][ T6499] try_charge_memcg+0x5e6/0x9e0 [ 109.203311][ T6499] charge_memcg+0x51/0xc0 [ 109.203399][ T6499] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 109.203442][ T6499] __read_swap_cache_async+0x1df/0x350 [ 109.203492][ T6499] swap_cluster_readahead+0x277/0x3e0 [ 109.203545][ T6499] swapin_readahead+0xde/0x6f0 [ 109.203592][ T6499] ? __filemap_get_folio+0x4f7/0x6b0 [ 109.203635][ T6499] ? __rcu_read_unlock+0x34/0x70 [ 109.203668][ T6499] ? swap_cache_get_folio+0x77/0x200 [ 109.203714][ T6499] do_swap_page+0x301/0x2430 [ 109.203741][ T6499] ? css_rstat_updated+0xcd/0x5b0 [ 109.203787][ T6499] ? __pfx_default_wake_function+0x10/0x10 [ 109.203904][ T6499] handle_mm_fault+0x9a5/0x2be0 [ 109.204013][ T6499] ? mas_walk+0xf2/0x120 [ 109.204062][ T6499] do_user_addr_fault+0x636/0x1090 [ 109.204124][ T6499] exc_page_fault+0x62/0xa0 [ 109.204163][ T6499] asm_exc_page_fault+0x26/0x30 [ 109.204218][ T6499] RIP: 0033:0x7f65b72a5379 [ 109.204239][ T6499] Code: 35 00 00 0f 8e 09 fe ff ff e8 13 a0 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 80 7b 20 [ 109.204265][ T6499] RSP: 002b:00007fff47cc0170 EFLAGS: 00010206 [ 109.204286][ T6499] RAX: 000000000001aa3c RBX: 00007f65b75f5fa0 RCX: 000000000001a9c8 [ 109.204303][ T6499] RDX: 0000000000000074 RSI: 00007fff47cc0150 RDI: 00000000000003e8 [ 109.204329][ T6499] RBP: 00007f65b75f7ba0 R08: 0000000006f25f33 R09: 7fffffffffffffff [ 109.204347][ T6499] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000001aa55 [ 109.204371][ T6499] R13: 00007f65b75f6160 R14: ffffffffffffffff R15: 00007fff47cc0280 [ 109.204399][ T6499] [ 109.204408][ T6499] memory: usage 307200kB, limit 307200kB, failcnt 695 [ 109.212748][ T6552] openvswitch: netlink: Message has 6 unknown bytes. [ 109.219247][ T6499] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 109.219267][ T6499] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 109.258746][ T6500] ================================================================== [ 109.258788][ T6500] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 109.258835][ T6500] [ 109.258840][ T6500] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 1: [ 109.258858][ T6500] tick_do_update_jiffies64+0x113/0x1c0 [ 109.258887][ T6500] tick_nohz_handler+0x7f/0x2d0 [ 109.258913][ T6500] __hrtimer_run_queues+0x20c/0x5a0 [ 109.258939][ T6500] hrtimer_interrupt+0x21a/0x460 [ 109.258961][ T6500] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 109.258995][ T6500] sysvec_apic_timer_interrupt+0x6f/0x80 [ 109.259025][ T6500] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 109.259053][ T6500] console_flush_all+0x55b/0x730 [ 109.259077][ T6500] console_unlock+0xa1/0x330 [ 109.259103][ T6500] vprintk_emit+0x388/0x650 [ 109.259123][ T6500] vprintk_default+0x26/0x30 [ 109.259143][ T6500] vprintk+0x1d/0x30 [ 109.259172][ T6500] _printk+0x79/0xa0 [ 109.259201][ T6500] mem_cgroup_print_oom_meminfo+0xdc/0x250 [ 109.259226][ T6500] dump_header+0xa0/0x220 [ 109.259261][ T6500] oom_kill_process+0x334/0x3f0 [ 109.259294][ T6500] out_of_memory+0x979/0xb80 [ 109.259325][ T6500] try_charge_memcg+0x5e6/0x9e0 [ 109.259361][ T6500] charge_memcg+0x51/0xc0 [ 109.259395][ T6500] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 109.259435][ T6500] __read_swap_cache_async+0x1df/0x350 [ 109.259470][ T6500] swap_cluster_readahead+0x277/0x3e0 [ 109.259498][ T6500] swapin_readahead+0xde/0x6f0 [ 109.259525][ T6500] do_swap_page+0x301/0x2430 [ 109.264104][ T6499] Memory cgroup stats for /syz4 [ 109.268958][ T6500] handle_mm_fault+0x9a5/0x2be0 [ 109.273373][ T6499] : [ 109.279250][ T6500] do_user_addr_fault+0x636/0x1090 [ 109.279287][ T6500] exc_page_fault+0x62/0xa0 [ 109.279314][ T6500] asm_exc_page_fault+0x26/0x30 [ 109.279351][ T6500] [ 109.279358][ T6500] read to 0xffffffff868099c0 of 8 bytes by task 6500 on cpu 0: [ 109.286554][ T6499] cache 0 [ 109.290179][ T6500] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 109.294937][ T6499] rss 0 [ 109.294947][ T6499] shmem 0 [ 109.300216][ T6500] count_shadow_nodes+0x6a/0x230 [ 109.300257][ T6500] do_shrink_slab+0x60/0x680 [ 109.305188][ T6499] mapped_file 0 [ 109.305198][ T6499] dirty 0 [ 109.310469][ T6500] shrink_slab+0x448/0x760 [ 109.310500][ T6500] shrink_node+0x6c3/0x2120 [ 109.310523][ T6500] do_try_to_free_pages+0x3f6/0xcd0 [ 109.315121][ T6499] writeback 0 [ 109.315131][ T6499] workingset_refault_anon 246 [ 109.320135][ T6500] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 109.320163][ T6500] try_charge_memcg+0x358/0x9e0 [ 109.320205][ T6500] obj_cgroup_charge_pages+0xa6/0x150 [ 109.320238][ T6500] __memcg_kmem_charge_page+0x9f/0x170 [ 109.320270][ T6500] __alloc_frozen_pages_noprof+0x188/0x360 [ 109.320307][ T6500] alloc_pages_mpol+0xb3/0x250 [ 109.320340][ T6500] alloc_pages_noprof+0x90/0x130 [ 109.320376][ T6500] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 109.320413][ T6500] __kvmalloc_node_noprof+0x30f/0x4e0 [ 109.320444][ T6500] ip_set_alloc+0x1f/0x30 [ 109.320476][ T6500] hash_netiface_create+0x282/0x740 [ 109.320510][ T6500] ip_set_create+0x3cc/0x960 [ 109.320545][ T6500] nfnetlink_rcv_msg+0x4c6/0x590 [ 109.320571][ T6500] netlink_rcv_skb+0x123/0x220 [ 109.320607][ T6500] nfnetlink_rcv+0x16b/0x1690 [ 109.320632][ T6500] netlink_unicast+0x5a1/0x670 [ 109.320659][ T6500] netlink_sendmsg+0x58b/0x6b0 [ 109.320694][ T6500] __sock_sendmsg+0x145/0x180 [ 109.320719][ T6500] ____sys_sendmsg+0x31e/0x4e0 [ 109.320750][ T6500] ___sys_sendmsg+0x17b/0x1d0 [ 109.320786][ T6500] __x64_sys_sendmsg+0xd4/0x160 [ 109.320818][ T6500] x64_sys_call+0x2999/0x2fb0 [ 109.320843][ T6500] do_syscall_64+0xd2/0x200 [ 109.320878][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.320903][ T6500] [ 109.320907][ T6500] value changed: 0x00000000ffffb54f -> 0x00000000ffffb550 [ 109.326736][ T6499] workingset_refault_file 734 [ 109.331547][ T6500] [ 109.331553][ T6500] Reported by Kernel Concurrency Sanitizer on: [ 109.335800][ T6499] swap 417792 [ 109.340895][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.4.1021 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 109.345385][ T6499] swapcached 0 [ 109.345407][ T6499] pgpgin 50320 [ 109.350240][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.350258][ T6500] ================================================================== [ 109.887036][ T6499] pgpgout 50319 [ 109.890501][ T6499] pgfault 58338 [ 109.893982][ T6499] pgmajfault 178 [ 109.897661][ T6499] inactive_anon 0 [ 109.901326][ T6499] active_anon 0 [ 109.904788][ T6499] inactive_file 4096 [ 109.908724][ T6499] active_file 0 [ 109.912186][ T6499] unevictable 0 [ 109.916428][ T6499] hierarchical_memory_limit 314572800 [ 109.921815][ T6499] hierarchical_memsw_limit 9223372036854771712 [ 109.928107][ T6499] total_cache 0 [ 109.931585][ T6499] total_rss 0 [ 109.934947][ T6499] total_shmem 0 [ 109.938432][ T6499] total_mapped_file 0 [ 109.942478][ T6499] total_dirty 0 [ 109.946663][ T6499] total_writeback 0 [ 109.950555][ T6499] total_workingset_refault_anon 246 [ 109.955782][ T6499] total_workingset_refault_file 734 [ 109.960987][ T6499] total_swap 417792 [ 109.964795][ T6499] total_swapcached 0 [ 109.968721][ T6499] total_pgpgin 50320 [ 109.972625][ T6499] total_pgpgout 50319 [ 109.977358][ T6499] total_pgfault 58338 [ 109.981372][ T6499] total_pgmajfault 178 [ 109.985539][ T6499] total_inactive_anon 0 [ 109.989729][ T6499] total_active_anon 0 [ 109.993713][ T6499] total_inactive_file 4096 [ 109.998239][ T6499] total_active_file 0 [ 110.002295][ T6499] total_unevictable 0 [ 110.006931][ T6499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1021,pid=6499,uid=0 [ 110.021803][ T6499] Memory cgroup out of memory: Killed process 6499 (syz.4.1021) total-vm:95936kB, anon-rss:940kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 110.040423][ T6551] tipc: Resetting bearer [ 110.071672][ T6551] tipc: Disabling bearer