last executing test programs: 1m50.836965649s ago: executing program 3 (id=594): r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m49.959100314s ago: executing program 3 (id=610): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r5}, &(0x7f0000000a80), &(0x7f0000000ac0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8ad996ab28735fda) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x1ffffffffffffffd}, 0x18) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1c00000000103b1169808c53aa8e00000000f4bc07", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='.$^*\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800e2ffff386f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008d826addb2863523eeb0000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB="87000000000000f70000f0b6bafd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r9, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 1m49.843198556s ago: executing program 3 (id=614): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0xc, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(0x0, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x8, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @remote, 0x20, 0x80, 0x9, 0xa}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f00000006c0)}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) close(r4) 1m49.764490518s ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="6465636f64657320698aaa00006d00feed27516fc9ddcb554f4b4225d31398ad"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000001080000000020000000003211c42c", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x300}, 0x10}}, 0x0) r7 = inotify_init1(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) close(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r12 = dup2(r10, r11) bind$802154_raw(r12, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) close(r1) r13 = syz_clone(0x20000000, &(0x7f0000000280)="4218d4f820d577ca78fd84642889b622a3d8a4ab02eb0c76726845b3f03ad2ae91b5706e0735bc0c1bcc07790e8b3748f1537acd892008c648d6721b1cf9d1f5cc048407a9cab26db30d54cc8cb52c75652857f188da0791f36174205b40f9a27b10248760a3ce2a675dafdfdc1c7014c47029ef1d6b59fd150828d3f5dcbb3c83f263597fd7f0dcb201907ea339bc1314ec7e50d74e", 0x96, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000680)="a1b7ac220babf4cf7f4feaaff689b302e93a92982bce6a95512d9fa945798c930efa7146dcf32202e2aaff97220e3204e89e571c027eecd381172d24f295326e6f2d54dd506c63e28a3da70bbc33e2d01c186c7851e75ebeb03d39289d63c313b89adc4e56f1da23d9b1eaae071f685998edf193a49c0d172a8f6e6098573dfa2c5a9ac38ce21603677abccfd21a64f1abc99948f566") capset(&(0x7f0000000380)={0x20080522, r13}, &(0x7f00000003c0)={0xfa4, 0xffffffff, 0xe56, 0x44d32e35, 0x8, 0x4}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 1m49.468947763s ago: executing program 3 (id=621): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 1m48.921619502s ago: executing program 3 (id=628): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000065efc445b7d291dd9a96000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_open_procfs(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1m48.921296973s ago: executing program 32 (id=628): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000065efc445b7d291dd9a96000000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) syz_open_procfs(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, &(0x7f0000000000)=0x8000007, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 1m45.573458091s ago: executing program 1 (id=670): socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x14c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x2a59, &(0x7f0000000080)={0x0, 0x69be, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x0, 0x1}, 0x20) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa000800450000740000000000019078ac1e0001ac1414aa030490780000000046f00000000004de00010000ac141400ac1414aa4444000100000000000000000000000000000000ac141408000000efe8581042c04592000000000000000000e000000200000000ffffffff00000003ffffff0600000000"], 0x0) 1m45.248797267s ago: executing program 1 (id=674): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1m44.798136324s ago: executing program 1 (id=681): unshare(0x22020400) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 1m43.93519163s ago: executing program 1 (id=693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="6465636f64657320698aaa00006d00feed27516fc9ddcb554f4b4225d31398ad"], 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) set_mempolicy_home_node(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000001080000000020000000003211c42c", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x33fe0}, 0x33fe0}}, 0x0) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x3f8, 0x300}, 0x10}}, 0x0) r7 = inotify_init1(0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa4000021) close(r7) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r12 = dup2(r10, r11) bind$802154_raw(r12, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) close(r1) r13 = syz_clone(0x20000000, &(0x7f0000000280)="4218d4f820d577ca78fd84642889b622a3d8a4ab02eb0c76726845b3f03ad2ae91b5706e0735bc0c1bcc07790e8b3748f1537acd892008c648d6721b1cf9d1f5cc048407a9cab26db30d54cc8cb52c75652857f188da0791f36174205b40f9a27b10248760a3ce2a675dafdfdc1c7014c47029ef1d6b59fd150828d3f5dcbb3c83f263597fd7f0dcb201907ea339bc1314ec7e50d74e", 0x96, &(0x7f0000000200), &(0x7f0000000340), &(0x7f0000000680)="a1b7ac220babf4cf7f4feaaff689b302e93a92982bce6a95512d9fa945798c930efa7146dcf32202e2aaff97220e3204e89e571c027eecd381172d24f295326e6f2d54dd506c63e28a3da70bbc33e2d01c186c7851e75ebeb03d39289d63c313b89adc4e56f1da23d9b1eaae071f685998edf193a49c0d172a8f6e6098573dfa2c5a9ac38ce21603677abccfd21a64f1abc99948f566") capset(&(0x7f0000000380)={0x20080522, r13}, &(0x7f00000003c0)={0xfa4, 0xffffffff, 0xe56, 0x44d32e35, 0x8, 0x4}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) 1m43.667752084s ago: executing program 1 (id=699): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x63012, r0, 0x353e1000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000240)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) 1m42.903697147s ago: executing program 1 (id=707): bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff3d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f00000000c0)='./file0\x00', 0xce) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="660a000000000020611187000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1m42.865976059s ago: executing program 33 (id=707): bpf$PROG_LOAD_XDP(0x5, 0x0, 0xffffffffffffff3d) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) creat(&(0x7f00000000c0)='./file0\x00', 0xce) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="660a000000000020611187000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 2.128151893s ago: executing program 6 (id=2421): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006c090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (fail_nth: 2) 1.808856428s ago: executing program 6 (id=2427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) socket(0x10, 0x3, 0x0) pipe(0x0) 1.808581659s ago: executing program 6 (id=2428): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x20, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1.17192709s ago: executing program 4 (id=2437): getitimer(0x2, &(0x7f0000000240)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, 0x0, 0x4) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.17147792s ago: executing program 4 (id=2439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000110001"], 0x4c}}, 0xc050) 1.17035502s ago: executing program 4 (id=2440): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4d, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf4, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1801000002000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='host1x_channel_submit_complete\x00', r4, 0x0, 0x3}, 0x18) write$binfmt_elf32(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004000000040020000c000000000400006fb37f9e0bb575e9eed641bfa3ca2721bdcc24b390e3f39aa9a3c17b34e6cfa228764f24b5e0fe7196829f30286f6fdf2c15f3578199936fcd8afafe954e06e0af3a8fb80fcb3c5937477ca0649632e273b28002e0ce68ae10df99e61d1788"], 0x58) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000580)={@mcast1, @remote, @loopback, 0x6, 0x3, 0xa, 0x500, 0x4f, 0x2, r6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r8 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x0, 0x28, 0x38}, 0x18) openat(r8, 0x0, 0xae43, 0x40) 1.11616105s ago: executing program 5 (id=2441): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) 1.11558387s ago: executing program 5 (id=2442): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x202234, &(0x7f0000000000)=ANY=[], 0x0, 0x269, &(0x7f0000000780)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 1.068776902s ago: executing program 5 (id=2443): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="85000000a50000007b00000000000000270000000a0000009500000000000000ed5f0be3755142ae31484cd0115bab2d0589e8ab9f429b60317312f13bd708a35c0670c61fc97c4551f58ae3bbfb9f1d97582f15f3922a3c39716ebdd3c864aec6bc39f3bf389d21e614314b44d3a320471dc33ceec91a1512761160808845c885e7e75118ae8702a167ce7d0ca850e435f105f4c7702c8505fc4669acef909579390b1a6795fae716b04fba77244be06160107ab2a3a30645bbec6570170c1d362e6d6209fa0809ffbcc48bfa0175374dc3"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x1d, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0xf6, r4, 0x1, 0x55, 0x6, @multicast}, 0x14) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) write$P9_RFSYNC(r5, &(0x7f00000003c0)={0x7, 0x33, 0x1}, 0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) getpeername$inet(r5, &(0x7f0000000240)={0x2, 0x0, @private}, &(0x7f0000000280)=0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) close_range(r7, 0xffffffffffffffff, 0x400000000000000) 963.125623ms ago: executing program 0 (id=2445): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8ad996ab28735fda) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 883.120825ms ago: executing program 6 (id=2446): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) ustat(0x2, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000002c0)={[{@resgid}, {}, {@delalloc}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@auto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000240)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = inotify_init() ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000004c0)=0xf) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES64=r0, @ANYBLOB="0000000000000000000800000e0000007b8af8ff00020000000000000000000007020000f8ffffffb703000008080000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x1000000000040000}, 0x18) r4 = socket$inet(0x2, 0x2, 0x8b) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x38}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x10) socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x6f69f2d7272fd30e) truncate(&(0x7f0000000100)='./file0/file0\x00', 0x7) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000200)=""/156) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x2) 858.462605ms ago: executing program 0 (id=2447): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) (fail_nth: 4) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x200) 756.028227ms ago: executing program 2 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 563.57481ms ago: executing program 2 (id=2450): getitimer(0x2, &(0x7f0000000240)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, 0x0, 0x4) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 546.49164ms ago: executing program 2 (id=2451): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", '\x00\t\x00', "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r2, 0x11a, 0x4, &(0x7f0000000100), 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100014004000000060ec970200140400fb8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8924, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) getpid() accept4(r4, &(0x7f00000000c0), &(0x7f0000000040)=0x80, 0x40800) madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) 489.021251ms ago: executing program 0 (id=2452): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$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") rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/116, 0x74}], 0x1, 0x8, 0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file1\x00', 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@private0, @in=@loopback}}, {{@in6=@private1}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x9c53c81df7512d19, r2, 0xbabc8000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@norecovery}, {@barrier}, {@nomblk_io_submit}, {@nodiscard}, {@acl}, {@noinit_itable}]}, 0xfc, 0x58d, &(0x7f0000001280)="$eJzs3U1rHGUcAPD/bF76qk2hFPUggR6s1G6axJcKgvUoWizovS7JNJRsuiW7KU0s2B7sxYsUQcSC+AG8eyx+AT9FQQtFStCDCJHZzLTbZDevW5Nmfz/Y9Hnmpc/855n/5Jmd3UwAPWs4+1GKeDkivkkijrTM64985vDycouPbkxkrySWlj79M4kkn1Ysn+T/HsorL0XEr19FnCqtbrc+vzBdqVbT2bw+0pi5OlKfXzh9eaYylU6lV8bGx8++NT727jtvdy3W1y/8/f0n9z48+/WJxe9+fnD0ThLn4nA+rzWObbjZWhmu/JuXBuLcigVHu9DYbpLs9AawJX15ng9Edg44En151gN735cRsQT0qET+Q48qxgHFtX2XroOfGw8/WL4AasY+mMd/oHWJ/c1ro4OLyVNXRtn17lAX2h+OiF/+uHsne8Xa70McWKcOsCk3b0XEmf7+1ef/ZPm94W0403zzeG0r2+i13z+wk+5l45832o3/Snlu7m/+XDn+OdQmd7di/fwvPehCMx1l47/32o5/H5+6hvry2gvNMd9AculyNT0TES9GxMkY2JfV17qfc3bx/lKnea3jv+yVtV+MBfPteNC/7+l1JiuNSkQMbifuwsNbEa/0t4s/edz/SZv+z/bHhQ22cTy9+2qneevH/2wt/RTxWtv+f3JHK1l1fzLbE4/vT440j4eR4qhY7a/bx3/r1P5Ox5/1/8G14x9KWu/X1jffxo/7/0k7zdvq8T+YfNYsF0lwvdJozI5GDCYfr54+9mTdol4sn8V/8sTa5792x3928bVvg/HfPnb7863H/2xl8U9uqv83X7j/0Rc/dGp/Y/3/ZrN0Mp+Sn//ayztloxu43f0HAAAAAAAAu0kpIg5HUiq3TCuXlz/fcSwOlqq1euPUpdrclclofld2KAZKxZ3uIy2fhxjNPw9b1MdW1Mcj4mhEfNt3oFkvT9Sqk4mvjQIAAAAAAAAAAAAAAAAAAEDkz3Eovv+//LcASqVy/scAfu/b6a0Dnrnmgw02+jQDYE9Z95H/3XjSE7ArrZv/wJ4l/6F3yX/oXfIfepf8h94l/6F3yX/oXfIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAuurC+fPZa2nx0Y2JrD55bX5uunbt9GRany7PzE2UJ2qzV8tTtdpUNS1P1GbW+/+qtdrV0bGYuz7SSOuNkfr8wsWZ2tyVxsXLM5Wp9GI68L9EBQAAAAAAAAAAAAAAAAAAAM+X+vzCdKVaTWd3RyHZHZvxdOH9WDGllO+8nd6w7gW4bEur9++WKBQ6FG7l3bu5tXbohAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfwXAAD//5zxLLU=") bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYBLOB, @ANYRES16, @ANYBLOB='\x00'/18], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) syz_emit_ethernet(0x104a, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0) vmsplice(r5, &(0x7f0000000e40)=[{&(0x7f0000000880)="474f40a45868c805ab104acad5ef0239eae2e026b68832c14bf773611328cbfd8cd6f84e67e5a02c1783652513bad5728a2750b859c02d972013093e3c665e0753e70ec31ad7d7a44c3acb18bc354718bf91d7f95f6a1f1d34f9dff3a22759061e5cbd8696eb0ac0b17f1da0b6a75e4d4c3b21776103c8060b4d095a51623305ce7f1da1bda3d78cf01bdcabf5b4fb", 0x8f}, {&(0x7f0000000940)="e23ad3785658e5d8309d846f6fd1640b87cecfd291f96f3640e88f650f2a5edacde437d95542c203de335f08ea258d2ea7ff7064b97fb313d633da51db0f2ebf10a86b1f6f32a830ae97b1aa6cffe51c6ae9a9567b726bb922e89775e11d081b9b593a5da460c8d0ecf7340f45474def7638eebc07", 0x75}, {&(0x7f00000009c0)="abed8a51684e26192e10260ff0214cbc8c200dbf316c577a5816ca9fb29b4f4275aee812e67e05e6ef4be257701f679109110cb4cdeb6e0224746946f07f122c90ca0104cfd614faa9138eb1a66f29c3b1aeed386fef75a905d43c9e7e3676ba5c47a750ac1e089d557983ad275c5636fe61937537924a1e493cd31638119265049ded32933e3425b4c930d3f656679891d8dde3e8ad779eaf33db1cd9032a2c18fcf70193f8f76942876147ac55c1f8ffc7e27de84a97f347befd5564584f9e958ec23d898a5d6b29", 0xc9}, {&(0x7f0000000d40)="b01b204255cc54aaf5fe0ddf8a1b63a2670750cd9b83741767e7d18d9e8f7a1f24205c35c3a7d045761b5516c225732920fd2f5b7316056fb8984211003c3e799fc128cb9b5b48aaf52a6ec274272d85958f4815756d91085d172431d11b92e14da955f25d08aa551ad15535227c528b817787c259bbd9bb9c1907c01f4d19", 0x7f}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000000dc0)="db258c080c91f10802fa6934f4785e0ce12c390479d87c2d78a9aede5efbb9433b4b5439d5e300ba9a255416d49b3940acd046f31d3b02fe73200a2df34177b4b03aa08ddac4c2dceaa9015db5c163754d02c1cd7004f86e81b755771d820d5d86d4c4946dcf235239100a2e597ee395a6de42", 0x73}], 0x6, 0x2) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0), &(0x7f0000000240)=0x4) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) unlinkat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x200) 479.631912ms ago: executing program 0 (id=2453): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x202234, &(0x7f0000000000)=ANY=[], 0x0, 0x269, &(0x7f0000000780)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 451.274642ms ago: executing program 6 (id=2454): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x5, 0x5}, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x7fffffff, 0x4) mount_setattr(r1, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900e27f00000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5b) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@stripe={'stripe', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@noinit_itable}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000000)='%{\x00', 0x0) fcntl$addseals(r7, 0x409, 0xf92e8637225b938f) shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffc000/0x1000)=nil) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000000), &(0x7f00000005c0)=r10}, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) 404.975253ms ago: executing program 5 (id=2455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x101, 0x8, 0x10, 0x2000, r0, 0x31c5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x7}, 0x50) close_range(r6, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xcb83, 0x0, 0x2, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r8, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r9, 0x3516, 0x0, 0x4, 0x0, 0x3d) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x34, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @empty}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20000084) syz_emit_ethernet(0xe85, &(0x7f0000000d00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x8, 0xe77, 0x65, 0x0, 0x1, 0x2f, 0x0, @loopback, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xc, 0x3, [0x5], "493e45e1bbc13386158e4a08"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x2]}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x2, {{0x1, 0x1, 0x81, 0x3, 0x0, 0x0, 0x3, 0x81}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0xe1, 0x1, 0x0, 0x2, 0x7, 0x3}, 0x2, {0xc15, 0x6, 0x1, 0x1a, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "c59053960a3fbc4fa1d1e2e08e926201656f0310431f0cf464b93417fd77aa313ce89e4feb"}}}}}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0xffff000000000000, 0x0, 0x10000082}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) timerfd_create(0x0, 0x0) 404.306513ms ago: executing program 6 (id=2456): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x20, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 386.373313ms ago: executing program 5 (id=2457): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket$inet(0x2, 0x3, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r4, r6, 0xffffffffffffffff) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000500)={{{@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4e24, 0x0, 0x4e21, 0x3, 0x2, 0x80, 0x40, 0x62, r3, r6}, {0x3ff, 0x9, 0x9, 0x8, 0x0, 0x3, 0xe992bd2, 0xa8}, {0x4, 0x9, 0xee4c, 0x1}, 0xa, 0x6e6bb9, 0x0, 0x1, 0x5, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x22}, 0x3506, 0x3, 0x2, 0x68, 0x9ea, 0x5, 0x1}}, 0xe8) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000fcd9000030000018120000080000000000675017ca2729d816e809c60169a03b1acd1a88a9dce5f0786c81cb9d0d1b581b42d5c6dd4eeb8468e0921128e2f098dacb1ed81685bab5860bfa1e90bb6a4ee6939a1b993b802c0282fef0790ebe52c0d2a960e4e6ca1ecfe59f5dc3443dca5fa526723f3d632a5080f8dce5f65955d86fc066426c46f206481cfbcbbcf68fc6db3b66ce270d49c9004b705351b149d602163888005b4dd9cdf893d60f0f6415c024563691e2e743c65645a8dceb88bfd4d2464daeca0ba276e394c6d917a9aa9cfe47b45da0d5f63fddd767a14927dec1", @ANYRES32=r1, @ANYBLOB="0000000000000000b7000400008506000000000000000000000000000095000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="0000000000c34d000700000012800b00011a00726964676500001c00a905028008000400000000000800150006000000050016"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x6, 0x4) 375.788463ms ago: executing program 2 (id=2458): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8ad996ab28735fda) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd24, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x4000080) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$eJzs3c1rXOUaAPBnZpo0SXNvP+7l0vbCbaEXej9oJh9IE3XjSl0UxIIbhRqTaayZZEJmUpvQRaq7LlyIoiAu3PsXuLEriyCudS8upKI1ggrCyDkzk+Zr4qBpBnJ+Pzid95z3dJ73zfC8nHnPOXMCyKyzyT+5iMGI+DwijjZWN+9wtvGydv/mVLLkol6//F0u3S9Zb+3a+n9HImI1Ivoi4tknI17KbY9bXV6ZnSyXS4vN9WJtbqFYXV65cG1ucqY0U5ofGb84MTE+PDY6sWd9vf3GK7cvffR074c/vX7v7puffJw0a7BZt7Efe6nR9Z44vmHboYh4/GEE64JCsz/93W4If0jy+f0tIs6l+X80CumnCWRBvV6v/1o/3K56tQ4cWPn0GDiXH4qIRjmfHxpqHMP/PQby5Uq19v+rlaX56cax8rHoyV+9Vi4NN78rHIueXLI+kpYfrI9uWR+LSI+B3yr0p+tDU5Xy9P4OdcAWR7bk/4+FRv4DGeErP2SX/Ifskv+QXfIfskv+Q3bJf8gu+Q/ZJf8hu+Q/ZJf8h+yS/5BJz1y6lCz11v3v09eXl2Yr1y9Ml6qzQ3NLU0NTlcWFoZlKZSa9Z2fu996vXKksjDwSSzeKtVK1Vqwur1yZqyzN166k9/VfKfXsS6+AThw/c+fLXESsPtqfLoneZp1chYOtXs9Ft+9BBrqj0O0BCOgaU3+QXb7jAzv8RO8mfe0qFva+LcD+yHe7AUDXnD/l/B9klfl/yC7z/5BdjvEB8/+QPeb/IbsG2zz/6y8bnt01HBF/jYgvCj2HW8/6Ag6C/De55vH/+aP/Htxa25v7OT1F0BsRr753+Z0bk7Xa4kiy/fv17bV3m9tHu9F+oFOtPG3lMQCQXWv3b061lv2M++0TjYsQtsc/1Jyb7EvPUQ6s5TZdq5Dbo2sXVm9FxMmd4ueazztvnPkYWCtsi3+i+ZprvEXa3kPpc9P3J/6pDfH/tSH+6T/9V4FsuJOMP8M75V8+zelYz7/N48/gHl070X78y6+Pf4U249+ZDmO8/P5rX7eNfyvi9I7xW/H60lhb4ydtO99h/HsvPPePdnX1Dxrvs1P8lqRUrM0tFKvLKxfS35GbKc2PjF+cmBgfHhudKKZz1MXWTPV2j5387O5u/R9oE3+3/ifb/tth/3/556fPn90l/n/O7fz5n9glfn9E/K/D+D+MfvViu7ok/nSb/ud3iZ9sG+swfvXtpw53uCsAsA+qyyuzk+VyaVFBQUFhvdDtkQl42B4kfbdbAgAAAAAAAAAAAHRqPy4n7nYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOgt8CAAD//1kn1ls=") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 363.554003ms ago: executing program 5 (id=2459): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000000740)="cc", 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r3, 0x0, 0x4ab}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x3) ioctl$TCGETA(r5, 0x5405, 0xffffffffffffffff) sendfile(r1, r0, 0x0, 0x3ffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x48, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) sendfile(r1, r0, 0x0, 0x7fffeffd) 351.318484ms ago: executing program 2 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) (fail_nth: 5) 324.199774ms ago: executing program 0 (id=2461): getitimer(0x2, &(0x7f0000000240)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, 0x0, 0x4) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 304.016024ms ago: executing program 4 (id=2462): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/ip6_tables_matches\x00') r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) pread64(r2, &(0x7f0000000480)=""/177, 0xb1, 0xe0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000040), 0x4) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]}) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 168.590647ms ago: executing program 0 (id=2463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x400, 0x800, 0x0, 0x10}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000900000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0xf3a, 0x0) splice(r5, 0x0, r9, 0x0, 0x80, 0x6) write(r9, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000a00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r10 = accept4$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c, 0x800) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000001900)={0x8, @remote, 0x4e22, 0x4, 'ovf\x00', 0x2, 0x3, 0x5b}, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000001c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x16b0, 0x0, 0x1480, 0x1268, 0x1128, 0x1480, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x15e0, 0x6, &(0x7f0000000140), {[{{@ipv6={@mcast2, @local, [0xffffff00, 0x0, 0xff, 0xff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'bond_slave_0\x00', 'sit0\x00', {}, {}, 0x5e, 0x3, 0x2, 0x4}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x1, './cgroup/syz1\x00', 0x9, {0x9}}}, @common=@eui64={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0x26, 0x23, 0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'pimreg0\x00', 'ip6gretap0\x00', {}, {}, 0x2c, 0x8, 0x0, 0x50}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0xa}}}, {{@ipv6={@mcast1, @local, [0x0, 0xff000000, 0xff, 0xff], [0x0, 0xffffff00, 0xff, 0xffffffff], 'ip6_vti0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x40}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x31, 0x2b}}}, {{@ipv6={@local, @mcast1, [0xffffff00, 0xc0cf6fcc0015453f, 0xff], [0xff000000], 'dummy0\x00', 'pim6reg0\x00', {0xff}, {}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x2, 0x0, [0x7, 0x3, 0xc, 0x9c, 0x1, 0x7ff, 0xffff, 0x8b8, 0x4, 0x1000, 0x2, 0x2, 0x8000, 0x1e, 0x2fbd], 0x6}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private0, 0x3, 0x5, 0x3ff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1710) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0xd, 0x14, &(0x7f0000001940)=ANY=[@ANYBLOB="851000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000006459c0ff0800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000100000030000f2175100e00a0000df00000000010400009500"/57], &(0x7f0000001a00)='GPL\x00', 0x2, 0x1000, &(0x7f0000003340)=""/4096, 0x0, 0x6c, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000001b40)={0x3, 0x10, 0x4, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000001b80)=[{0x1, 0x4, 0x3, 0x1}, {0x2, 0x3, 0xe, 0xa}, {0x4, 0x4, 0xa, 0x7}], 0x10, 0x4}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="895568000000", @ANYRES16=r12, @ANYBLOB="01002bbd7000000000001a00000018000180140002006261746164765f736c6176655f310000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 57.565009ms ago: executing program 2 (id=2464): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = dup2(r1, r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000008800), 0x2, 0x200048cc) 43.782639ms ago: executing program 4 (id=2465): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x11, 0x25d, &(0x7f0000000480)="$eJzs2k9rXFUYB+D3TqpJU9MZ8R8tiAddqJtLM2sXDdKCOKBoR6iCdGpvdcglE2aGwIjYrPRruBaX7gTp0k02fgIX7rLJMgvxyiTTNNYpNgYzoX2ezbxwz++ee84c7ryL2X4riyzGhlHLsqhdjs3YzaIRtbhnM958/fovL394/eN3V1qtKx+kdHXl2nIzpXT+lZ8/+eqHV+8Oz3304/mf5mOr8en2TvP3rRe3Lmz/ee2L7iB1793kZq837Nwsi3SrO1jNU3q/LDqDInXXBkV/mDrp4Prtsre+PpqPiKXF9X4xGKTO2iitFqM07KVhf5Q6n3e6aynP87S0GBxH+/vdqlqIiBtRVdXZ7+Lc3Vj6LeqRPZuy5y5nL9zIXtrMLuxUVX3Wj8r/YreqYqd6yvf/hDr0Ul+IKL/daG+09z/3r6/cTuOfhyIuRT3+iPExmdirz05uk1JKjfimvDPJ39loz03y0Y0yiliOejT+ka+u1ibplNLf8/OxeDjfjHo8PyX/TutKc2p+Id547VA+j3r8+ln0ooxbMc7ez3+9nNLb77UeyF/cGwcA8LjJ04Gp/VueP+z6fv6gv5reH+71V5em9mdn4uKZ2a6diMHoy9VOWRb9RyyePsrgYxXjw3FSc/3nYi6OMHjxWHM9dDequdOyGzMuqhOYK2oRjzQ4Fk7Ltvxr8czkXfDASnkC3D8Gs34SAAAAAAAAAAAAjuIk/mA46zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn218BAAD//6Y9vzY=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x28c) 0s ago: executing program 4 (id=2466): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x20}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000380)=""/35, 0x0, 0x23, 0x0, 0x7}, 0x28) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r7, 0x30b, 0xfffffffe, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x58, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000800}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x2}}]}}]}, 0x38}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) creat(0x0, 0x1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4200, 0x0) mount(&(0x7f00000000c0), 0x0, 0x0, 0x8c7c88, 0x0) r12 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r12, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r13 = syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, r13, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 94967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9106 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0041e9a9 code=0x7ffc0000 [ 127.965646][ T29] audit: type=1326 audit(1753431655.044:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 127.989185][ T29] audit: type=1326 audit(1753431655.044:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 128.012641][ T29] audit: type=1326 audit(1753431655.044:6109): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 128.040211][ T9101] Falling back ldisc for ttyS3. [ 128.131948][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 128.141072][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1615'. [ 128.214425][ T29] audit: type=1326 audit(1753431655.304:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 128.237965][ T29] audit: type=1326 audit(1753431655.304:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.0.1618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 128.460458][ T9151] Falling back ldisc for ttyS3. [ 129.070855][ T9120] syz.2.1611 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 129.084995][ T9120] CPU: 1 UID: 0 PID: 9120 Comm: syz.2.1611 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 129.085095][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.085109][ T9120] Call Trace: [ 129.085115][ T9120] [ 129.085124][ T9120] __dump_stack+0x1d/0x30 [ 129.085145][ T9120] dump_stack_lvl+0xe8/0x140 [ 129.085162][ T9120] dump_stack+0x15/0x1b [ 129.085176][ T9120] dump_header+0x81/0x220 [ 129.085209][ T9120] oom_kill_process+0x334/0x3f0 [ 129.085238][ T9120] out_of_memory+0x979/0xb80 [ 129.085270][ T9120] try_charge_memcg+0x5e6/0x9e0 [ 129.085381][ T9120] obj_cgroup_charge_pages+0xa6/0x150 [ 129.085409][ T9120] __memcg_kmem_charge_page+0x9f/0x170 [ 129.085486][ T9120] __alloc_frozen_pages_noprof+0x188/0x360 [ 129.085520][ T9120] alloc_pages_mpol+0xb3/0x250 [ 129.085547][ T9120] alloc_pages_noprof+0x90/0x130 [ 129.085654][ T9120] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 129.085692][ T9120] __kvmalloc_node_noprof+0x30f/0x4e0 [ 129.085747][ T9120] ? ip_set_alloc+0x1f/0x30 [ 129.085816][ T9120] ? ip_set_alloc+0x1f/0x30 [ 129.085895][ T9120] ? __kmalloc_cache_noprof+0x189/0x320 [ 129.085919][ T9120] ip_set_alloc+0x1f/0x30 [ 129.085945][ T9120] hash_netiface_create+0x282/0x740 [ 129.086045][ T9120] ? __pfx_hash_netiface_create+0x10/0x10 [ 129.086076][ T9120] ip_set_create+0x3c9/0x960 [ 129.086186][ T9120] ? __nla_parse+0x40/0x60 [ 129.086207][ T9120] nfnetlink_rcv_msg+0x4c6/0x590 [ 129.086252][ T9120] ? selinux_capable+0x1f9/0x270 [ 129.086350][ T9120] netlink_rcv_skb+0x120/0x220 [ 129.086382][ T9120] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 129.086462][ T9120] nfnetlink_rcv+0x16b/0x1690 [ 129.086486][ T9120] ? __kfree_skb+0x109/0x150 [ 129.086512][ T9120] ? nlmon_xmit+0x4f/0x60 [ 129.086608][ T9120] ? consume_skb+0x49/0x150 [ 129.086635][ T9120] ? nlmon_xmit+0x4f/0x60 [ 129.086656][ T9120] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 129.086688][ T9120] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 129.086823][ T9120] ? __dev_queue_xmit+0x182/0x1fb0 [ 129.086897][ T9120] ? ref_tracker_free+0x37d/0x3e0 [ 129.086923][ T9120] ? __netlink_deliver_tap+0x4dc/0x500 [ 129.086944][ T9120] netlink_unicast+0x5a8/0x680 [ 129.087041][ T9120] netlink_sendmsg+0x58b/0x6b0 [ 129.087064][ T9120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.087083][ T9120] __sock_sendmsg+0x145/0x180 [ 129.087111][ T9120] ____sys_sendmsg+0x31e/0x4e0 [ 129.087134][ T9120] ___sys_sendmsg+0x17b/0x1d0 [ 129.087213][ T9120] __x64_sys_sendmsg+0xd4/0x160 [ 129.087267][ T9120] x64_sys_call+0x2999/0x2fb0 [ 129.087289][ T9120] do_syscall_64+0xd2/0x200 [ 129.087309][ T9120] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 129.087414][ T9120] ? clear_bhb_loop+0x40/0x90 [ 129.087436][ T9120] ? clear_bhb_loop+0x40/0x90 [ 129.087501][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.087523][ T9120] RIP: 0033:0x7f4f0041e9a9 [ 129.087539][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.087556][ T9120] RSP: 002b:00007f4efea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.087575][ T9120] RAX: ffffffffffffffda RBX: 00007f4f00645fa0 RCX: 00007f4f0041e9a9 [ 129.087632][ T9120] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 129.087645][ T9120] RBP: 00007f4f004a0d69 R08: 0000000000000000 R09: 0000000000000000 [ 129.087658][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.087671][ T9120] R13: 0000000000000000 R14: 00007f4f00645fa0 R15: 00007ffcfb423878 [ 129.087690][ T9120] [ 129.087696][ T9120] memory: usage 307200kB, limit 307200kB, failcnt 205 [ 129.440520][ T9120] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0 [ 129.448431][ T9120] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 129.455734][ T9120] Memory cgroup stats for /syz2: [ 129.455968][ T9120] cache 0 [ 129.463869][ T9120] rss 0 [ 129.466758][ T9120] shmem 0 [ 129.469690][ T9120] mapped_file 0 [ 129.473177][ T9120] dirty 0 [ 129.476114][ T9120] writeback 0 [ 129.479384][ T9120] workingset_refault_anon 33 [ 129.484056][ T9120] workingset_refault_file 65 [ 129.488665][ T9120] swap 327680 [ 129.491954][ T9120] swapcached 0 [ 129.495336][ T9120] pgpgin 120205 [ 129.498798][ T9120] pgpgout 120205 [ 129.502452][ T9120] pgfault 126111 [ 129.506102][ T9120] pgmajfault 42 [ 129.509560][ T9120] inactive_anon 0 [ 129.513237][ T9120] active_anon 0 [ 129.516689][ T9120] inactive_file 0 [ 129.520412][ T9120] active_file 0 [ 129.523874][ T9120] unevictable 0 [ 129.527540][ T9120] hierarchical_memory_limit 314572800 [ 129.527586][ T9120] hierarchical_memsw_limit 9223372036854771712 [ 129.527595][ T9120] total_cache 0 [ 129.527603][ T9120] total_rss 0 [ 129.527609][ T9120] total_shmem 0 [ 129.527616][ T9120] total_mapped_file 0 [ 129.527623][ T9120] total_dirty 0 [ 129.527630][ T9120] total_writeback 0 [ 129.527648][ T9120] total_workingset_refault_anon 33 [ 129.527657][ T9120] total_workingset_refault_file 65 [ 129.527665][ T9120] total_swap 327680 [ 129.527673][ T9120] total_swapcached 0 [ 129.527680][ T9120] total_pgpgin 120205 [ 129.527688][ T9120] total_pgpgout 120205 [ 129.527759][ T9120] total_pgfault 126111 [ 129.527767][ T9120] total_pgmajfault 42 [ 129.527774][ T9120] total_inactive_anon 0 [ 129.527789][ T9120] total_active_anon 0 [ 129.527796][ T9120] total_inactive_file 0 [ 129.527803][ T9120] total_active_file 0 [ 129.527809][ T9120] total_unevictable 0 [ 129.527816][ T9120] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1611,pid=9119,uid=0 [ 129.527941][ T9120] Memory cgroup out of memory: Killed process 9119 (syz.2.1611) total-vm:93760kB, anon-rss:896kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 129.971908][ T9227] netlink: 'syz.0.1642': attribute type 4 has an invalid length. [ 130.240673][ T9237] Falling back ldisc for ttyS3. [ 130.280021][ T9249] syzkaller1: entered promiscuous mode [ 130.285617][ T9249] syzkaller1: entered allmulticast mode [ 131.678729][ T9294] syz.4.1655 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 131.693001][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.4.1655 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 131.693029][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.693072][ T9294] Call Trace: [ 131.693078][ T9294] [ 131.693085][ T9294] __dump_stack+0x1d/0x30 [ 131.693104][ T9294] dump_stack_lvl+0xe8/0x140 [ 131.693121][ T9294] dump_stack+0x15/0x1b [ 131.693160][ T9294] dump_header+0x81/0x220 [ 131.693274][ T9294] oom_kill_process+0x334/0x3f0 [ 131.693332][ T9294] out_of_memory+0x979/0xb80 [ 131.693424][ T9294] try_charge_memcg+0x5e6/0x9e0 [ 131.693465][ T9294] obj_cgroup_charge_pages+0xa6/0x150 [ 131.693495][ T9294] __memcg_kmem_charge_page+0x9f/0x170 [ 131.693542][ T9294] __alloc_frozen_pages_noprof+0x188/0x360 [ 131.693618][ T9294] alloc_pages_mpol+0xb3/0x250 [ 131.693649][ T9294] alloc_pages_noprof+0x90/0x130 [ 131.693694][ T9294] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 131.693755][ T9294] __kvmalloc_node_noprof+0x30f/0x4e0 [ 131.693777][ T9294] ? ip_set_alloc+0x1f/0x30 [ 131.693800][ T9294] ? ip_set_alloc+0x1f/0x30 [ 131.693826][ T9294] ? __kmalloc_cache_noprof+0x189/0x320 [ 131.693916][ T9294] ip_set_alloc+0x1f/0x30 [ 131.693941][ T9294] hash_netiface_create+0x282/0x740 [ 131.694035][ T9294] ? __pfx_hash_netiface_create+0x10/0x10 [ 131.694118][ T9294] ip_set_create+0x3c9/0x960 [ 131.694157][ T9294] ? __nla_parse+0x40/0x60 [ 131.694209][ T9294] nfnetlink_rcv_msg+0x4c6/0x590 [ 131.694308][ T9294] ? selinux_capable+0x1f9/0x270 [ 131.694339][ T9294] netlink_rcv_skb+0x120/0x220 [ 131.694372][ T9294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 131.694413][ T9294] nfnetlink_rcv+0x16b/0x1690 [ 131.694434][ T9294] ? __kfree_skb+0x109/0x150 [ 131.694465][ T9294] ? nlmon_xmit+0x4f/0x60 [ 131.694487][ T9294] ? consume_skb+0x49/0x150 [ 131.694518][ T9294] ? nlmon_xmit+0x4f/0x60 [ 131.694540][ T9294] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 131.694716][ T9294] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 131.694750][ T9294] ? __dev_queue_xmit+0x182/0x1fb0 [ 131.694772][ T9294] ? ref_tracker_free+0x37d/0x3e0 [ 131.694807][ T9294] ? __netlink_deliver_tap+0x4dc/0x500 [ 131.694828][ T9294] netlink_unicast+0x5a8/0x680 [ 131.694898][ T9294] netlink_sendmsg+0x58b/0x6b0 [ 131.694920][ T9294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.695053][ T9294] __sock_sendmsg+0x145/0x180 [ 131.695074][ T9294] ____sys_sendmsg+0x31e/0x4e0 [ 131.695092][ T9294] ___sys_sendmsg+0x17b/0x1d0 [ 131.695157][ T9294] __x64_sys_sendmsg+0xd4/0x160 [ 131.695248][ T9294] x64_sys_call+0x2999/0x2fb0 [ 131.695267][ T9294] do_syscall_64+0xd2/0x200 [ 131.695297][ T9294] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.695326][ T9294] ? clear_bhb_loop+0x40/0x90 [ 131.695348][ T9294] ? clear_bhb_loop+0x40/0x90 [ 131.695403][ T9294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.695421][ T9294] RIP: 0033:0x7f13c38ae9a9 [ 131.695434][ T9294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.695451][ T9294] RSP: 002b:00007f13c1f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.695468][ T9294] RAX: ffffffffffffffda RBX: 00007f13c3ad5fa0 RCX: 00007f13c38ae9a9 [ 131.695480][ T9294] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 131.695492][ T9294] RBP: 00007f13c3930d69 R08: 0000000000000000 R09: 0000000000000000 [ 131.695578][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.695590][ T9294] R13: 0000000000000000 R14: 00007f13c3ad5fa0 R15: 00007fff478d9228 [ 131.695606][ T9294] [ 131.695612][ T9294] memory: usage 307200kB, limit 307200kB, failcnt 662 [ 132.048310][ T9294] memory+swap: usage 307304kB, limit 9007199254740988kB, failcnt 0 [ 132.056235][ T9294] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 132.063567][ T9294] Memory cgroup stats for /syz4: [ 132.064165][ T9294] cache 73728 [ 132.072494][ T9294] rss 73728 [ 132.075623][ T9294] shmem 0 [ 132.078638][ T9294] mapped_file 0 [ 132.082173][ T9294] dirty 0 [ 132.085137][ T9294] writeback 16384 [ 132.088787][ T9294] workingset_refault_anon 499 [ 132.093629][ T9294] workingset_refault_file 1013 [ 132.098396][ T9294] swap 114688 [ 132.101744][ T9294] swapcached 86016 [ 132.105552][ T9294] pgpgin 103543 [ 132.109010][ T9294] pgpgout 103502 [ 132.112567][ T9294] pgfault 125332 [ 132.116224][ T9294] pgmajfault 282 [ 132.119799][ T9294] inactive_anon 0 [ 132.123485][ T9294] active_anon 8192 [ 132.127199][ T9294] inactive_file 0 [ 132.130906][ T9294] active_file 73728 [ 132.134713][ T9294] unevictable 0 [ 132.138164][ T9294] hierarchical_memory_limit 314572800 [ 132.143563][ T9294] hierarchical_memsw_limit 9223372036854771712 [ 132.149712][ T9294] total_cache 73728 [ 132.153613][ T9294] total_rss 73728 [ 132.157237][ T9294] total_shmem 0 [ 132.160715][ T9294] total_mapped_file 0 [ 132.164722][ T9294] total_dirty 0 [ 132.168181][ T9294] total_writeback 16384 [ 132.172737][ T9294] total_workingset_refault_anon 499 [ 132.177933][ T9294] total_workingset_refault_file 1013 [ 132.183302][ T9294] total_swap 114688 [ 132.187118][ T9294] total_swapcached 86016 [ 132.191440][ T9294] total_pgpgin 103543 [ 132.195489][ T9294] total_pgpgout 103502 [ 132.199560][ T9294] total_pgfault 125332 [ 132.203732][ T9294] total_pgmajfault 282 [ 132.207803][ T9294] total_inactive_anon 0 [ 132.211970][ T9294] total_active_anon 8192 [ 132.216207][ T9294] total_inactive_file 0 [ 132.220479][ T9294] total_active_file 73728 [ 132.224803][ T9294] total_unevictable 0 [ 132.228823][ T9294] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1655,pid=9293,uid=0 [ 132.243453][ T9294] Memory cgroup out of memory: Killed process 9294 (syz.4.1655) total-vm:93760kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 132.473006][ T9353] Falling back ldisc for ttyS3. [ 132.615472][ T9367] syzkaller1: entered promiscuous mode [ 132.621090][ T9367] syzkaller1: entered allmulticast mode [ 132.852067][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 132.852079][ T29] audit: type=1326 audit(1753431659.954:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 132.899571][ T29] audit: type=1326 audit(1753431659.984:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 132.923252][ T29] audit: type=1326 audit(1753431659.984:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 132.946931][ T29] audit: type=1326 audit(1753431659.984:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 132.970197][ T29] audit: type=1326 audit(1753431659.984:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 132.993772][ T29] audit: type=1326 audit(1753431659.984:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9405 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 133.040354][ T9413] Falling back ldisc for ttyS3. [ 133.415827][ T9453] syzkaller1: entered promiscuous mode [ 133.421399][ T9453] syzkaller1: entered allmulticast mode [ 133.608873][ T9423] syz.4.1687 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 133.619933][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.4.1687 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 133.620018][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.620030][ T9423] Call Trace: [ 133.620037][ T9423] [ 133.620044][ T9423] __dump_stack+0x1d/0x30 [ 133.620066][ T9423] dump_stack_lvl+0xe8/0x140 [ 133.620083][ T9423] dump_stack+0x15/0x1b [ 133.620170][ T9423] dump_header+0x81/0x220 [ 133.620235][ T9423] oom_kill_process+0x334/0x3f0 [ 133.620321][ T9423] out_of_memory+0x979/0xb80 [ 133.620348][ T9423] try_charge_memcg+0x5e6/0x9e0 [ 133.620414][ T9423] charge_memcg+0x51/0xc0 [ 133.620439][ T9423] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 133.620492][ T9423] __read_swap_cache_async+0x1df/0x350 [ 133.620521][ T9423] swap_cluster_readahead+0x277/0x3e0 [ 133.620582][ T9423] swapin_readahead+0xde/0x6f0 [ 133.620749][ T9423] ? __filemap_get_folio+0x4f7/0x6b0 [ 133.620780][ T9423] ? swap_cache_get_folio+0x77/0x200 [ 133.620996][ T9423] do_swap_page+0x301/0x2430 [ 133.621015][ T9423] ? css_rstat_updated+0xcd/0x5b0 [ 133.621079][ T9423] ? __pfx_default_wake_function+0x10/0x10 [ 133.621100][ T9423] handle_mm_fault+0x9a5/0x2be0 [ 133.621121][ T9423] ? mas_walk+0xf2/0x120 [ 133.621179][ T9423] do_user_addr_fault+0x636/0x1090 [ 133.621204][ T9423] ? fpregs_restore_userregs+0xad/0x1d0 [ 133.621229][ T9423] ? switch_fpu_return+0xe/0x20 [ 133.621285][ T9423] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 133.621347][ T9423] exc_page_fault+0x62/0xa0 [ 133.621415][ T9423] asm_exc_page_fault+0x26/0x30 [ 133.621436][ T9423] RIP: 0033:0x7f13c37853fc [ 133.621450][ T9423] Code: 66 0f 1f 44 00 00 69 3d b6 02 e8 00 e8 03 00 00 48 8d 1d b7 0b 35 00 e8 12 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 133.621467][ T9423] RSP: 002b:00007fff478d9390 EFLAGS: 00010206 [ 133.621483][ T9423] RAX: 0000000000000000 RBX: 00007f13c3ad5fa0 RCX: 0000000000000000 [ 133.621558][ T9423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555705f5808 [ 133.621568][ T9423] RBP: 00007f13c3ad7ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 133.621580][ T9423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000020b10 [ 133.621593][ T9423] R13: 00007f13c3ad6080 R14: ffffffffffffffff R15: 00007fff478d94a0 [ 133.621612][ T9423] [ 133.846337][ T9423] memory: usage 307200kB, limit 307200kB, failcnt 827 [ 133.853162][ T9423] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 133.861079][ T9423] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 133.868363][ T9423] Memory cgroup stats for /syz4: [ 133.869163][ T9423] cache 0 [ 133.874946][ T29] audit: type=1326 audit(1753431660.654:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 133.877078][ T9423] rss 0 [ 133.877086][ T9423] shmem 0 [ 133.877092][ T9423] mapped_file 0 [ 133.900463][ T29] audit: type=1326 audit(1753431660.654:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 133.903181][ T9423] dirty 0 [ 133.903189][ T9423] writeback 8192 [ 133.906097][ T29] audit: type=1326 audit(1753431660.654:6178): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 133.909526][ T9423] workingset_refault_anon 533 [ 133.968027][ T9423] workingset_refault_file 1055 [ 133.972806][ T9423] swap 192512 [ 133.976088][ T9423] swapcached 16384 [ 133.979802][ T9423] pgpgin 103946 [ 133.983327][ T9423] pgpgout 103942 [ 133.987123][ T9423] pgfault 126021 [ 133.990824][ T9423] pgmajfault 309 [ 133.994386][ T9423] inactive_anon 16384 [ 133.998429][ T9423] active_anon 0 [ 134.002077][ T9423] inactive_file 0 [ 134.005766][ T9423] active_file 0 [ 134.009305][ T9423] unevictable 0 [ 134.012813][ T9423] hierarchical_memory_limit 314572800 [ 134.018250][ T9423] hierarchical_memsw_limit 9223372036854771712 [ 134.024470][ T9423] total_cache 0 [ 134.027931][ T9423] total_rss 0 [ 134.031280][ T9423] total_shmem 0 [ 134.034769][ T9423] total_mapped_file 0 [ 134.038898][ T9423] total_dirty 0 [ 134.042409][ T9423] total_writeback 8192 [ 134.046617][ T9423] total_workingset_refault_anon 533 [ 134.051926][ T9423] total_workingset_refault_file 1055 [ 134.057205][ T9423] total_swap 192512 [ 134.061052][ T9423] total_swapcached 16384 [ 134.065293][ T9423] total_pgpgin 103946 [ 134.069369][ T9423] total_pgpgout 103942 [ 134.073496][ T9423] total_pgfault 126021 [ 134.077563][ T9423] total_pgmajfault 309 [ 134.081670][ T9423] total_inactive_anon 16384 [ 134.086188][ T9423] total_active_anon 0 [ 134.090660][ T9423] total_inactive_file 0 [ 134.094943][ T9423] total_active_file 0 [ 134.098963][ T9423] total_unevictable 0 [ 134.102974][ T9423] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1687,pid=9423,uid=0 [ 134.117578][ T9423] Memory cgroup out of memory: Killed process 9423 (syz.4.1687) total-vm:93760kB, anon-rss:944kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 134.190366][ T9472] Falling back ldisc for ttyS3. [ 134.251234][ T9467] Falling back ldisc for ttyS3. [ 134.299805][ T29] audit: type=1326 audit(1753431661.394:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9493 comm="syz.6.1703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 134.431012][ T9504] syzkaller1: entered promiscuous mode [ 134.436580][ T9504] syzkaller1: entered allmulticast mode [ 134.700763][ T9523] syzkaller1: entered promiscuous mode [ 134.706276][ T9523] syzkaller1: entered allmulticast mode [ 135.066898][ T9553] syzkaller1: entered promiscuous mode [ 135.072555][ T9553] syzkaller1: entered allmulticast mode [ 135.566321][ T9578] syzkaller1: entered promiscuous mode [ 135.571920][ T9578] syzkaller1: entered allmulticast mode [ 135.840642][ T9593] Falling back ldisc for ttyS3. [ 136.285722][ T9629] syzkaller1: entered promiscuous mode [ 136.291383][ T9629] syzkaller1: entered allmulticast mode [ 136.480772][ T9633] Falling back ldisc for ttyS3. [ 137.180889][ T9686] Falling back ldisc for ttyS3. [ 137.406088][ T9654] syz.0.1757 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 137.420231][ T9654] CPU: 0 UID: 0 PID: 9654 Comm: syz.0.1757 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 137.420261][ T9654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.420275][ T9654] Call Trace: [ 137.420282][ T9654] [ 137.420291][ T9654] __dump_stack+0x1d/0x30 [ 137.420369][ T9654] dump_stack_lvl+0xe8/0x140 [ 137.420390][ T9654] dump_stack+0x15/0x1b [ 137.420408][ T9654] dump_header+0x81/0x220 [ 137.420519][ T9654] oom_kill_process+0x334/0x3f0 [ 137.420543][ T9654] out_of_memory+0x979/0xb80 [ 137.420572][ T9654] try_charge_memcg+0x5e6/0x9e0 [ 137.420608][ T9654] obj_cgroup_charge_pages+0xa6/0x150 [ 137.420692][ T9654] __memcg_kmem_charge_page+0x9f/0x170 [ 137.420719][ T9654] __alloc_frozen_pages_noprof+0x188/0x360 [ 137.420754][ T9654] alloc_pages_mpol+0xb3/0x250 [ 137.420790][ T9654] alloc_pages_noprof+0x90/0x130 [ 137.420815][ T9654] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 137.420886][ T9654] __kvmalloc_node_noprof+0x30f/0x4e0 [ 137.420953][ T9654] ? ip_set_alloc+0x1f/0x30 [ 137.420981][ T9654] ? ip_set_alloc+0x1f/0x30 [ 137.421038][ T9654] ? __kmalloc_cache_noprof+0x189/0x320 [ 137.421066][ T9654] ip_set_alloc+0x1f/0x30 [ 137.421093][ T9654] hash_netiface_create+0x282/0x740 [ 137.421172][ T9654] ? __pfx_hash_netiface_create+0x10/0x10 [ 137.421203][ T9654] ip_set_create+0x3c9/0x960 [ 137.421239][ T9654] ? __nla_parse+0x40/0x60 [ 137.421329][ T9654] nfnetlink_rcv_msg+0x4c6/0x590 [ 137.421417][ T9654] ? selinux_capable+0x1f9/0x270 [ 137.421484][ T9654] netlink_rcv_skb+0x120/0x220 [ 137.421513][ T9654] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 137.421545][ T9654] nfnetlink_rcv+0x16b/0x1690 [ 137.421566][ T9654] ? __kfree_skb+0x109/0x150 [ 137.421656][ T9654] ? nlmon_xmit+0x4f/0x60 [ 137.421679][ T9654] ? consume_skb+0x49/0x150 [ 137.421744][ T9654] ? nlmon_xmit+0x4f/0x60 [ 137.421761][ T9654] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 137.421793][ T9654] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 137.421813][ T9654] ? __dev_queue_xmit+0x182/0x1fb0 [ 137.421876][ T9654] ? ref_tracker_free+0x37d/0x3e0 [ 137.421913][ T9654] ? __netlink_deliver_tap+0x4dc/0x500 [ 137.421932][ T9654] netlink_unicast+0x5a8/0x680 [ 137.421958][ T9654] netlink_sendmsg+0x58b/0x6b0 [ 137.421977][ T9654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.422026][ T9654] __sock_sendmsg+0x145/0x180 [ 137.422053][ T9654] ____sys_sendmsg+0x31e/0x4e0 [ 137.422076][ T9654] ___sys_sendmsg+0x17b/0x1d0 [ 137.422119][ T9654] __x64_sys_sendmsg+0xd4/0x160 [ 137.422139][ T9654] x64_sys_call+0x2999/0x2fb0 [ 137.422157][ T9654] do_syscall_64+0xd2/0x200 [ 137.422176][ T9654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.422197][ T9654] ? clear_bhb_loop+0x40/0x90 [ 137.422221][ T9654] ? clear_bhb_loop+0x40/0x90 [ 137.422244][ T9654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.422341][ T9654] RIP: 0033:0x7f45e6a8e9a9 [ 137.422357][ T9654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.422372][ T9654] RSP: 002b:00007f45e50ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.422389][ T9654] RAX: ffffffffffffffda RBX: 00007f45e6cb5fa0 RCX: 00007f45e6a8e9a9 [ 137.422400][ T9654] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000003 [ 137.422412][ T9654] RBP: 00007f45e6b10d69 R08: 0000000000000000 R09: 0000000000000000 [ 137.422513][ T9654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.422526][ T9654] R13: 0000000000000000 R14: 00007f45e6cb5fa0 R15: 00007ffdac0d8408 [ 137.422546][ T9654] [ 137.422614][ T9654] memory: usage 307200kB, limit 307200kB, failcnt 867 [ 137.774655][ T9654] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 137.782599][ T9654] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 137.789874][ T9654] Memory cgroup stats for /syz0: [ 137.790118][ T9654] cache 0 [ 137.798101][ T9654] rss 0 [ 137.800915][ T9654] shmem 0 [ 137.803841][ T9654] mapped_file 0 [ 137.807331][ T9654] dirty 0 [ 137.810364][ T9654] writeback 0 [ 137.813649][ T9654] workingset_refault_anon 252 [ 137.818301][ T9654] workingset_refault_file 697 [ 137.822988][ T9654] swap 200704 [ 137.826272][ T9654] swapcached 4096 [ 137.829958][ T9654] pgpgin 119522 [ 137.833446][ T9654] pgpgout 119521 [ 137.837070][ T9654] pgfault 146112 [ 137.840638][ T9654] pgmajfault 212 [ 137.844174][ T9654] inactive_anon 4096 [ 137.848044][ T9654] active_anon 0 [ 137.851537][ T9654] inactive_file 0 [ 137.855196][ T9654] active_file 0 [ 137.858637][ T9654] unevictable 0 [ 137.862109][ T9654] hierarchical_memory_limit 314572800 [ 137.867470][ T9654] hierarchical_memsw_limit 9223372036854771712 [ 137.873742][ T9654] total_cache 0 [ 137.877273][ T9654] total_rss 0 [ 137.880592][ T9654] total_shmem 0 [ 137.884035][ T9654] total_mapped_file 0 [ 137.888021][ T9654] total_dirty 0 [ 137.891573][ T9654] total_writeback 0 [ 137.895436][ T9654] total_workingset_refault_anon 252 [ 137.900644][ T9654] total_workingset_refault_file 697 [ 137.905893][ T9654] total_swap 200704 [ 137.909688][ T9654] total_swapcached 4096 [ 137.913877][ T9654] total_pgpgin 119522 [ 137.917849][ T9654] total_pgpgout 119521 [ 137.922009][ T9654] total_pgfault 146112 [ 137.926134][ T9654] total_pgmajfault 212 [ 137.930308][ T9654] total_inactive_anon 4096 [ 137.934805][ T9654] total_active_anon 0 [ 137.938774][ T9654] total_inactive_file 0 [ 137.942937][ T9654] total_active_file 0 [ 137.946960][ T9654] total_unevictable 0 [ 137.950952][ T9654] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1757,pid=9653,uid=0 [ 137.965764][ T9654] Memory cgroup out of memory: Killed process 9653 (syz.0.1757) total-vm:95808kB, anon-rss:944kB, file-rss:22612kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 138.111218][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 138.111233][ T29] audit: type=1326 audit(1753431665.214:6425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 138.141760][ T29] audit: type=1326 audit(1753431665.214:6426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 138.165239][ T29] audit: type=1326 audit(1753431665.214:6427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 138.188747][ T29] audit: type=1326 audit(1753431665.214:6428): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9703 comm="syz.4.1777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 138.252227][ T29] audit: type=1326 audit(1753431665.324:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.275690][ T29] audit: type=1326 audit(1753431665.324:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.299248][ T29] audit: type=1326 audit(1753431665.324:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.322739][ T29] audit: type=1326 audit(1753431665.324:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.346391][ T29] audit: type=1326 audit(1753431665.324:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.369986][ T29] audit: type=1326 audit(1753431665.324:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9707 comm="syz.6.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 138.400671][ T9715] Falling back ldisc for ttyS3. [ 138.402188][ T9727] syzkaller1: entered promiscuous mode [ 138.411038][ T9727] syzkaller1: entered allmulticast mode [ 139.230276][ T9769] Falling back ldisc for ttyS3. [ 140.191846][ T9827] Falling back ldisc for ttyS3. [ 140.550665][ T9862] Falling back ldisc for ttyS3. [ 141.650543][ T9905] Falling back ldisc for ttyS3. [ 141.960432][ T9939] Falling back ldisc for ttyS3. [ 142.294311][ T9950] syzkaller1: entered promiscuous mode [ 142.299822][ T9950] syzkaller1: entered allmulticast mode [ 142.735897][ T9974] syzkaller1: entered promiscuous mode [ 142.741486][ T9974] syzkaller1: entered allmulticast mode [ 142.990381][ T9986] Falling back ldisc for ttyS3. [ 143.126890][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 143.126904][ T29] audit: type=1326 audit(1753431670.224:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 143.179691][ T29] audit: type=1326 audit(1753431670.254:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 143.202841][ T29] audit: type=1326 audit(1753431670.254:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79600fe9e3 code=0x7ffc0000 [ 143.225918][ T29] audit: type=1326 audit(1753431670.254:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79600fd45f code=0x7ffc0000 [ 143.249084][ T29] audit: type=1326 audit(1753431670.254:6933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f79600fea37 code=0x7ffc0000 [ 143.272233][ T29] audit: type=1326 audit(1753431670.254:6934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79600fd310 code=0x7ffc0000 [ 143.295229][ T29] audit: type=1326 audit(1753431670.254:6935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79600fd60a code=0x7ffc0000 [ 143.318059][ T29] audit: type=1326 audit(1753431670.254:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 143.341049][ T29] audit: type=1326 audit(1753431670.264:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 143.364030][ T29] audit: type=1326 audit(1753431670.264:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10000 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 143.497302][T10014] syzkaller1: entered promiscuous mode [ 143.502908][T10014] syzkaller1: entered allmulticast mode [ 143.630439][T10023] Falling back ldisc for ttyS3. [ 144.017509][T10094] syzkaller1: entered promiscuous mode [ 144.023160][T10094] syzkaller1: entered allmulticast mode [ 144.300434][T10102] Falling back ldisc for ttyS3. [ 144.644632][T10133] syzkaller1: entered promiscuous mode [ 144.650255][T10133] syzkaller1: entered allmulticast mode [ 144.797866][T10098] syz.2.1907 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 144.809008][T10098] CPU: 1 UID: 0 PID: 10098 Comm: syz.2.1907 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 144.809081][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.809094][T10098] Call Trace: [ 144.809102][T10098] [ 144.809109][T10098] __dump_stack+0x1d/0x30 [ 144.809190][T10098] dump_stack_lvl+0xe8/0x140 [ 144.809210][T10098] dump_stack+0x15/0x1b [ 144.809227][T10098] dump_header+0x81/0x220 [ 144.809330][T10098] oom_kill_process+0x334/0x3f0 [ 144.809352][T10098] out_of_memory+0x979/0xb80 [ 144.809375][T10098] try_charge_memcg+0x5e6/0x9e0 [ 144.809416][T10098] charge_memcg+0x51/0xc0 [ 144.809512][T10098] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 144.809537][T10098] __read_swap_cache_async+0x1df/0x350 [ 144.809560][T10098] swap_cluster_readahead+0x277/0x3e0 [ 144.809654][T10098] swapin_readahead+0xde/0x6f0 [ 144.809675][T10098] ? __filemap_get_folio+0x4f7/0x6b0 [ 144.809698][T10098] ? swap_cache_get_folio+0x77/0x200 [ 144.809785][T10098] do_swap_page+0x301/0x2430 [ 144.809800][T10098] ? css_rstat_updated+0xcd/0x5b0 [ 144.809869][T10098] ? __pfx_default_wake_function+0x10/0x10 [ 144.809965][T10098] handle_mm_fault+0x9a5/0x2be0 [ 144.810023][T10098] ? mas_walk+0xf2/0x120 [ 144.810080][T10098] do_user_addr_fault+0x636/0x1090 [ 144.810104][T10098] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 144.810152][T10098] exc_page_fault+0x62/0xa0 [ 144.810176][T10098] asm_exc_page_fault+0x26/0x30 [ 144.810259][T10098] RIP: 0033:0x7f4f00451213 [ 144.810275][T10098] Code: e7 08 00 48 8d 3d 76 e7 08 00 e8 e8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 144.810288][T10098] RSP: 002b:00007ffcfb423998 EFLAGS: 00010293 [ 144.810301][T10098] RAX: 00000000fffffffa RBX: 00007f4f00645fa0 RCX: 0000000000000000 [ 144.810311][T10098] RDX: 00007ffcfb4239b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 144.810320][T10098] RBP: 00007f4f00647ba0 R08: 000000002b99542b R09: 7fffffffffffffff [ 144.810394][T10098] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000023624 [ 144.810404][T10098] R13: 00007f4f00646080 R14: ffffffffffffffff R15: 00007ffcfb423af0 [ 144.810418][T10098] [ 145.024818][T10098] memory: usage 307200kB, limit 307200kB, failcnt 468 [ 145.031605][T10098] memory+swap: usage 307512kB, limit 9007199254740988kB, failcnt 0 [ 145.039598][T10098] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 145.046952][T10098] Memory cgroup stats for /syz2: [ 145.047146][T10098] cache 0 [ 145.055022][T10098] rss 0 [ 145.057782][T10098] shmem 0 [ 145.060773][T10098] mapped_file 0 [ 145.064239][T10098] dirty 0 [ 145.067176][T10098] writeback 4096 [ 145.070751][T10098] workingset_refault_anon 116 [ 145.075417][T10098] workingset_refault_file 181 [ 145.080087][T10098] swap 319488 [ 145.083431][T10098] swapcached 8192 [ 145.087099][T10098] pgpgin 132419 [ 145.090645][T10098] pgpgout 132417 [ 145.094221][T10098] pgfault 141653 [ 145.097774][T10098] pgmajfault 87 [ 145.101297][T10098] inactive_anon 8192 [ 145.105230][T10098] active_anon 0 [ 145.108698][T10098] inactive_file 0 [ 145.112344][T10098] active_file 0 [ 145.115893][T10098] unevictable 0 [ 145.119342][T10098] hierarchical_memory_limit 314572800 [ 145.124729][T10098] hierarchical_memsw_limit 9223372036854771712 [ 145.130919][T10098] total_cache 0 [ 145.134420][T10098] total_rss 0 [ 145.137696][T10098] total_shmem 0 [ 145.141177][T10098] total_mapped_file 0 [ 145.145152][T10098] total_dirty 0 [ 145.148601][T10098] total_writeback 4096 [ 145.152881][T10098] total_workingset_refault_anon 116 [ 145.158130][T10098] total_workingset_refault_file 181 [ 145.163356][T10098] total_swap 319488 [ 145.167241][T10098] total_swapcached 8192 [ 145.171406][T10098] total_pgpgin 132419 [ 145.175384][T10098] total_pgpgout 132417 [ 145.179444][T10098] total_pgfault 141653 [ 145.183588][T10098] total_pgmajfault 87 [ 145.187571][T10098] total_inactive_anon 8192 [ 145.192041][T10098] total_active_anon 0 [ 145.196030][T10098] total_inactive_file 0 [ 145.200309][T10098] total_active_file 0 [ 145.204284][T10098] total_unevictable 0 [ 145.208288][T10098] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1907,pid=10098,uid=0 [ 145.223064][T10098] Memory cgroup out of memory: Killed process 10098 (syz.2.1907) total-vm:93760kB, anon-rss:1024kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 146.100322][T10196] Falling back ldisc for ttyS3. [ 146.108748][T10193] syzkaller1: entered promiscuous mode [ 146.114343][T10193] syzkaller1: entered allmulticast mode [ 147.450350][T10292] Falling back ldisc for ttyS3. [ 147.742463][T10319] syzkaller1: entered promiscuous mode [ 147.747962][T10319] syzkaller1: entered allmulticast mode [ 148.492583][T10358] syzkaller1: entered promiscuous mode [ 148.498112][T10358] syzkaller1: entered allmulticast mode [ 148.792315][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 148.792329][ T29] audit: type=1326 audit(1753431675.894:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 148.850462][T10386] Falling back ldisc for ttyS3. [ 148.899483][ T29] audit: type=1326 audit(1753431675.924:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 148.922612][ T29] audit: type=1326 audit(1753431675.924:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 148.945750][ T29] audit: type=1326 audit(1753431675.924:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79600fe9e3 code=0x7ffc0000 [ 148.968595][ T29] audit: type=1326 audit(1753431675.924:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79600fd45f code=0x7ffc0000 [ 148.991484][ T29] audit: type=1326 audit(1753431675.924:7343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f79600fea37 code=0x7ffc0000 [ 149.014635][ T29] audit: type=1326 audit(1753431675.924:7344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79600fd310 code=0x7ffc0000 [ 149.037638][ T29] audit: type=1326 audit(1753431675.924:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79600fd60a code=0x7ffc0000 [ 149.060603][ T29] audit: type=1326 audit(1753431675.924:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 149.083648][ T29] audit: type=1326 audit(1753431675.924:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10379 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 149.191863][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2011'. [ 149.200942][T10425] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2011'. [ 149.360556][T10421] Falling back ldisc for ttyS3. [ 149.383238][T10433] syzkaller1: entered promiscuous mode [ 149.389157][T10433] syzkaller1: entered allmulticast mode [ 150.254448][T10472] FAULT_INJECTION: forcing a failure. [ 150.254448][T10472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.257092][T10474] bridge1: entered promiscuous mode [ 150.267582][T10472] CPU: 0 UID: 0 PID: 10472 Comm: syz.4.2027 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 150.267656][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.267670][T10472] Call Trace: [ 150.267676][T10472] [ 150.267736][T10472] __dump_stack+0x1d/0x30 [ 150.267757][T10472] dump_stack_lvl+0xe8/0x140 [ 150.267776][T10472] dump_stack+0x15/0x1b [ 150.267791][T10472] should_fail_ex+0x265/0x280 [ 150.267819][T10472] should_fail+0xb/0x20 [ 150.267909][T10472] should_fail_usercopy+0x1a/0x20 [ 150.267936][T10472] _copy_from_user+0x1c/0xb0 [ 150.267956][T10472] ___sys_sendmsg+0xc1/0x1d0 [ 150.267984][T10472] __x64_sys_sendmsg+0xd4/0x160 [ 150.268084][T10472] x64_sys_call+0x2999/0x2fb0 [ 150.268104][T10472] do_syscall_64+0xd2/0x200 [ 150.268200][T10472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.268224][T10472] ? clear_bhb_loop+0x40/0x90 [ 150.268320][T10472] ? clear_bhb_loop+0x40/0x90 [ 150.268339][T10472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.268366][T10472] RIP: 0033:0x7f13c38ae9a9 [ 150.268379][T10472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.268468][T10472] RSP: 002b:00007f13c1f17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.268486][T10472] RAX: ffffffffffffffda RBX: 00007f13c3ad5fa0 RCX: 00007f13c38ae9a9 [ 150.268498][T10472] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 150.268510][T10472] RBP: 00007f13c1f17090 R08: 0000000000000000 R09: 0000000000000000 [ 150.268522][T10472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.268534][T10472] R13: 0000000000000000 R14: 00007f13c3ad5fa0 R15: 00007fff478d9228 [ 150.268550][T10472] [ 150.525163][T10480] IPVS: stopping master sync thread 10482 ... [ 150.625375][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 150.651683][T10487] FAULT_INJECTION: forcing a failure. [ 150.651683][T10487] name failslab, interval 1, probability 0, space 0, times 0 [ 150.663809][T10451] syz.5.2019 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 150.664458][T10487] CPU: 1 UID: 0 PID: 10487 Comm: syz.0.2033 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 150.664486][T10487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.664498][T10487] Call Trace: [ 150.664505][T10487] [ 150.664513][T10487] __dump_stack+0x1d/0x30 [ 150.664572][T10487] dump_stack_lvl+0xe8/0x140 [ 150.664643][T10487] dump_stack+0x15/0x1b [ 150.664659][T10487] should_fail_ex+0x265/0x280 [ 150.664686][T10487] should_failslab+0x8c/0xb0 [ 150.664789][T10487] kmem_cache_alloc_noprof+0x50/0x310 [ 150.664813][T10487] ? skb_clone+0x151/0x1f0 [ 150.664832][T10487] skb_clone+0x151/0x1f0 [ 150.664849][T10487] __netlink_deliver_tap+0x2c9/0x500 [ 150.664870][T10487] ? netlink_attachskb+0x2d1/0x610 [ 150.664959][T10487] netlink_sendskb+0x126/0x150 [ 150.664985][T10487] netlink_unicast+0x28a/0x680 [ 150.665026][T10487] netlink_ack+0x4c8/0x500 [ 150.665113][T10487] netlink_rcv_skb+0x192/0x220 [ 150.665140][T10487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 150.665240][T10487] genl_rcv+0x28/0x40 [ 150.665260][T10487] netlink_unicast+0x5a8/0x680 [ 150.665288][T10487] netlink_sendmsg+0x58b/0x6b0 [ 150.665346][T10487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.665436][T10487] __sock_sendmsg+0x145/0x180 [ 150.665459][T10487] ____sys_sendmsg+0x31e/0x4e0 [ 150.665478][T10487] ___sys_sendmsg+0x17b/0x1d0 [ 150.665506][T10487] __x64_sys_sendmsg+0xd4/0x160 [ 150.665528][T10487] x64_sys_call+0x2999/0x2fb0 [ 150.665580][T10487] do_syscall_64+0xd2/0x200 [ 150.665604][T10487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.665674][T10487] ? clear_bhb_loop+0x40/0x90 [ 150.665693][T10487] ? clear_bhb_loop+0x40/0x90 [ 150.665725][T10487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.665746][T10487] RIP: 0033:0x7f45e6a8e9a9 [ 150.665761][T10487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.665819][T10487] RSP: 002b:00007f45e50ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.665837][T10487] RAX: ffffffffffffffda RBX: 00007f45e6cb5fa0 RCX: 00007f45e6a8e9a9 [ 150.665850][T10487] RDX: 0000000000008808 RSI: 0000200000000100 RDI: 0000000000000003 [ 150.665862][T10487] RBP: 00007f45e50ef090 R08: 0000000000000000 R09: 0000000000000000 [ 150.665874][T10487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.665887][T10487] R13: 0000000000000000 R14: 00007f45e6cb5fa0 R15: 00007ffdac0d8408 [ 150.665961][T10487] [ 150.918590][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.5.2019 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 150.918620][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.918626][T10451] Call Trace: [ 150.918634][T10451] [ 150.918639][T10451] __dump_stack+0x1d/0x30 [ 150.918652][T10451] dump_stack_lvl+0xe8/0x140 [ 150.918662][T10451] dump_stack+0x15/0x1b [ 150.918731][T10451] dump_header+0x81/0x220 [ 150.918756][T10451] oom_kill_process+0x334/0x3f0 [ 150.918783][T10451] out_of_memory+0x979/0xb80 [ 150.918802][T10451] try_charge_memcg+0x5e6/0x9e0 [ 150.918870][T10451] charge_memcg+0x51/0xc0 [ 150.918885][T10451] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 150.918924][T10451] __read_swap_cache_async+0x1df/0x350 [ 150.918984][T10451] swap_cluster_readahead+0x277/0x3e0 [ 150.919035][T10451] swapin_readahead+0xde/0x6f0 [ 150.919050][T10451] ? __filemap_get_folio+0x4f7/0x6b0 [ 150.919104][T10451] ? __rcu_read_unlock+0x34/0x70 [ 150.919116][T10451] ? swap_cache_get_folio+0x77/0x200 [ 150.919131][T10451] do_swap_page+0x301/0x2430 [ 150.919142][T10451] ? css_rstat_updated+0xcd/0x5b0 [ 150.919235][T10451] ? __pfx_default_wake_function+0x10/0x10 [ 150.919249][T10451] handle_mm_fault+0x9a5/0x2be0 [ 150.919288][T10451] ? mas_walk+0xf2/0x120 [ 150.919424][T10451] do_user_addr_fault+0x636/0x1090 [ 150.919443][T10451] exc_page_fault+0x62/0xa0 [ 150.919518][T10451] asm_exc_page_fault+0x26/0x30 [ 150.919530][T10451] RIP: 0033:0x7f7960131234 [ 150.919540][T10451] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 63 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff [ 150.919550][T10451] RSP: 002b:00007fff24b7e2c0 EFLAGS: 00010206 [ 150.919559][T10451] RAX: 00000000fffffffa RBX: 00007f7960325fa0 RCX: 0000000000000000 [ 150.919600][T10451] RDX: 00007fff24b7e300 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.919606][T10451] RBP: 00007f7960327ba0 R08: 0000000022c84c4d R09: 7fffffffffffffff [ 150.919613][T10451] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000024c5f [ 150.919620][T10451] R13: 00007f7960326080 R14: ffffffffffffffff R15: 00007fff24b7e440 [ 150.919630][T10451] [ 150.919634][T10451] memory: usage 307200kB, limit 307200kB, failcnt 432 [ 151.140401][T10451] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0 [ 151.148276][T10451] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 151.155583][T10451] Memory cgroup stats for /syz5: [ 151.156581][T10451] cache 0 [ 151.164467][T10451] rss 0 [ 151.167262][T10451] shmem 0 [ 151.170282][T10451] mapped_file 0 [ 151.173795][T10451] dirty 0 [ 151.176710][T10451] writeback 0 [ 151.179972][T10451] workingset_refault_anon 170 [ 151.184650][T10451] workingset_refault_file 0 [ 151.189212][T10451] swap 200704 [ 151.192503][T10451] swapcached 4096 [ 151.196123][T10451] pgpgin 102144 [ 151.199617][T10451] pgpgout 102143 [ 151.203218][T10451] pgfault 118730 [ 151.206793][T10451] pgmajfault 69 [ 151.210316][T10451] inactive_anon 0 [ 151.213944][T10451] active_anon 4096 [ 151.217681][T10451] inactive_file 0 [ 151.221416][T10451] active_file 0 [ 151.224872][T10451] unevictable 0 [ 151.228390][T10451] hierarchical_memory_limit 314572800 [ 151.233779][T10451] hierarchical_memsw_limit 9223372036854771712 [ 151.240046][T10451] total_cache 0 [ 151.243511][T10451] total_rss 0 [ 151.246791][T10451] total_shmem 0 [ 151.250315][T10451] total_mapped_file 0 [ 151.254294][T10451] total_dirty 0 [ 151.257803][T10451] total_writeback 0 [ 151.261620][T10451] total_workingset_refault_anon 170 [ 151.266828][T10451] total_workingset_refault_file 0 [ 151.271852][T10451] total_swap 200704 [ 151.275649][T10451] total_swapcached 4096 [ 151.279782][T10451] total_pgpgin 102144 [ 151.283771][T10451] total_pgpgout 102143 [ 151.287906][T10451] total_pgfault 118730 [ 151.292041][T10451] total_pgmajfault 69 [ 151.296017][T10451] total_inactive_anon 0 [ 151.300209][T10451] total_active_anon 4096 [ 151.304485][T10451] total_inactive_file 0 [ 151.308619][T10451] total_active_file 0 [ 151.312675][T10451] total_unevictable 0 [ 151.316714][T10451] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2019,pid=10451,uid=0 [ 151.331459][T10451] Memory cgroup out of memory: Killed process 10451 (syz.5.2019) total-vm:95808kB, anon-rss:1052kB, file-rss:22084kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 152.111424][T10551] bridge0: port 3(gretap0) entered blocking state [ 152.117953][T10551] bridge0: port 3(gretap0) entered disabled state [ 152.137243][T10551] gretap0: entered allmulticast mode [ 152.143322][T10551] gretap0: entered promiscuous mode [ 152.148851][T10551] bridge0: port 3(gretap0) entered blocking state [ 152.155418][T10551] bridge0: port 3(gretap0) entered forwarding state [ 152.170891][T10551] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 152.300396][T10573] Falling back ldisc for ttyS3. [ 152.416304][T10587] ucma_write: process 740 (syz.6.2065) changed security contexts after opening file descriptor, this is not allowed. [ 152.418744][T10583] syzkaller1: entered promiscuous mode [ 152.434245][T10583] syzkaller1: entered allmulticast mode [ 152.637569][T10621] FAULT_INJECTION: forcing a failure. [ 152.637569][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.650821][T10621] CPU: 1 UID: 0 PID: 10621 Comm: syz.6.2079 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 152.650850][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.650862][T10621] Call Trace: [ 152.650869][T10621] [ 152.650877][T10621] __dump_stack+0x1d/0x30 [ 152.650898][T10621] dump_stack_lvl+0xe8/0x140 [ 152.650955][T10621] dump_stack+0x15/0x1b [ 152.650971][T10621] should_fail_ex+0x265/0x280 [ 152.651000][T10621] should_fail+0xb/0x20 [ 152.651058][T10621] should_fail_usercopy+0x1a/0x20 [ 152.651102][T10621] _copy_from_user+0x1c/0xb0 [ 152.651154][T10621] ___sys_sendmsg+0xc1/0x1d0 [ 152.651182][T10621] __x64_sys_sendmsg+0xd4/0x160 [ 152.651205][T10621] x64_sys_call+0x2999/0x2fb0 [ 152.651257][T10621] do_syscall_64+0xd2/0x200 [ 152.651276][T10621] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 152.651299][T10621] ? clear_bhb_loop+0x40/0x90 [ 152.651316][T10621] ? clear_bhb_loop+0x40/0x90 [ 152.651453][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.651498][T10621] RIP: 0033:0x7f2a4966e9a9 [ 152.651513][T10621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.651536][T10621] RSP: 002b:00007f2a47cd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.651552][T10621] RAX: ffffffffffffffda RBX: 00007f2a49895fa0 RCX: 00007f2a4966e9a9 [ 152.651600][T10621] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000007 [ 152.651613][T10621] RBP: 00007f2a47cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 152.651626][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.651636][T10621] R13: 0000000000000000 R14: 00007f2a49895fa0 R15: 00007ffc37dfc2d8 [ 152.651651][T10621] [ 153.084879][T10645] syzkaller1: entered promiscuous mode [ 153.090414][T10645] syzkaller1: entered allmulticast mode [ 153.191556][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2084'. [ 153.244573][T10647] netlink: 'syz.6.2084': attribute type 5 has an invalid length. [ 153.287350][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2088'. [ 153.357369][T10665] syzkaller1: entered promiscuous mode [ 153.363004][T10665] syzkaller1: entered allmulticast mode [ 153.814330][T10714] syzkaller1: entered promiscuous mode [ 153.819915][T10714] syzkaller1: entered allmulticast mode [ 154.289814][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 154.289870][ T29] audit: type=1326 audit(1753431681.384:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10681 comm="syz.6.2096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 154.490374][T10741] Falling back ldisc for ttyS3. [ 154.542090][T10751] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.615592][T10751] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.631695][ T29] audit: type=1400 audit(1753431681.724:7659): avc: denied { mounton } for pid=10752 comm="syz.5.2115" path="/263/bus" dev="tmpfs" ino=1372 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 154.669658][T10760] FAULT_INJECTION: forcing a failure. [ 154.669658][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.682977][T10760] CPU: 1 UID: 0 PID: 10760 Comm: syz.5.2116 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 154.683083][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.683095][T10760] Call Trace: [ 154.683101][T10760] [ 154.683108][T10760] __dump_stack+0x1d/0x30 [ 154.683130][T10760] dump_stack_lvl+0xe8/0x140 [ 154.683147][T10760] dump_stack+0x15/0x1b [ 154.683162][T10760] should_fail_ex+0x265/0x280 [ 154.683218][T10760] should_fail+0xb/0x20 [ 154.683241][T10760] should_fail_usercopy+0x1a/0x20 [ 154.683270][T10760] _copy_from_user+0x1c/0xb0 [ 154.683363][T10760] ___sys_sendmsg+0xc1/0x1d0 [ 154.683389][T10760] __x64_sys_sendmsg+0xd4/0x160 [ 154.683409][T10760] x64_sys_call+0x2999/0x2fb0 [ 154.683428][T10760] do_syscall_64+0xd2/0x200 [ 154.683447][T10760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 154.683548][T10760] ? clear_bhb_loop+0x40/0x90 [ 154.683568][T10760] ? clear_bhb_loop+0x40/0x90 [ 154.683654][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.683709][T10760] RIP: 0033:0x7f79600fe9a9 [ 154.683724][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.683742][T10760] RSP: 002b:00007f795e767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.683766][T10760] RAX: ffffffffffffffda RBX: 00007f7960325fa0 RCX: 00007f79600fe9a9 [ 154.683779][T10760] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 154.683791][T10760] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000000 [ 154.683820][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.683895][T10760] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 154.683919][T10760] [ 154.885443][T10751] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.941208][ T29] audit: type=1326 audit(1753431682.044:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 154.964326][ T29] audit: type=1326 audit(1753431682.044:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 155.002966][T10751] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.027740][ T29] audit: type=1326 audit(1753431682.094:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 155.050903][ T29] audit: type=1326 audit(1753431682.094:7663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f79600fe9e3 code=0x7ffc0000 [ 155.073712][ T29] audit: type=1326 audit(1753431682.094:7664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f79600fd45f code=0x7ffc0000 [ 155.096541][ T29] audit: type=1326 audit(1753431682.094:7665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f79600fea37 code=0x7ffc0000 [ 155.119432][ T29] audit: type=1326 audit(1753431682.094:7666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f79600fd310 code=0x7ffc0000 [ 155.142414][ T29] audit: type=1326 audit(1753431682.094:7667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10766 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f79600fd60a code=0x7ffc0000 [ 155.226721][T10751] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.250599][T10776] Falling back ldisc for ttyS3. [ 155.270767][T10751] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.309782][T10751] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.348228][T10751] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.381939][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'. [ 155.557231][T10814] syzkaller1: entered promiscuous mode [ 155.562818][T10814] syzkaller1: entered allmulticast mode [ 155.767534][T10852] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 155.774232][T10852] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 155.781906][T10852] vhci_hcd vhci_hcd.0: Device attached [ 155.898204][T10853] vhci_hcd: connection closed [ 155.898421][ T3481] vhci_hcd: stop threads [ 155.907634][ T3481] vhci_hcd: release socket [ 155.912159][ T3481] vhci_hcd: disconnect device [ 155.916042][T10863] block device autoloading is deprecated and will be removed. [ 155.960232][ T3380] vhci_hcd: vhci_device speed not set [ 156.119358][T10871] syzkaller1: entered promiscuous mode [ 156.124921][T10871] syzkaller1: entered allmulticast mode [ 156.252614][T10881] loop0: detected capacity change from 0 to 2048 [ 156.300735][T10881] loop0: p1 < > p4 [ 156.305508][T10881] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.329568][ T2995] loop0: p1 < > p4 [ 156.334277][ T2995] loop0: p4 size 8388608 extends beyond EOD, truncated [ 156.363617][ T3814] udevd[3814]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.374482][ T4574] udevd[4574]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 157.380464][T10924] Falling back ldisc for ttyS3. [ 157.468297][T10941] syzkaller1: entered promiscuous mode [ 157.473848][T10941] syzkaller1: entered allmulticast mode [ 157.491011][T10950] loop0: detected capacity change from 0 to 128 [ 157.910236][T10989] Falling back ldisc for ttyS3. [ 158.053647][T11003] loop0: detected capacity change from 0 to 128 [ 158.537431][T11015] FAULT_INJECTION: forcing a failure. [ 158.537431][T11015] name failslab, interval 1, probability 0, space 0, times 0 [ 158.550173][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.5.2190 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 158.550202][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.550215][T11015] Call Trace: [ 158.550222][T11015] [ 158.550231][T11015] __dump_stack+0x1d/0x30 [ 158.550252][T11015] dump_stack_lvl+0xe8/0x140 [ 158.550268][T11015] dump_stack+0x15/0x1b [ 158.550349][T11015] should_fail_ex+0x265/0x280 [ 158.550376][T11015] should_failslab+0x8c/0xb0 [ 158.550396][T11015] kmem_cache_alloc_noprof+0x50/0x310 [ 158.550428][T11015] ? copy_fs_struct+0x31/0x110 [ 158.550451][T11015] copy_fs_struct+0x31/0x110 [ 158.550490][T11015] copy_fs+0x58/0xf0 [ 158.550513][T11015] copy_process+0xc6e/0x1f90 [ 158.550554][T11015] kernel_clone+0x16c/0x5b0 [ 158.550597][T11015] __se_sys_clone3+0x1c2/0x200 [ 158.550723][T11015] __x64_sys_clone3+0x31/0x40 [ 158.550748][T11015] x64_sys_call+0x10c9/0x2fb0 [ 158.550769][T11015] do_syscall_64+0xd2/0x200 [ 158.550836][T11015] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.550861][T11015] ? clear_bhb_loop+0x40/0x90 [ 158.550952][T11015] ? clear_bhb_loop+0x40/0x90 [ 158.550974][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.550994][T11015] RIP: 0033:0x7f79600fe9a9 [ 158.551010][T11015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.551055][T11015] RSP: 002b:00007f795e766f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 158.551074][T11015] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f79600fe9a9 [ 158.551086][T11015] RDX: 00007f795e766f20 RSI: 0000000000000058 RDI: 00007f795e766f20 [ 158.551132][T11015] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000058 [ 158.551145][T11015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.551157][T11015] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 158.551231][T11015] [ 158.793288][T11025] syzkaller1: entered promiscuous mode [ 158.798833][T11025] syzkaller1: entered allmulticast mode [ 158.851382][T11027] loop0: detected capacity change from 0 to 512 [ 158.896936][T11027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.909981][T11027] ext4 filesystem being mounted at /472/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.946404][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.982757][T11044] FAULT_INJECTION: forcing a failure. [ 158.982757][T11044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.995990][T11044] CPU: 1 UID: 0 PID: 11044 Comm: syz.5.2204 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 158.996043][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.996055][T11044] Call Trace: [ 158.996062][T11044] [ 158.996069][T11044] __dump_stack+0x1d/0x30 [ 158.996127][T11044] dump_stack_lvl+0xe8/0x140 [ 158.996143][T11044] dump_stack+0x15/0x1b [ 158.996156][T11044] should_fail_ex+0x265/0x280 [ 158.996185][T11044] should_fail+0xb/0x20 [ 158.996245][T11044] should_fail_usercopy+0x1a/0x20 [ 158.996275][T11044] _copy_from_user+0x1c/0xb0 [ 158.996296][T11044] ___sys_sendmsg+0xc1/0x1d0 [ 158.996341][T11044] __x64_sys_sendmsg+0xd4/0x160 [ 158.996360][T11044] x64_sys_call+0x2999/0x2fb0 [ 158.996381][T11044] do_syscall_64+0xd2/0x200 [ 158.996400][T11044] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.996504][T11044] ? clear_bhb_loop+0x40/0x90 [ 158.996521][T11044] ? clear_bhb_loop+0x40/0x90 [ 158.996604][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.996625][T11044] RIP: 0033:0x7f79600fe9a9 [ 158.996640][T11044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.996655][T11044] RSP: 002b:00007f795e767038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.996683][T11044] RAX: ffffffffffffffda RBX: 00007f7960325fa0 RCX: 00007f79600fe9a9 [ 158.996694][T11044] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 158.996705][T11044] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000000 [ 158.996715][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.996800][T11044] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 158.996815][T11044] [ 159.279872][T11048] Falling back ldisc for ttyS3. [ 159.390123][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 159.396418][ T29] audit: type=1326 audit(1753431686.484:8237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11055 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f79600fe9a9 code=0x7ffc0000 [ 159.469650][T11069] syzkaller1: entered promiscuous mode [ 159.475919][T11069] syzkaller1: entered allmulticast mode [ 159.846168][ T29] audit: type=1326 audit(1753431686.944:8238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 159.870373][ T29] audit: type=1326 audit(1753431686.944:8239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 159.870421][T11076] loop0: detected capacity change from 0 to 1024 [ 159.893896][ T29] audit: type=1326 audit(1753431686.944:8240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f45e6a8e9a9 code=0x7ffc0000 [ 159.924537][ T29] audit: type=1326 audit(1753431686.944:8241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f45e6a8e9e3 code=0x7ffc0000 [ 159.938701][T11082] IPv6: Can't replace route, no match found [ 159.953956][ T29] audit: type=1326 audit(1753431686.944:8242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f45e6a8d45f code=0x7ffc0000 [ 159.978025][ T29] audit: type=1326 audit(1753431686.974:8243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f45e6a8ea37 code=0x7ffc0000 [ 159.985161][T11076] ext4: Unknown parameter 'uid<00000000000000000000' [ 160.002037][ T29] audit: type=1326 audit(1753431686.974:8244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45e6a8d310 code=0x7ffc0000 [ 160.032385][ T29] audit: type=1326 audit(1753431686.974:8245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f45e6a8e5ab code=0x7ffc0000 [ 160.072819][ T29] audit: type=1326 audit(1753431687.084:8246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.0.2216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f45e6a8d60a code=0x7ffc0000 [ 160.219215][T11105] FAULT_INJECTION: forcing a failure. [ 160.219215][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 160.232031][T11105] CPU: 0 UID: 0 PID: 11105 Comm: syz.4.2225 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 160.232055][T11105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.232067][T11105] Call Trace: [ 160.232072][T11105] [ 160.232078][T11105] __dump_stack+0x1d/0x30 [ 160.232098][T11105] dump_stack_lvl+0xe8/0x140 [ 160.232172][T11105] dump_stack+0x15/0x1b [ 160.232188][T11105] should_fail_ex+0x265/0x280 [ 160.232213][T11105] ? __se_sys_mount+0xef/0x2e0 [ 160.232320][T11105] should_failslab+0x8c/0xb0 [ 160.232349][T11105] __kmalloc_cache_noprof+0x4c/0x320 [ 160.232375][T11105] ? memdup_user+0x99/0xd0 [ 160.232397][T11105] __se_sys_mount+0xef/0x2e0 [ 160.232493][T11105] ? fput+0x8f/0xc0 [ 160.232513][T11105] ? ksys_write+0x192/0x1a0 [ 160.232537][T11105] __x64_sys_mount+0x67/0x80 [ 160.232671][T11105] x64_sys_call+0xd36/0x2fb0 [ 160.232690][T11105] do_syscall_64+0xd2/0x200 [ 160.232706][T11105] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.232726][T11105] ? clear_bhb_loop+0x40/0x90 [ 160.232766][T11105] ? clear_bhb_loop+0x40/0x90 [ 160.232786][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.232805][T11105] RIP: 0033:0x7f13c38ae9a9 [ 160.232821][T11105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.232853][T11105] RSP: 002b:00007f13c1f17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 160.232932][T11105] RAX: ffffffffffffffda RBX: 00007f13c3ad5fa0 RCX: 00007f13c38ae9a9 [ 160.232943][T11105] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 160.232952][T11105] RBP: 00007f13c1f17090 R08: 0000200000000300 R09: 0000000000000000 [ 160.232977][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.232986][T11105] R13: 0000000000000000 R14: 00007f13c3ad5fa0 R15: 00007fff478d9228 [ 160.233001][T11105] [ 160.239142][T11095] syzkaller1: entered promiscuous mode [ 160.257569][T11108] block device autoloading is deprecated and will be removed. [ 160.262020][T11095] syzkaller1: entered allmulticast mode [ 160.398173][T11114] loop4: detected capacity change from 0 to 512 [ 160.464126][T11114] /dev/loop4: Can't open blockdev [ 160.617782][T11135] loop4: detected capacity change from 0 to 512 [ 160.646479][T11135] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.663529][T11135] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.689526][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.756395][T11141] syzkaller1: entered promiscuous mode [ 160.761958][T11141] syzkaller1: entered allmulticast mode [ 160.868596][T11151] bio_check_eod: 21 callbacks suppressed [ 160.868629][T11151] syz.4.2243: attempt to access beyond end of device [ 160.868629][T11151] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 160.889505][T11151] FAT-fs (loop9): unable to read boot sector [ 160.916121][T11151] loop4: detected capacity change from 0 to 128 [ 160.926328][T11151] EXT4-fs: Ignoring removed mblk_io_submit option [ 160.939391][T11151] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 160.962735][T11151] FAULT_INJECTION: forcing a failure. [ 160.962735][T11151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.975963][T11151] CPU: 1 UID: 0 PID: 11151 Comm: syz.4.2243 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 160.975991][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.976009][T11151] Call Trace: [ 160.976016][T11151] [ 160.976023][T11151] __dump_stack+0x1d/0x30 [ 160.976043][T11151] dump_stack_lvl+0xe8/0x140 [ 160.976061][T11151] dump_stack+0x15/0x1b [ 160.976077][T11151] should_fail_ex+0x265/0x280 [ 160.976148][T11151] should_fail+0xb/0x20 [ 160.976173][T11151] should_fail_usercopy+0x1a/0x20 [ 160.976217][T11151] _copy_to_user+0x20/0xa0 [ 160.976234][T11151] simple_read_from_buffer+0xb5/0x130 [ 160.976275][T11151] proc_fail_nth_read+0x100/0x140 [ 160.976304][T11151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.976406][T11151] vfs_read+0x19d/0x6f0 [ 160.976431][T11151] ? __rcu_read_unlock+0x4f/0x70 [ 160.976527][T11151] ? __fget_files+0x184/0x1c0 [ 160.976543][T11151] ? __sys_bind+0x223/0x2a0 [ 160.976574][T11151] ksys_read+0xda/0x1a0 [ 160.976645][T11151] __x64_sys_read+0x40/0x50 [ 160.976667][T11151] x64_sys_call+0x2d77/0x2fb0 [ 160.976686][T11151] do_syscall_64+0xd2/0x200 [ 160.976757][T11151] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.976782][T11151] ? clear_bhb_loop+0x40/0x90 [ 160.976801][T11151] ? clear_bhb_loop+0x40/0x90 [ 160.976855][T11151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.976872][T11151] RIP: 0033:0x7f13c38ad3bc [ 160.976901][T11151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 160.976918][T11151] RSP: 002b:00007f13c1f17030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.976936][T11151] RAX: ffffffffffffffda RBX: 00007f13c3ad5fa0 RCX: 00007f13c38ad3bc [ 160.976994][T11151] RDX: 000000000000000f RSI: 00007f13c1f170a0 RDI: 0000000000000009 [ 160.977007][T11151] RBP: 00007f13c1f17090 R08: 0000000000000000 R09: 0000000000000000 [ 160.977017][T11151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.977028][T11151] R13: 0000000000000000 R14: 00007f13c3ad5fa0 R15: 00007fff478d9228 [ 160.977046][T11151] [ 161.321109][T11156] FAULT_INJECTION: forcing a failure. [ 161.321109][T11156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.334357][T11156] CPU: 0 UID: 0 PID: 11156 Comm: syz.2.2254 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 161.334381][T11156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.334390][T11156] Call Trace: [ 161.334397][T11156] [ 161.334404][T11156] __dump_stack+0x1d/0x30 [ 161.334425][T11156] dump_stack_lvl+0xe8/0x140 [ 161.334446][T11156] dump_stack+0x15/0x1b [ 161.334510][T11156] should_fail_ex+0x265/0x280 [ 161.334611][T11156] should_fail+0xb/0x20 [ 161.334635][T11156] should_fail_usercopy+0x1a/0x20 [ 161.334721][T11156] _copy_to_user+0x20/0xa0 [ 161.334740][T11156] simple_read_from_buffer+0xb5/0x130 [ 161.334767][T11156] proc_fail_nth_read+0x100/0x140 [ 161.334797][T11156] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 161.334865][T11156] vfs_read+0x19d/0x6f0 [ 161.334890][T11156] ? __rcu_read_unlock+0x4f/0x70 [ 161.334910][T11156] ? __fget_files+0x184/0x1c0 [ 161.334957][T11156] ksys_read+0xda/0x1a0 [ 161.335019][T11156] __x64_sys_read+0x40/0x50 [ 161.335045][T11156] x64_sys_call+0x2d77/0x2fb0 [ 161.335096][T11156] do_syscall_64+0xd2/0x200 [ 161.335113][T11156] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.335137][T11156] ? clear_bhb_loop+0x40/0x90 [ 161.335235][T11156] ? clear_bhb_loop+0x40/0x90 [ 161.335255][T11156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.335285][T11156] RIP: 0033:0x7f4f0041d3bc [ 161.335300][T11156] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 161.335316][T11156] RSP: 002b:00007f4efea66030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 161.335395][T11156] RAX: ffffffffffffffda RBX: 00007f4f00646080 RCX: 00007f4f0041d3bc [ 161.335408][T11156] RDX: 000000000000000f RSI: 00007f4efea660a0 RDI: 0000000000000007 [ 161.335420][T11156] RBP: 00007f4efea66090 R08: 0000000000000000 R09: 0000000000000000 [ 161.335432][T11156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.335444][T11156] R13: 0000000000000001 R14: 00007f4f00646080 R15: 00007ffcfb423878 [ 161.335463][T11156] [ 161.622328][T11162] block device autoloading is deprecated and will be removed. [ 161.639281][T11162] syz.2.2246: attempt to access beyond end of device [ 161.639281][T11162] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 161.640531][T11167] loop4: detected capacity change from 0 to 512 [ 161.652251][T11162] FAT-fs (loop5): unable to read boot sector [ 161.668667][T11167] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.685275][T11167] EXT4-fs (loop4): 1 truncate cleaned up [ 161.685348][T11169] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(15) [ 161.691427][T11167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.697522][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.698319][T11169] vhci_hcd vhci_hcd.0: Device attached [ 161.794904][T11169] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(17) [ 161.801540][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.809163][T11169] vhci_hcd vhci_hcd.0: Device attached [ 161.880166][T11164] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(19) [ 161.886848][T11164] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.894449][T11164] vhci_hcd vhci_hcd.0: Device attached [ 161.908748][T11169] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.920718][T11169] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(24) [ 161.927502][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.935848][T11169] vhci_hcd vhci_hcd.0: Device attached [ 161.960758][ T3371] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 161.975208][T11164] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 161.985692][T11164] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(27) [ 161.992308][T11164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.000542][T11164] vhci_hcd vhci_hcd.0: Device attached [ 162.015537][T11164] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(29) [ 162.022169][T11164] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.029852][T11164] vhci_hcd vhci_hcd.0: Device attached [ 162.033342][T11195] ip6t_srh: unknown srh match flags 4000 [ 162.129551][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2257'. [ 162.150802][T11199] Falling back ldisc for ttyS3. [ 162.161344][T11190] vhci_hcd: connection closed [ 162.161446][T11171] vhci_hcd: connection reset by peer [ 162.170312][T11177] vhci_hcd: connection closed [ 162.171643][T11192] vhci_hcd: connection closed [ 162.171733][ T1005] vhci_hcd: stop threads [ 162.185929][ T1005] vhci_hcd: release socket [ 162.190504][ T1005] vhci_hcd: disconnect device [ 162.196812][T11186] vhci_hcd: connection closed [ 162.199929][T11183] vhci_hcd: connection closed [ 162.237793][ T1005] vhci_hcd: stop threads [ 162.247841][ T1005] vhci_hcd: release socket [ 162.252747][ T1005] vhci_hcd: disconnect device [ 162.280451][ T1005] vhci_hcd: stop threads [ 162.284753][ T1005] vhci_hcd: release socket [ 162.289334][ T1005] vhci_hcd: disconnect device [ 162.314008][T11205] pim6reg1: entered promiscuous mode [ 162.343025][ T1005] vhci_hcd: stop threads [ 162.347334][ T1005] vhci_hcd: release socket [ 162.351836][ T1005] vhci_hcd: disconnect device [ 162.366856][ T1005] vhci_hcd: stop threads [ 162.371311][ T1005] vhci_hcd: release socket [ 162.375737][ T1005] vhci_hcd: disconnect device [ 162.401296][T11212] 9pnet_virtio: no channels available for device 127.0.0.1 [ 162.403385][ T1005] vhci_hcd: stop threads [ 162.412809][ T1005] vhci_hcd: release socket [ 162.417234][ T1005] vhci_hcd: disconnect device [ 162.571650][T11219] FAULT_INJECTION: forcing a failure. [ 162.571650][T11219] name failslab, interval 1, probability 0, space 0, times 0 [ 162.584334][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.5.2263 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 162.584393][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.584404][T11219] Call Trace: [ 162.584411][T11219] [ 162.584418][T11219] __dump_stack+0x1d/0x30 [ 162.584438][T11219] dump_stack_lvl+0xe8/0x140 [ 162.584457][T11219] dump_stack+0x15/0x1b [ 162.584529][T11219] should_fail_ex+0x265/0x280 [ 162.584556][T11219] should_failslab+0x8c/0xb0 [ 162.584578][T11219] kmem_cache_alloc_noprof+0x50/0x310 [ 162.584663][T11219] ? getname_flags+0x80/0x3b0 [ 162.584682][T11219] getname_flags+0x80/0x3b0 [ 162.584700][T11219] do_sys_openat2+0x60/0x110 [ 162.584726][T11219] __x64_sys_creat+0x65/0x90 [ 162.584749][T11219] x64_sys_call+0x114d/0x2fb0 [ 162.584774][T11219] do_syscall_64+0xd2/0x200 [ 162.584848][T11219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.584949][T11219] ? clear_bhb_loop+0x40/0x90 [ 162.584990][T11219] ? clear_bhb_loop+0x40/0x90 [ 162.585012][T11219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.585030][T11219] RIP: 0033:0x7f79600fe9a9 [ 162.585043][T11219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.585134][T11219] RSP: 002b:00007f795e767038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 162.585149][T11219] RAX: ffffffffffffffda RBX: 00007f7960325fa0 RCX: 00007f79600fe9a9 [ 162.585160][T11219] RDX: 0000000000000000 RSI: 00000000000000a1 RDI: 00002000000000c0 [ 162.585170][T11219] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000000 [ 162.585180][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.585190][T11219] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 162.585206][T11219] [ 163.069163][T11232] syzkaller1: entered promiscuous mode [ 163.075497][T11232] syzkaller1: entered allmulticast mode [ 163.194020][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.281525][T11244] Falling back ldisc for ttyS3. [ 163.335705][T11255] loop4: detected capacity change from 0 to 512 [ 163.357835][T11257] loop5: detected capacity change from 0 to 512 [ 163.367204][T11257] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.383081][T11257] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 163.384165][T11255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.452944][T11257] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2276: invalid indirect mapped block 4294967295 (level 1) [ 163.493250][T11255] ext4 filesystem being mounted at /487/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.522249][T11257] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2276: invalid indirect mapped block 4294967295 (level 1) [ 163.573155][T11257] EXT4-fs (loop5): 2 truncates cleaned up [ 163.585488][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.600789][T11257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.695898][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.894793][T11284] syzkaller1: entered promiscuous mode [ 163.900400][T11284] syzkaller1: entered allmulticast mode [ 164.030376][T11288] Falling back ldisc for ttyS3. [ 164.237755][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2290'. [ 164.274526][T11307] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2290'. [ 164.324078][T11307] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2290'. [ 164.361086][T11312] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 164.440618][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 164.440708][ T29] audit: type=1400 audit(1753431691.544:8472): avc: denied { read write } for pid=5471 comm="syz-executor" name="loop5" dev="devtmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.471248][ T29] audit: type=1400 audit(1753431691.544:8473): avc: denied { open } for pid=5471 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=1180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.495700][ T29] audit: type=1400 audit(1753431691.554:8474): avc: denied { ioctl } for pid=5471 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=1180 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.521356][ T29] audit: type=1400 audit(1753431691.574:8475): avc: denied { perfmon } for pid=11319 comm="syz.2.2295" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.552916][ T29] audit: type=1400 audit(1753431691.654:8476): avc: denied { prog_load } for pid=11324 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.572691][ T29] audit: type=1400 audit(1753431691.654:8477): avc: denied { bpf } for pid=11324 comm="syz.5.2297" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.604300][ T29] audit: type=1400 audit(1753431691.704:8478): avc: denied { prog_run } for pid=11324 comm="syz.5.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.637349][ T29] audit: type=1400 audit(1753431691.734:8479): avc: denied { read write } for pid=11324 comm="syz.5.2297" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.661532][ T29] audit: type=1400 audit(1753431691.734:8480): avc: denied { open } for pid=11324 comm="syz.5.2297" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 164.690820][ T29] audit: type=1400 audit(1753431691.764:8481): avc: denied { map_create } for pid=11327 comm="syz.6.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.730354][T11325] Falling back ldisc for ttyS3. [ 164.764931][T11331] loop0: detected capacity change from 0 to 512 [ 164.777636][T11331] EXT4-fs: Ignoring removed oldalloc option [ 164.801463][T11331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2298: Parent and EA inode have the same ino 15 [ 164.817617][T11344] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2304'. [ 164.826837][T11344] tipc: Started in network mode [ 164.831800][T11344] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 164.850693][T11344] tipc: Enabled bearer , priority 10 [ 164.867865][T11331] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.2298: Parent and EA inode have the same ino 15 [ 164.898007][T11336] syzkaller1: entered promiscuous mode [ 164.903634][T11336] syzkaller1: entered allmulticast mode [ 164.930705][T11331] EXT4-fs (loop0): 1 orphan inode deleted [ 164.941565][T11331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.975588][T11356] FAULT_INJECTION: forcing a failure. [ 164.975588][T11356] name failslab, interval 1, probability 0, space 0, times 0 [ 164.988429][T11356] CPU: 0 UID: 0 PID: 11356 Comm: syz.2.2306 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 164.988453][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.988464][T11356] Call Trace: [ 164.988471][T11356] [ 164.988480][T11356] __dump_stack+0x1d/0x30 [ 164.988501][T11356] dump_stack_lvl+0xe8/0x140 [ 164.988520][T11356] dump_stack+0x15/0x1b [ 164.988537][T11356] should_fail_ex+0x265/0x280 [ 164.988565][T11356] should_failslab+0x8c/0xb0 [ 164.988609][T11356] __kmalloc_noprof+0xa5/0x3e0 [ 164.988633][T11356] ? nla_strdup+0x78/0xc0 [ 164.988652][T11356] nla_strdup+0x78/0xc0 [ 164.988669][T11356] nf_tables_newtable+0x3ba/0xea0 [ 164.988705][T11356] nfnetlink_rcv+0xb99/0x1690 [ 164.988880][T11356] netlink_unicast+0x5a8/0x680 [ 164.988910][T11356] netlink_sendmsg+0x58b/0x6b0 [ 164.988931][T11356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.989008][T11356] __sock_sendmsg+0x145/0x180 [ 164.989032][T11356] ____sys_sendmsg+0x31e/0x4e0 [ 164.989069][T11356] ___sys_sendmsg+0x17b/0x1d0 [ 164.989100][T11356] __x64_sys_sendmsg+0xd4/0x160 [ 164.989160][T11356] x64_sys_call+0x2999/0x2fb0 [ 164.989181][T11356] do_syscall_64+0xd2/0x200 [ 164.989199][T11356] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.989224][T11356] ? clear_bhb_loop+0x40/0x90 [ 164.989287][T11356] ? clear_bhb_loop+0x40/0x90 [ 164.989308][T11356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.989328][T11356] RIP: 0033:0x7f4f0041e9a9 [ 164.989408][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.989425][T11356] RSP: 002b:00007f4efea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.989516][T11356] RAX: ffffffffffffffda RBX: 00007f4f00645fa0 RCX: 00007f4f0041e9a9 [ 164.989606][T11356] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.989618][T11356] RBP: 00007f4efea87090 R08: 0000000000000000 R09: 0000000000000000 [ 164.989631][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.989643][T11356] R13: 0000000000000000 R14: 00007f4f00645fa0 R15: 00007ffcfb423878 [ 164.989661][T11356] [ 165.340054][T11358] loop5: detected capacity change from 0 to 512 [ 165.370963][T11358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.384232][T11358] ext4 filesystem being mounted at /304/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 165.384967][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.406506][T11358] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2307: bg 0: block 289: padding at end of block bitmap is not set [ 165.451527][T11358] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2307: iget: bad i_size value: 2533274857506816 [ 165.506461][T11358] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2307: iget: bad i_size value: 2533274857506816 [ 165.521210][T11358] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2307: iget: bad i_size value: 2533274857506816 [ 165.587069][T11368] loop0: detected capacity change from 0 to 512 [ 165.629290][T11368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.713856][T11368] ext4 filesystem being mounted at /490/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.727006][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.914912][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.924180][ T1089] tipc: Node number set to 4269801514 [ 166.035385][T11382] loop0: detected capacity change from 0 to 512 [ 166.135345][T11382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.148970][T11382] ext4 filesystem being mounted at /491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.643041][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.815674][T11407] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2320'. [ 166.913140][T11414] FAULT_INJECTION: forcing a failure. [ 166.913140][T11414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.926283][T11414] CPU: 0 UID: 0 PID: 11414 Comm: syz.5.2321 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 166.926311][T11414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.926323][T11414] Call Trace: [ 166.926329][T11414] [ 166.926337][T11414] __dump_stack+0x1d/0x30 [ 166.926404][T11414] dump_stack_lvl+0xe8/0x140 [ 166.926423][T11414] dump_stack+0x15/0x1b [ 166.926439][T11414] should_fail_ex+0x265/0x280 [ 166.926510][T11414] should_fail+0xb/0x20 [ 166.926541][T11414] should_fail_usercopy+0x1a/0x20 [ 166.926612][T11414] _copy_to_user+0x20/0xa0 [ 166.926631][T11414] simple_read_from_buffer+0xb5/0x130 [ 166.926674][T11414] proc_fail_nth_read+0x100/0x140 [ 166.926704][T11414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.926802][T11414] vfs_read+0x19d/0x6f0 [ 166.926914][T11414] ? __rcu_read_unlock+0x4f/0x70 [ 166.926935][T11414] ? __fget_files+0x184/0x1c0 [ 166.926955][T11414] ksys_read+0xda/0x1a0 [ 166.926982][T11414] __x64_sys_read+0x40/0x50 [ 166.927041][T11414] x64_sys_call+0x2d77/0x2fb0 [ 166.927061][T11414] do_syscall_64+0xd2/0x200 [ 166.927080][T11414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.927182][T11414] ? clear_bhb_loop+0x40/0x90 [ 166.927202][T11414] ? clear_bhb_loop+0x40/0x90 [ 166.927222][T11414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.927242][T11414] RIP: 0033:0x7f79600fd3bc [ 166.927257][T11414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.927350][T11414] RSP: 002b:00007f795e767030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.927369][T11414] RAX: ffffffffffffffda RBX: 00007f7960325fa0 RCX: 00007f79600fd3bc [ 166.927440][T11414] RDX: 000000000000000f RSI: 00007f795e7670a0 RDI: 0000000000000004 [ 166.927452][T11414] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000000 [ 166.927464][T11414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.927477][T11414] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 166.927495][T11414] [ 167.134178][ T3371] usb 1-1: enqueue for inactive port 0 [ 167.139735][ T3371] usb 1-1: enqueue for inactive port 0 [ 167.210648][ T3371] vhci_hcd: vhci_device speed not set [ 167.316132][T11424] syzkaller1: entered promiscuous mode [ 167.321681][T11424] syzkaller1: entered allmulticast mode [ 167.366209][T11431] Set syz1 is full, maxelem 65536 reached [ 167.371962][T11418] Falling back ldisc for ttyS3. [ 167.976672][T11460] netlink: 'syz.4.2336': attribute type 12 has an invalid length. [ 168.097524][T11468] loop4: detected capacity change from 0 to 128 [ 168.106114][T11465] Falling back ldisc for ttyS3. [ 168.164163][T11468] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.177714][T11468] ext4 filesystem being mounted at /499/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.202710][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.313114][T11489] bridge1: entered allmulticast mode [ 168.344131][T11489] loop5: detected capacity change from 0 to 512 [ 168.415831][T11489] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.428485][T11489] ext4 filesystem being mounted at /310/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.429766][T11495] Falling back ldisc for ttyS3. [ 168.454638][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.613476][T11507] netlink: 'syz.0.2355': attribute type 25 has an invalid length. [ 168.621388][T11507] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2355'. [ 168.658572][T11507] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 168.688909][T11507] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.696312][T11507] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.714697][T11511] FAULT_INJECTION: forcing a failure. [ 168.714697][T11511] name failslab, interval 1, probability 0, space 0, times 0 [ 168.727430][T11511] CPU: 1 UID: 0 PID: 11511 Comm: syz.6.2356 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 168.727457][T11511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.727467][T11511] Call Trace: [ 168.727473][T11511] [ 168.727481][T11511] __dump_stack+0x1d/0x30 [ 168.727503][T11511] dump_stack_lvl+0xe8/0x140 [ 168.727532][T11511] dump_stack+0x15/0x1b [ 168.727549][T11511] should_fail_ex+0x265/0x280 [ 168.727573][T11511] ? nd_alloc_stack+0x50/0xa0 [ 168.727590][T11511] should_failslab+0x8c/0xb0 [ 168.727607][T11511] __kmalloc_cache_noprof+0x4c/0x320 [ 168.727663][T11511] ? __pfx_shmem_get_link+0x10/0x10 [ 168.727753][T11511] nd_alloc_stack+0x50/0xa0 [ 168.727769][T11511] pick_link+0x78e/0x830 [ 168.727786][T11511] ? __d_lookup_rcu+0x248/0x2a0 [ 168.727812][T11511] step_into+0x7b6/0x820 [ 168.727903][T11511] ? inode_permission+0x106/0x310 [ 168.727921][T11511] link_path_walk+0x571/0x900 [ 168.727957][T11511] path_lookupat+0x63/0x2a0 [ 168.727999][T11511] do_o_path+0x45/0x130 [ 168.728016][T11511] path_openat+0x1df9/0x2170 [ 168.728036][T11511] ? css_rstat_updated+0xcd/0x5b0 [ 168.728062][T11511] ? _parse_integer_limit+0x170/0x190 [ 168.728133][T11511] ? _parse_integer+0x27/0x40 [ 168.728153][T11511] ? kstrtoull+0x111/0x140 [ 168.728173][T11511] ? kstrtouint+0x76/0xc0 [ 168.728195][T11511] do_filp_open+0x109/0x230 [ 168.728290][T11511] ? __pfx_shmem_put_link+0x10/0x10 [ 168.728312][T11511] ? __pfx_shmem_put_link+0x10/0x10 [ 168.728335][T11511] do_sys_openat2+0xa6/0x110 [ 168.728357][T11511] __x64_sys_open+0xe6/0x110 [ 168.728377][T11511] x64_sys_call+0x14d4/0x2fb0 [ 168.728421][T11511] do_syscall_64+0xd2/0x200 [ 168.728438][T11511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.728527][T11511] ? clear_bhb_loop+0x40/0x90 [ 168.728548][T11511] ? clear_bhb_loop+0x40/0x90 [ 168.728569][T11511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.728626][T11511] RIP: 0033:0x7f2a4966e9a9 [ 168.728639][T11511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.728653][T11511] RSP: 002b:00007f2a47cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 168.728670][T11511] RAX: ffffffffffffffda RBX: 00007f2a49895fa0 RCX: 00007f2a4966e9a9 [ 168.728683][T11511] RDX: 0000000000000010 RSI: 0000000000682000 RDI: 0000200000000080 [ 168.728707][T11511] RBP: 00007f2a47cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.728785][T11511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.728799][T11511] R13: 0000000000000000 R14: 00007f2a49895fa0 R15: 00007ffc37dfc2d8 [ 168.728818][T11511] [ 168.800086][T11507] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.997855][T11507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.005173][T11507] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.012223][T11507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.033773][T11507] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 169.657924][T11540] loop4: detected capacity change from 0 to 2048 [ 169.693486][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 169.693510][ T29] audit: type=1326 audit(1753431696.794:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a4966e9a9 code=0x0 [ 169.731690][ T3814] loop4: p1 < > p4 [ 169.737262][ T3814] loop4: p4 size 8388608 extends beyond EOD, truncated [ 169.750165][ T29] audit: type=1326 audit(1753431696.844:8770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.773738][ T29] audit: type=1326 audit(1753431696.844:8771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.797304][ T29] audit: type=1326 audit(1753431696.844:8772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.820823][ T29] audit: type=1326 audit(1753431696.844:8773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.844346][ T29] audit: type=1326 audit(1753431696.844:8774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.867953][ T29] audit: type=1326 audit(1753431696.844:8775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.6.2367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a4966e9a9 code=0x7ffc0000 [ 169.955718][ T29] audit: type=1326 audit(1753431697.054:8776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 169.978792][ T29] audit: type=1326 audit(1753431697.054:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 169.983466][T11540] loop4: p1 < > p4 [ 170.001970][ T29] audit: type=1326 audit(1753431697.054:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11539 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f13c38ae9a9 code=0x7ffc0000 [ 170.024281][T11538] syzkaller1: entered promiscuous mode [ 170.034831][T11538] syzkaller1: entered allmulticast mode [ 170.041880][T11540] loop4: p4 size 8388608 extends beyond EOD, truncated [ 170.146683][ T3814] udevd[3814]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 170.146716][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 170.173234][T11563] loop5: detected capacity change from 0 to 1024 [ 170.267029][T11572] loop4: detected capacity change from 0 to 128 [ 170.276924][T11572] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.289577][T11574] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2374'. [ 170.303719][T11572] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.316977][T11572] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400) [ 170.326962][T11572] FAT-fs (loop4): Filesystem has been set read-only [ 170.345557][T11578] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2374'. [ 170.363396][T11578] 0·: renamed from hsr0 (while UP) [ 170.378353][T11578] 0·: entered allmulticast mode [ 170.383301][T11578] hsr_slave_0: entered allmulticast mode [ 170.388984][T11578] hsr_slave_1: entered allmulticast mode [ 170.396617][T11578] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 170.439493][T11580] netlink: 'syz.4.2379': attribute type 3 has an invalid length. [ 170.450726][T11580] tipc: New replicast peer: 255.255.255.255 [ 170.456900][T11580] tipc: Enabled bearer , priority 10 [ 170.469178][T11580] hub 9-0:1.0: USB hub found [ 170.474251][T11580] hub 9-0:1.0: 8 ports detected [ 170.599020][T11595] FAULT_INJECTION: forcing a failure. [ 170.599020][T11595] name failslab, interval 1, probability 0, space 0, times 0 [ 170.611720][T11595] CPU: 0 UID: 0 PID: 11595 Comm: syz.6.2385 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 170.611747][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.611759][T11595] Call Trace: [ 170.611764][T11595] [ 170.611771][T11595] __dump_stack+0x1d/0x30 [ 170.611788][T11595] dump_stack_lvl+0xe8/0x140 [ 170.611804][T11595] dump_stack+0x15/0x1b [ 170.611816][T11595] should_fail_ex+0x265/0x280 [ 170.611840][T11595] should_failslab+0x8c/0xb0 [ 170.611860][T11595] kmem_cache_alloc_noprof+0x50/0x310 [ 170.611883][T11595] ? vm_area_dup+0x33/0x2c0 [ 170.611907][T11595] vm_area_dup+0x33/0x2c0 [ 170.611927][T11595] __split_vma+0xe9/0x650 [ 170.611943][T11595] ? __rcu_read_unlock+0x4f/0x70 [ 170.611962][T11595] ? avc_has_perm_noaudit+0x1b1/0x200 [ 170.611989][T11595] vms_gather_munmap_vmas+0x172/0x7a0 [ 170.612011][T11595] ? mntput_no_expire+0x63/0x3c0 [ 170.612035][T11595] do_vmi_align_munmap+0x1a4/0x3d0 [ 170.612063][T11595] do_vmi_munmap+0x1db/0x220 [ 170.612083][T11595] do_munmap+0x8a/0xc0 [ 170.612113][T11595] mremap_to+0x35b/0x540 [ 170.612137][T11595] __se_sys_mremap+0x549/0x6f0 [ 170.612164][T11595] ? trace_sys_enter+0xd0/0x110 [ 170.612185][T11595] __x64_sys_mremap+0x67/0x80 [ 170.612207][T11595] x64_sys_call+0x2ba9/0x2fb0 [ 170.612226][T11595] do_syscall_64+0xd2/0x200 [ 170.612243][T11595] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.612272][T11595] ? clear_bhb_loop+0x40/0x90 [ 170.612290][T11595] ? clear_bhb_loop+0x40/0x90 [ 170.612306][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.612323][T11595] RIP: 0033:0x7f2a4966e9a9 [ 170.612337][T11595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.612351][T11595] RSP: 002b:00007f2a47cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 170.612366][T11595] RAX: ffffffffffffffda RBX: 00007f2a49895fa0 RCX: 00007f2a4966e9a9 [ 170.612376][T11595] RDX: 0000000000002000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 170.612385][T11595] RBP: 00007f2a47cd7090 R08: 0000200000fff000 R09: 0000000000000000 [ 170.612395][T11595] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 170.612405][T11595] R13: 0000000000000000 R14: 00007f2a49895fa0 R15: 00007ffc37dfc2d8 [ 170.612421][T11595] [ 170.867012][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 170.875934][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 170.899571][T11604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2386'. [ 170.965622][T11606] syzkaller1: entered promiscuous mode [ 170.971201][T11606] syzkaller1: entered allmulticast mode [ 171.232276][T11617] loop4: detected capacity change from 0 to 128 [ 171.392361][T11626] loop4: detected capacity change from 0 to 128 [ 171.500812][T11632] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2398'. [ 171.517432][T11630] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2397'. [ 171.556086][T11644] netlink: 'syz.5.2401': attribute type 3 has an invalid length. [ 171.563972][ T1089] tipc: Node number set to 41485458 [ 171.645368][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 171.669491][T11648] loop5: detected capacity change from 0 to 1024 [ 171.692136][T11648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.738754][T11651] new mount options do not match the existing superblock, will be ignored [ 171.751906][T11651] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 171.762568][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.795885][T11658] FAULT_INJECTION: forcing a failure. [ 171.795885][T11658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.809043][T11658] CPU: 0 UID: 0 PID: 11658 Comm: syz.6.2407 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 171.809102][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.809112][T11658] Call Trace: [ 171.809118][T11658] [ 171.809125][T11658] __dump_stack+0x1d/0x30 [ 171.809146][T11658] dump_stack_lvl+0xe8/0x140 [ 171.809162][T11658] dump_stack+0x15/0x1b [ 171.809302][T11658] should_fail_ex+0x265/0x280 [ 171.809398][T11658] should_fail+0xb/0x20 [ 171.809422][T11658] should_fail_usercopy+0x1a/0x20 [ 171.809447][T11658] strncpy_from_user+0x25/0x230 [ 171.809547][T11658] ? bpf_trace_run2+0x124/0x1c0 [ 171.809572][T11658] __se_sys_add_key+0x86/0x350 [ 171.809596][T11658] __x64_sys_add_key+0x67/0x80 [ 171.809614][T11658] x64_sys_call+0x1d0d/0x2fb0 [ 171.809678][T11658] do_syscall_64+0xd2/0x200 [ 171.809693][T11658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.809759][T11658] ? clear_bhb_loop+0x40/0x90 [ 171.809780][T11658] ? clear_bhb_loop+0x40/0x90 [ 171.809872][T11658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.809891][T11658] RIP: 0033:0x7f2a4966e9a9 [ 171.809947][T11658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.809964][T11658] RSP: 002b:00007f2a47cd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 171.809984][T11658] RAX: ffffffffffffffda RBX: 00007f2a49895fa0 RCX: 00007f2a4966e9a9 [ 171.809997][T11658] RDX: 0000000000000000 RSI: 0000200000001140 RDI: 0000200000001100 [ 171.810016][T11658] RBP: 00007f2a47cd7090 R08: fffffffffffffffc R09: 0000000000000000 [ 171.810028][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.810041][T11658] R13: 0000000000000001 R14: 00007f2a49895fa0 R15: 00007ffc37dfc2d8 [ 171.810059][T11658] [ 172.048129][T11663] loop4: detected capacity change from 0 to 512 [ 172.076772][T11663] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 172.084965][T11663] System zones: 1-12 [ 172.089545][T11663] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.2409: error while reading EA inode 32 err=-116 [ 172.102672][T11663] EXT4-fs (loop4): Remounting filesystem read-only [ 172.109192][T11663] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 172.121293][T11663] EXT4-fs (loop4): 1 orphan inode deleted [ 172.127539][T11663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.253793][T11679] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11679 comm=syz.5.2415 [ 172.272062][T11679] loop5: detected capacity change from 0 to 164 [ 172.285421][T11679] iso9660: Unknown parameter 'ÿÿ' [ 172.345888][T11697] FAULT_INJECTION: forcing a failure. [ 172.345888][T11697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.359173][T11697] CPU: 0 UID: 0 PID: 11697 Comm: syz.6.2421 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 172.359241][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.359293][T11697] Call Trace: [ 172.359300][T11697] [ 172.359307][T11697] __dump_stack+0x1d/0x30 [ 172.359326][T11697] dump_stack_lvl+0xe8/0x140 [ 172.359341][T11697] dump_stack+0x15/0x1b [ 172.359357][T11697] should_fail_ex+0x265/0x280 [ 172.359385][T11697] should_fail+0xb/0x20 [ 172.359513][T11697] should_fail_usercopy+0x1a/0x20 [ 172.359539][T11697] _copy_from_iter+0xcf/0xe40 [ 172.359566][T11697] ? should_failslab+0x8c/0xb0 [ 172.359584][T11697] ? __kvmalloc_node_noprof+0x260/0x4e0 [ 172.359658][T11697] ? file_tty_write+0x1a8/0x670 [ 172.359685][T11697] file_tty_write+0x32f/0x670 [ 172.359707][T11697] ? __pfx_tty_write+0x10/0x10 [ 172.359726][T11697] tty_write+0x25/0x30 [ 172.359796][T11697] vfs_write+0x49d/0x8e0 [ 172.359825][T11697] ksys_write+0xda/0x1a0 [ 172.359849][T11697] __x64_sys_write+0x40/0x50 [ 172.359874][T11697] x64_sys_call+0x2cdd/0x2fb0 [ 172.359940][T11697] do_syscall_64+0xd2/0x200 [ 172.359958][T11697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.360103][T11697] ? clear_bhb_loop+0x40/0x90 [ 172.360197][T11697] ? clear_bhb_loop+0x40/0x90 [ 172.360217][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.360238][T11697] RIP: 0033:0x7f2a4966e9a9 [ 172.360259][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.360275][T11697] RSP: 002b:00007f2a47cd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.360294][T11697] RAX: ffffffffffffffda RBX: 00007f2a49895fa0 RCX: 00007f2a4966e9a9 [ 172.360307][T11697] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 172.360318][T11697] RBP: 00007f2a47cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 172.360328][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.360338][T11697] R13: 0000000000000000 R14: 00007f2a49895fa0 R15: 00007ffc37dfc2d8 [ 172.360354][T11697] [ 172.604850][T11702] syz.5.2426: attempt to access beyond end of device [ 172.604850][T11702] loop11: rw=0, sector=0, nr_sectors = 1 limit=0 [ 172.622561][T11702] FAT-fs (loop11): unable to read boot sector [ 172.623337][T11702] FAULT_INJECTION: forcing a failure. [ 172.623337][T11702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.623360][T11702] CPU: 1 UID: 0 PID: 11702 Comm: syz.5.2426 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 172.623384][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.623394][T11702] Call Trace: [ 172.623400][T11702] [ 172.623406][T11702] __dump_stack+0x1d/0x30 [ 172.623425][T11702] dump_stack_lvl+0xe8/0x140 [ 172.623476][T11702] dump_stack+0x15/0x1b [ 172.623492][T11702] should_fail_ex+0x265/0x280 [ 172.623527][T11702] should_fail+0xb/0x20 [ 172.623550][T11702] should_fail_usercopy+0x1a/0x20 [ 172.623576][T11702] strncpy_from_user+0x25/0x230 [ 172.623625][T11702] ? kmem_cache_alloc_noprof+0x186/0x310 [ 172.623649][T11702] ? getname_flags+0x80/0x3b0 [ 172.623706][T11702] getname_flags+0xae/0x3b0 [ 172.623723][T11702] user_path_at+0x28/0x130 [ 172.623743][T11702] __se_sys_quotactl+0xb6/0x670 [ 172.623796][T11702] __x64_sys_quotactl+0x55/0x70 [ 172.623818][T11702] x64_sys_call+0x2886/0x2fb0 [ 172.623834][T11702] do_syscall_64+0xd2/0x200 [ 172.623850][T11702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.623872][T11702] ? clear_bhb_loop+0x40/0x90 [ 172.623922][T11702] ? clear_bhb_loop+0x40/0x90 [ 172.623941][T11702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.623961][T11702] RIP: 0033:0x7f79600fe9a9 [ 172.623976][T11702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.623993][T11702] RSP: 002b:00007f795e767038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 172.624093][T11702] RAX: ffffffffffffffda RBX: 00007f7960325fa0 RCX: 00007f79600fe9a9 [ 172.624106][T11702] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 172.624119][T11702] RBP: 00007f795e767090 R08: 0000000000000000 R09: 0000000000000000 [ 172.624130][T11702] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.624141][T11702] R13: 0000000000000000 R14: 00007f7960325fa0 R15: 00007fff24b7e1c8 [ 172.624158][T11702] [ 172.672501][T11710] loop5: detected capacity change from 0 to 128 [ 172.868629][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.915630][T11717] syz.4.2430: attempt to access beyond end of device [ 172.915630][T11717] loop9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 172.928502][T11717] FAT-fs (loop9): unable to read boot sector [ 173.049171][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2431'. [ 173.106870][T11724] team0 (unregistering): Port device team_slave_0 removed [ 173.116095][T11724] team0 (unregistering): Port device team_slave_1 removed [ 173.142832][T11728] loop5: detected capacity change from 0 to 512 [ 173.162526][T11728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.175244][T11728] ext4 filesystem being mounted at /333/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.200079][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.323872][T11748] netlink: 'syz.5.2441': attribute type 3 has an invalid length. [ 173.347466][T11751] loop5: detected capacity change from 0 to 128 [ 173.428690][T11753] loop5: detected capacity change from 0 to 512 [ 173.477220][T11753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.492339][T11759] loop0: detected capacity change from 0 to 512 [ 173.514252][T11753] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.526456][T11759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.550495][T11759] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.600090][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.611472][T11763] netlink: 'syz.6.2446': attribute type 39 has an invalid length. [ 173.646577][T11769] loop0: detected capacity change from 0 to 128 [ 173.665821][T11772] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 173.685748][T11769] FAULT_INJECTION: forcing a failure. [ 173.685748][T11769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.698862][T11769] CPU: 0 UID: 0 PID: 11769 Comm: syz.0.2447 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 173.698891][T11769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.698914][T11769] Call Trace: [ 173.698920][T11769] [ 173.698927][T11769] __dump_stack+0x1d/0x30 [ 173.698949][T11769] dump_stack_lvl+0xe8/0x140 [ 173.698968][T11769] dump_stack+0x15/0x1b [ 173.698983][T11769] should_fail_ex+0x265/0x280 [ 173.699042][T11769] should_fail+0xb/0x20 [ 173.699073][T11769] should_fail_usercopy+0x1a/0x20 [ 173.699163][T11769] strncpy_from_user+0x25/0x230 [ 173.699205][T11769] ? kmem_cache_alloc_noprof+0x186/0x310 [ 173.699228][T11769] ? getname_flags+0x80/0x3b0 [ 173.699248][T11769] getname_flags+0xae/0x3b0 [ 173.699267][T11769] __x64_sys_renameat2+0x6c/0x90 [ 173.699295][T11769] x64_sys_call+0x2bf6/0x2fb0 [ 173.699316][T11769] do_syscall_64+0xd2/0x200 [ 173.699414][T11769] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.699439][T11769] ? clear_bhb_loop+0x40/0x90 [ 173.699457][T11769] ? clear_bhb_loop+0x40/0x90 [ 173.699514][T11769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.699533][T11769] RIP: 0033:0x7f45e6a8e9a9 [ 173.699548][T11769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.699565][T11769] RSP: 002b:00007f45e50ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 173.699611][T11769] RAX: ffffffffffffffda RBX: 00007f45e6cb5fa0 RCX: 00007f45e6a8e9a9 [ 173.699623][T11769] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 173.699636][T11769] RBP: 00007f45e50ef090 R08: 0000000000000000 R09: 0000000000000000 [ 173.699648][T11769] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 173.699661][T11769] R13: 0000000000000000 R14: 00007f45e6cb5fa0 R15: 00007ffdac0d8408 [ 173.699680][T11769] [ 173.942194][T11785] loop0: detected capacity change from 0 to 128 [ 173.979799][T11781] syzkaller1: entered promiscuous mode [ 173.985382][T11781] syzkaller1: entered allmulticast mode [ 174.010085][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.112416][T11805] FAULT_INJECTION: forcing a failure. [ 174.112416][T11805] name failslab, interval 1, probability 0, space 0, times 0 [ 174.114052][T11806] loop5: detected capacity change from 0 to 512 [ 174.125076][T11805] CPU: 1 UID: 0 PID: 11805 Comm: syz.2.2460 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 174.125168][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.125219][T11805] Call Trace: [ 174.125226][T11805] [ 174.125233][T11805] __dump_stack+0x1d/0x30 [ 174.125255][T11805] dump_stack_lvl+0xe8/0x140 [ 174.125273][T11805] dump_stack+0x15/0x1b [ 174.125288][T11805] should_fail_ex+0x265/0x280 [ 174.125345][T11805] should_failslab+0x8c/0xb0 [ 174.125365][T11805] kmem_cache_alloc_noprof+0x50/0x310 [ 174.125388][T11805] ? security_file_alloc+0x32/0x100 [ 174.125406][T11805] security_file_alloc+0x32/0x100 [ 174.125484][T11805] init_file+0x5c/0x1d0 [ 174.125505][T11805] alloc_empty_file+0x8b/0x200 [ 174.125526][T11805] alloc_file_pseudo+0xc6/0x160 [ 174.125582][T11805] anon_inode_getfile_fmode+0xa5/0x140 [ 174.125676][T11805] do_signalfd4+0x162/0x2b0 [ 174.125698][T11805] __x64_sys_signalfd+0xbe/0xf0 [ 174.125845][T11805] x64_sys_call+0xeea/0x2fb0 [ 174.125904][T11805] do_syscall_64+0xd2/0x200 [ 174.125922][T11805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.125946][T11805] ? clear_bhb_loop+0x40/0x90 [ 174.125965][T11805] ? clear_bhb_loop+0x40/0x90 [ 174.125984][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.126033][T11805] RIP: 0033:0x7f4f0041e9a9 [ 174.126052][T11805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.126109][T11805] RSP: 002b:00007f4efea87038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 174.126128][T11805] RAX: ffffffffffffffda RBX: 00007f4f00645fa0 RCX: 00007f4f0041e9a9 [ 174.126156][T11805] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 174.126168][T11805] RBP: 00007f4efea87090 R08: 0000000000000000 R09: 0000000000000000 [ 174.126179][T11805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.126191][T11805] R13: 0000000000000000 R14: 00007f4f00645fa0 R15: 00007ffcfb423878 [ 174.126209][T11805] [ 174.323539][T11809] new mount options do not match the existing superblock, will be ignored [ 174.361436][T11806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.418542][T11820] loop4: detected capacity change from 0 to 128 [ 174.603982][T11814] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 174.666504][T11822] ================================================================== [ 174.674618][T11822] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 174.683488][T11822] [ 174.685821][T11822] read-write to 0xffff888106bf42d8 of 8 bytes by task 11806 on cpu 1: [ 174.693979][T11822] __filemap_add_folio+0x5b9/0x7d0 [ 174.699111][T11822] filemap_add_folio+0x98/0x1b0 [ 174.703985][T11822] __filemap_get_folio+0x31e/0x6b0 [ 174.709117][T11822] ext4_write_begin+0x234/0xd30 [ 174.713985][T11822] ext4_da_write_begin+0x1e0/0x670 [ 174.719108][T11822] generic_perform_write+0x181/0x490 [ 174.724398][T11822] ext4_buffered_write_iter+0x1ee/0x3c0 [ 174.729965][T11822] ext4_file_write_iter+0xdbf/0xf00 [ 174.735177][T11822] iter_file_splice_write+0x5f2/0x970 [ 174.740567][T11822] direct_splice_actor+0x156/0x2a0 [ 174.745695][T11822] splice_direct_to_actor+0x312/0x680 [ 174.751083][T11822] do_splice_direct+0xda/0x150 [ 174.755865][T11822] do_sendfile+0x380/0x650 [ 174.760313][T11822] __x64_sys_sendfile64+0x105/0x150 [ 174.765525][T11822] x64_sys_call+0xb39/0x2fb0 [ 174.770126][T11822] do_syscall_64+0xd2/0x200 [ 174.774823][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.780730][T11822] [ 174.783057][T11822] read to 0xffff888106bf42d8 of 8 bytes by task 11822 on cpu 0: [ 174.790691][T11822] filemap_write_and_wait_range+0x59/0x340 [ 174.796513][T11822] ext4_file_write_iter+0xe04/0xf00 [ 174.801721][T11822] iter_file_splice_write+0x5f2/0x970 [ 174.807103][T11822] direct_splice_actor+0x156/0x2a0 [ 174.812332][T11822] splice_direct_to_actor+0x312/0x680 [ 174.817720][T11822] do_splice_direct+0xda/0x150 [ 174.822497][T11822] do_sendfile+0x380/0x650 [ 174.826919][T11822] __x64_sys_sendfile64+0x105/0x150 [ 174.832129][T11822] x64_sys_call+0xb39/0x2fb0 [ 174.836732][T11822] do_syscall_64+0xd2/0x200 [ 174.841243][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.847148][T11822] [ 174.849471][T11822] value changed: 0x0000000000000000 -> 0x0000000000000001 [ 174.856576][T11822] [ 174.858895][T11822] Reported by Kernel Concurrency Sanitizer on: [ 174.865050][T11822] CPU: 0 UID: 0 PID: 11822 Comm: syz.5.2459 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 174.877556][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.887626][T11822] ================================================================== [ 175.032661][ T5471] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.