last executing test programs: 1m5.318171636s ago: executing program 0 (id=1344): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.303834767s ago: executing program 0 (id=1346): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pim6reg0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000000000000000000dbbbadf0ee6032da5c7afdb56dd0ebf23712baa51bfd4bf8c86c9d718aa48d08"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000080)={0x6, 'ip6erspan0\x00', {0x1000}, 0x5f}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0xe, &(0x7f0000000100)=ANY=[@ANYBLOB="18250000", @ANYRES32=r5, @ANYBLOB="00000000090000dd9b06a7ffffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000159110000000000001110104383e0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1m5.246799652s ago: executing program 0 (id=1347): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="380000001800310700000000000000000a002000000000000000110008000400ece2efbee1171a440ec64cdea203a80be1e65779a5a6394fec776e8b006db8afe307aca0ed622901a74d2f1a15d766868a8b9c523f4ab00769fdf5cfbf0913ab2c812fbabe92a62da5476668846bd37f03c28ffa65263ab77dcc499a802be6bebe4b82ddbe4146133e1374868eb0", @ANYRES32=r3, @ANYBLOB="060015000a0000000c0016800800010008000000"], 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x344}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x4000010, r1, 0xa73aa000) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$RTC_PLL_GET(r5, 0x80207011, &(0x7f0000000640)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, 0x0, &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r6}, 0x18) execve(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) r10 = openat(0xffffffffffffffff, &(0x7f00000007c0)='./file1\x00', 0x602000, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x8, 0x20, 0xfff, 0x5, {{0xf, 0x4, 0x0, 0x8, 0x3c, 0x67, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@end, @rr={0x7, 0x1b, 0x30, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x22}, @remote, @dev={0xac, 0x14, 0x14, 0x43}]}, @cipso={0x86, 0xb, 0x1, [{0x6, 0x3, "fb"}, {0x7, 0x2}]}]}}}}}) connect$packet(r10, &(0x7f0000000500)={0x11, 0xc, r11, 0x1, 0x9, 0x6, @link_local}, 0x14) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000001018110000", @ANYRES32, @ANYBLOB="0000000008810000b7080000070000007b8af8ff00000000bfa200000000ffb703000008000000b70400000000080085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) unshare(0x42000000) unshare(0x6a040000) 1m4.315058338s ago: executing program 0 (id=1356): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x141) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800004, 0x8005, 0x0, 0x9, 0xb, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780100000080966d61fdcf335263bd9bffbcc2542ded710382590c0000e1a311efec32d71e14ef3dc177b5b48b000400", "f2fdffffffffffff1a8200000000000000000000090000000000000000000001"}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 1m4.04227391s ago: executing program 0 (id=1357): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m3.247239355s ago: executing program 0 (id=1358): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = getpid() syz_pidfd_open(r1, 0x0) move_pages(r1, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x7fffffff, 0x6f6, 0x2d, 0x101, 0x5, 0x4b, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) move_pages(r1, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x7fffffff, 0x6f6, 0x2d, 0x101, 0x5, 0x4b, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) prctl$PR_SET_NAME(0xf, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040dc) (async) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040dc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 1m3.213647298s ago: executing program 32 (id=1358): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = getpid() syz_pidfd_open(r1, 0x0) move_pages(r1, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x7fffffff, 0x6f6, 0x2d, 0x101, 0x5, 0x4b, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) (async) move_pages(r1, 0x3, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil], &(0x7f00000000c0)=[0x7fffffff, 0x6f6, 0x2d, 0x101, 0x5, 0x4b, 0x5], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x7ffffffe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) prctl$PR_SET_NAME(0xf, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) (async) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340), &(0x7f0000000300)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040dc) (async) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200040dc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r7}, 0x18) close(r5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) (async) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.254803426s ago: executing program 3 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040880) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.975495429s ago: executing program 5 (id=2338): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="49fcff25000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000120000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3fd}, 0x0, 0x0, 0x3}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], 0x0, 0x4}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="91103a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.973680239s ago: executing program 5 (id=2339): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bind$rds(r0, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000010c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001100)={'sit0\x00', 0x0, 0x80, 0x20, 0x343207f4, 0x7, {{0x41, 0x4, 0x2, 0x2f, 0x104, 0x67, 0x0, 0x4, 0x38, 0x0, @multicast1, @remote, {[@rr={0x7, 0x7, 0x32, [@private=0xa010101]}, @noop, @timestamp={0x44, 0x8, 0x1b, 0x0, 0x1, [0xff]}, @timestamp_addr={0x44, 0x24, 0x7a, 0x1, 0x6, [{@broadcast, 0x6}, {@private=0xa010101, 0x36}, {@loopback, 0xe4f}, {@broadcast, 0x6}]}, @generic={0x82, 0x11, "87c6cf82a09806775a1a1ef268fd00"}, @ssrr={0x89, 0x1b, 0xc5, [@dev={0xac, 0x14, 0x14, 0x17}, @remote, @multicast2, @multicast2, @rand_addr=0x64010102, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x62, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@local, 0x400}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x58}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x6a, 0x1, 0x6, [{@rand_addr=0x64010100}, {@broadcast, 0x5}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@empty, 0x3}, {@broadcast, 0xb61}, {@remote, 0x7}, {@broadcast, 0x1}]}, @timestamp={0x44, 0x1c, 0x1b, 0x0, 0x8, [0x7, 0x2, 0x1ff, 0xe, 0x1, 0x1]}, @end]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x4) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4800}, 0xc, &(0x7f0000001300)={&(0x7f0000001640)=@newtaction={0x8e0, 0x30, 0x100, 0x70bd27, 0x25dfdbff, {}, [{0x438, 0x1, [@m_tunnel_key={0x6c, 0x0, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x15, 0x6, "30f80064868fcfaf02e84fdae53969fa9a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xbc, 0x2, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x5}, @TCA_MPLS_BOS={0x5}]}, {0x7f, 0x6, "561fce621b4b79bbbebbe993a5a9a2ef9f5ed3723bcb5648fbe60d348fadac42e7e175dd0e5caa1b18d15e15e5fa1cff1d5e400a2aeb79ef174ee6737acf652f3894923f87799f337a0bdac00f0fbd2b0450a5eeccc7b2ad5fea5016d54650ce00272942cef8cd04df8bf01e3c3ecec541fa7728387b282a54713c"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x120, 0x9, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}]}, {0xea, 0x6, "8b2bbac8a3956d5d84ebcb910c5be0ec89f385874f308a45ad8d626b460390d465d7b6171d7b528b67d24aa77374638ad7492a35b0e80f8e7c70d0a53cd8979a75008cdb7911c3e22e896772accf4130d34ddd1fe5b6b2e3692bfcb2eb0a73e7ec6e328384b84aaa431f6c58a28cfb667e45eab6577017b3a62ce3922d1457ca36aaae6416d618e964da1f4f878ea729212906c807de96bac336ae24f2b862a9c7cb7b0832eaa88c8ecb63db11fdc9be8373891863c43aa7fba7001bd7a63b4c2862ff3b95aa3d9fa168c7a3c8e03e130e9c6b6159d4be99f19ce3b3dd80a84f3a2e1878356b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0x148, 0x10, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x100, 0x20000000, 0x4, 0x69c}, 0x1, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x401, 0xfffffff8, 0x10000000, 0x7, 0x3ff}, 0x3, r5}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x10, 0x0, 0x0, 0x5}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x6, 0x4, 0x2, 0x7}, 0x3, r8}}]}, {0x9a, 0x6, "e775be811fd7e97633cebf90992c1f4b0083994d9399bbc002a2f9c8170ac5a8408b10b68212aaf059e380647afda4687109a64663fa00e6ff757cdd43ae2a60d07f0d39c28d9bf7ca4134760ce2cd781cc81c0621bb809b8931a1a058b04fc55348e6b094bddd073a8844197dc13bce7123d736b55ff8e7501ed60c41b2fcdbd72a0abbb4e555f6891fcc123fe0cb419834f645cf9f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xa4, 0x18, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x1, 0x0, 0x7ff}, 0xd}}]}, {0x57, 0x6, "a6947bdd35e1466743926841781371309d4ea7bb2a60d976cd7793566ac63b543713e962424e2004822475a11153f897eb8a1084137c9c38f2d68f1837b8ff7f4e6af34c69dc62e77e0c938f804824a71273e6"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, {0xb0, 0x1, [@m_csum={0xac, 0xc, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0x552, 0x8, 0x8, 0x7}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xf6a, 0x644, 0x8, 0xd, 0x31}, 0x49}}]}, {0x47, 0x6, "f9c559e2ca898876f62936ca8d9550e2c35270f0e1dc70e60e19f050030385f02f6a85de133433fc88af627451dd4f1f47faa1ba294779396c8e13658577db874220c3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, {0x3e4, 0x1, [@m_vlan={0xa4, 0x2, 0x0, 0x0, {{0x9}, {0x68, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xed3}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x69b}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x33d}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x605}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x134}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x4, 0x4, 0xfffffffa, 0x4}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf2c}]}, {0x11, 0x6, "fca9288fa5700f0b0539ae0b21"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x140, 0x5, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3f1c}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="f45f00ebc7b3"}]}, {0xe9, 0x6, "9fbe951fd8986b3368abcffcfa36952e0d452f160ce927361e45f0bd093f9bf3f163eced9db69ce8b68b617c95728716d440a7bff2a10344be5e8364f2f91839ada6d26be5aa365c5ad0ec537d9831e333390e202dd445068c5e7da852c5906c3d9a646a5741b4efce370b4111f0f0532d6c31e31b673e54313b82cd4aa7ec5be73e6004c2ac7c5db7570da4943cdac7aeadb3c395de0a80c024f9d787ef04f3bcac378fc15102d0f21d46d85f3d22e31128e1a74d99c9f6fd4e6722b3ca5594a68352117e443007d733681f5ceed4749e804476179aaf6c0c943131e1cc64b8e8e305b386"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0xa4, 0x5, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x211437be, 0x5242, 0x2, 0x8, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x5, 0x0, 0x76, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x52, 0x2, 0x10000000, 0xe, 0x1}}]}, {0x2d, 0x6, "9214daceb89e3fce643baffbc64335e4faf9440d1ad687d1484777341352d526870e7dc86cf178a089"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0x158, 0xe, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x401}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffff8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3ff, 0xb2c8, 0x2, 0x7, 0xb531}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x91f}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x401}]}, {0xea, 0x6, "0778c067358da65fb73f14802052237a5c2e185edd7fa3424c5e89a0272e6ba7b27cc5ec6735047da4d319e406d84639df0d7e0c782c08a98e70f400ca42ecff9b1ab7fb5ad5b11a7547ff269b1a2bae0e605d316f677f6d5a49a828de1233f2b3ec416d7b7ea4d205ffa552bfb9f2b0017a12a674cf966338facaa5dce5ec8466245ad00c812b59efb29a700a9c32c155c9a13fec00d180df542d36bbd375c292a813c36b623a9c74b42e3a8468ab826192c5221162621ec34224a82ef1d9569dbe29bdee10889c95b328f7bfbe37da0ebb73005203ad0ccb06b282d6d7ef86e9c2cc8d4231"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8e0}, 0x1, 0x0, 0x0, 0x40900}, 0x8000) r9 = dup(r1) write$UHID_INPUT(r9, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) r10 = syz_open_dev$vcsu(&(0x7f0000001040), 0x2, 0x240501) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x400, @remote}, 0x10, 0x0}, 0x0) 1.96194398s ago: executing program 3 (id=2341): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xb65c, 0x10, 0x7, 0x219}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x6e6c, &(0x7f0000000f80)={0x0, 0xb7a9, 0x100, 0xfffffffe, 0x18, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000180), &(0x7f0000000000)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x40, 0x0, @fd, 0x0, 0x0, 0x80000000, 0x8, 0x0, {0x0, r3}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") creat(&(0x7f0000000100)='./bus\x00', 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r5, 0x20, 0x0, 0x8000) 1.905486404s ago: executing program 3 (id=2343): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="49fcff25000000", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028004000300040000000800020000120000"], 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3fd}, 0x0, 0x0, 0x3}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b000000"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = io_uring_setup(0x792b, &(0x7f0000000600)={0x0, 0x2002, 0x400, 0x0, 0x4b1}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000080)='./file1\x00', 0xc000, 0x1) renameat2(r4, &(0x7f0000000540)='./file1\x00', r4, &(0x7f0000000040)='./file0\x00', 0x5) getdents64(r4, &(0x7f0000000040)=""/131, 0x83) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a, 0x20010, r2, 0x39552000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0xff, 0xe0000, @vifc_lcl_addr=@empty, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000007000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000480)=[{&(0x7f0000001700)=""/4095, 0xfff}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x2) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000580)='pimreg\x00', r6) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/19, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a00"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_io_uring_setup(0x5da7, &(0x7f0000000400)={0x0, 0x10000, 0x0, 0x8003}, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) 1.872278807s ago: executing program 5 (id=2344): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) unshare(0x4000400) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032212e0ff25000200475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000840), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440), 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = gettid() sendmsg$unix(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 1.816179432s ago: executing program 5 (id=2347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.775342485s ago: executing program 5 (id=2348): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x503002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x8, 0x1, 0xfffffff9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@ipv6_newnexthop={0x18, 0x68, 0xf01}, 0x18}}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2000400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.726664549s ago: executing program 3 (id=2351): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='rpc_socket_nospace\x00', r3, 0x0, 0x7fffffff}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) setitimer(0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000000c0)={0x214320c00, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x2, [{0x3, 0x1, 0x4}, {0x4, 0x1, 0x3b}, {0x5, 0x357b, 0x9}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x30, 0x5f]}}, &(0x7f0000000680)=""/95, 0x50, 0x5f, 0x1, 0xfffffff1}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.651756935s ago: executing program 3 (id=2355): umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) 1.649529425s ago: executing program 5 (id=2356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, 0x0, 0x8014) sendmmsg$inet(r3, &(0x7f0000003140)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000240)="c9a7368509b34e80b8ff777bdf18f68b155e8f96e1cb9b71f77bb483a6d7c141cad40c3d8a8ca79ac473f6a9ea7bf7d5335ad3d314b52ea552a0c9f7027ff9b1e673b7", 0x43}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000002c0)="0feca80a382f1ce05f8221ee23c47e9d5e92bb2e5dacae53430f7723c26c00fad472627510c1beb9b31dbc7eeeda6a83e2f4770efb69392a34a9135fc4772688c26c2bf5e1b5956f", 0x48}, {&(0x7f00000000c0)="67106714373a5f54e21d3cbfad5025c9441a7765e54666d62990be4987b4f168", 0x20}], 0x5}}, {{&(0x7f0000000340)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000002980)=[{&(0x7f00000005c0)="a2d79f3b6cb6848cfd2cd86bad3a15fe54e9507b50166a5b135e89161ecc22e7c15eae61e03acd57c834b89d2bcaee872d47ee4baa0246c23b28c85106c057c0f04081b18add3b4a6f7658c869efc1ef0be9f058c1fb2b7e262c8ca10ba9f319349dca8fcd6e0fd2f2a7b876", 0x6c}, {&(0x7f00000027c0)="e000549b144b5fbdc6abed0ae1d4d70f90954eb01fb2d38c5b2afc571f35b42f1975b66bddedf1f1e4aa5a12d79a715a54f6734b00d445d4bf40e84aa0950bab7cc018f062e6039f0b0128bc0628529f0d72cc3a2342d54ac3376d9798354b00786a005eb9c6f66b77209ee5b56b4e8330d5f3e01742fb2d0c1a95d8052d61990b3b12246d005d4a1e8427a19b1e8c321a9d655eb8ae3a7cd9390c5120062f53645f12c49cf489366c5fca0a1deee82dc3f79c9ad4fb3ee8eca5", 0xba}, {&(0x7f0000002880)="4320ff8bfa3a8f793b7820f3ffa53381a16df299766899db680f261adc0f97bc1a6737b3ee3649b7838daab2633fdf297a18622e60e16beb35d46d31e1afc89dcfb65e87aa3b31772eb8d6c58670f5cca30b8ca1e0f6d72c7bb59c9b7abe5495751658190d1df422d31e106ab5effcb176de55708f0a3a6d201c746d9640ffb048e6071a5c5f9ae1bb1c59b026", 0x8d}, {&(0x7f0000000640)="ace238dee613a111573c9956a7a844cc335b3815eaa5a23fbc480992d32416a2d16567e1d7ec224cdd8b7409d6b259141317fcd674e46a04daaffc27e08df74e15ef1f53be58cfa25cdac8ce01789faf9687c65c4f4778be7d2660059ca5374701bcc5c3dffc332bad5b9d6ea6be1fed3a2b", 0x72}, {&(0x7f0000002940)}], 0x5, &(0x7f0000002a00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xde}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5a5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe6}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002a80)="3caa8d649016b717b15cbc01a03080906ac6e669f29d20e6589d11b2fc0f9ff93f0e20979193b9e8cf42822ec178d7c443105a56ccd749598fcf7fff0e687fe00db765a137cd61597f63fc694b9b9a9923e20b593cff3cb726ee674fcaef4c57df3b9cc066c239338228ed7014024543b28a19a443ebce639ac4551349a3338f2a434b56017fdd9842ca0f3ece701e63e98af4856e6bf34abfe53f4aaf6e3d102a2e8d59c16be06bafbab5a6fbe5c9f6bd7ec70235953829896abb93c7e99873333e6d9302352fc33db5fa2118d3be0c8c748a3bbd5c7ccef435a8da1b80", 0xde}, {&(0x7f0000003040)="12f4ecb60da5996459a3e16bf1e2071b157c24abc6ea314e133abb8d447e1a43b67cae11f89557e0e32e541209a47b1abfb25238e0346946005fedad7b77a4cc7d5221ed4d20fc0c9123dc8e3128703fabe8a4c42c", 0x55}, {&(0x7f0000002bc0)="166153b60ed0040ca34626ec1f729f379c9eb8ef1312a033ed4e2a653fa4737a72e95a997591530e53b28558faea8dd670f2f80a07687d975a75d2d98ad2ef0f442dc0b08e8a2b092281aaaa9155db54e75bff2ac28d7fc57fa347520daac1ccbec036327e04662e42c56a99d0d67c7c4961c0b1c1b7c3aa77e89d1c1f268f", 0x7f}, {&(0x7f0000002c80)="a84c07a2300aaea3a20daf7d039747ff30fd5cf9ec58bc977323b359238cdcba2aac710ee8d2b0ea2cb33b065f6399d2da8d88c852e4a1a05ba35f9501679dda70929f52f30dc011f23f518c723b8ab2223b4a7fddccc927039c5abcbc89d50fd3fbe40d1be58a92859622aa7065a087a13894d16138f80f58d743614b5b5a28e30c09ccfd6807b57da9b560f9b510e93dd52d53541c04a31380773bdcd4e5b9acd8d57f2f207ad7c1dd121a3991d694c51d6c672bb99173cc9eb8bfe2377d150c71efbd83fdf96f1986c0afc7dcaf5e9afdc8127760669f708fe528ecd0", 0xde}, {0x0}], 0x5}}, {{&(0x7f0000002e80)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002ec0)="f585953efc552ef50d09ae19a121dd71a7d0eae700d52c1052d97c50e5f5c961f5b58693fa", 0x25}, {&(0x7f0000002f00)="0d2bde90467742bfc714538c7ae9b3e94fec757bb81dadb16373ac1e787c131fd20d57ddbfd8986bfd18eb6f1a4179bce10799bde51a9bf0959b1fa6ad1b1152219a3a5b61626b8f4c5c1ccbf42b6acb19168821dca1db567908d7101a92be2f9e0a6c599e4d851110c681c7a4bf52d005c955587e569959cda2c5886303c32b16a30e3065f67d57c6d7c8ffdf1a4f9221f6321fd5ee8422083f0ab6767bfdce9b4528711c1c1e32406ecdcfbf3db42b4bcdc559d00de56667a962559c0d708258254f90f8e59ff0b3449737e9f431abd18441288c5d6c17fac2ac05211aacaa48d5fbdd82bf9c3ed572882d86fb852c5207f506d5", 0xf5}], 0x2, &(0x7f0000003240)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0x94, 0x2}, @timestamp_addr={0x44, 0x14, 0x6a, 0x1, 0x6, [{@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x120}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @rr={0x7, 0x7, 0x7d, [@empty]}, @timestamp_prespec={0x44, 0x4c, 0x2f, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7e}, {@dev={0xac, 0x14, 0x14, 0x2d}, 0x10000}, {@rand_addr=0x64010100, 0x100}, {@empty, 0x6}, {@empty, 0x183b}, {@empty, 0xe9}, {@remote, 0xfffffff7}, {@broadcast, 0x6}]}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x15}}], 0x100}}], 0x4, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000700300801280102d52a0000000109022200010000000009040000000e010000082403"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) 1.474825339s ago: executing program 4 (id=2363): umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) (fail_nth: 2) 1.22309085s ago: executing program 3 (id=2365): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 1.22269762s ago: executing program 4 (id=2366): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x24, 0x1, 0xa2ff, 0x3fe}}) 1.208292861s ago: executing program 2 (id=2367): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x503002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x3, 0x8, 0x1, 0xfffffff9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a400020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@ipv6_newnexthop={0x18, 0x68, 0xf01}, 0x18}}, 0x0) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x2000400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r4], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.184815243s ago: executing program 4 (id=2368): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) set_mempolicy(0xc001, &(0x7f0000000000)=0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) read$usbfs(r2, &(0x7f0000000500)=""/90, 0x5a) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001c00010428bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="80002c010a0002000180c2"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=r7], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r8}, 0x9) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r10, 0x89e0, &(0x7f0000000280)) preadv(r9, &(0x7f0000000140)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f0000000880)={{0x10000, 0xffff}, 0x100, './file0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) clock_gettime(0x0, &(0x7f0000004040)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001040)=""/76, 0x4c}, {&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000001180)=""/189, 0xbd}, {&(0x7f0000001240)=""/216, 0xd8}, {&(0x7f0000001340)=""/49, 0x31}, {&(0x7f0000001380)=""/58, 0x3a}], 0x6, &(0x7f0000001440)=""/29, 0x1d}}, {{&(0x7f00000009c0)=@qipcrtr, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001500)=""/194, 0xc2}, {&(0x7f0000001600)=""/59, 0x3b}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/188, 0xbc}, {&(0x7f00000017c0)=""/83, 0x53}, {&(0x7f0000000580)=""/245, 0xf5}, {&(0x7f0000001940)}, {&(0x7f0000001980)=""/35, 0x23}, {&(0x7f00000019c0)=""/189, 0xbd}], 0x9, &(0x7f0000001b40)=""/157, 0x9d}, 0xfffffff9}, {{&(0x7f0000001c00)=@caif=@dgm, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c80)=""/235, 0xeb}, {&(0x7f0000001d80)=""/181, 0xb5}, {&(0x7f0000001e40)=""/160, 0xa0}, {&(0x7f0000001f00)=""/137, 0x89}, {&(0x7f0000001fc0)=""/176, 0xb0}], 0x5, &(0x7f0000002100)=""/45, 0x2d}, 0x1e8aa046}, {{&(0x7f0000002140)=@xdp, 0x80, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/35, 0x23}, {&(0x7f0000002200)=""/102, 0x66}], 0x2, &(0x7f0000002300)=""/46, 0x2e}, 0x3}, {{&(0x7f0000002340)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003740)=[{&(0x7f00000023c0)=""/118, 0x76}, {&(0x7f0000002440)=""/113, 0x71}, {&(0x7f00000024c0)=""/96, 0x60}, {&(0x7f0000002540)=""/230, 0xe6}, {&(0x7f0000002640)=""/115, 0x73}, {&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/60, 0x3c}, {&(0x7f0000003700)=""/51, 0x33}], 0x8, &(0x7f00000037c0)=""/219, 0xdb}, 0x40}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f00000038c0)=""/67, 0x43}, {&(0x7f0000003940)=""/110, 0x6e}, {&(0x7f00000039c0)}, {&(0x7f0000003a00)=""/94, 0x5e}, {&(0x7f0000003a80)=""/190, 0xbe}, {&(0x7f0000003b40)=""/172, 0xac}, {&(0x7f0000003c00)=""/153, 0x99}, {&(0x7f0000003cc0)=""/164, 0xa4}], 0x8, &(0x7f0000003e00)=""/159, 0x9f}, 0x800}], 0x6, 0x3, &(0x7f0000004080)={r11, r12+60000000}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000080)=0x6, 0x4) 1.113268729s ago: executing program 4 (id=2369): mknod$loop(0x0, 0x2000, 0x1) creat(0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.111615229s ago: executing program 2 (id=2370): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x24, 0x1, 0xa2ff, 0x3fe}}) (fail_nth: 1) 1.050082854s ago: executing program 2 (id=2371): r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x40000, 0x0, &(0x7f0000000280)=[0xffffffffffffffff]}, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e20, @empty}}}, 0x84) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x24, 0x1, 0xa2ff, 0x3fe}}) 1.049537354s ago: executing program 2 (id=2372): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000004) syz_clone3(&(0x7f00000003c0)={0x2020000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8, 0x0, 0x7}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) shutdown(r1, 0x2) 980.65957ms ago: executing program 1 (id=2374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a4"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'hsr0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 440.644024ms ago: executing program 1 (id=2375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000000)={r2, 0x8000}, 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x10) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a080000000000000000000000000007020000f8ffffffb703000000000000b704000004000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x101091, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000000)="64871e24ad9caee94e67c49d62df5ddb", 0x10) sendto(r5, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x13, &(0x7f00000004c0)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r6, 0x0, 0x3}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0x2}, 0x18) r11 = mq_open(&(0x7f00000004c0)='!se\xf7ih,\x17i\xacP\xe6lNnuxs\x83p\xf8\\\xb5\xf9\x1f\xca\xf6%\xed\x18r\xb1T\xe3\x04W\x9d\x18\x81k\x93]cy\xf6\xf6k\x0e[\x15\x81\x87\x85\x1e\x8f\xc7)\xd9\t9E\x8b\xe7\xcb\x18\xc5\xb1)9\n\xda\xd0\xec\xf4\x9c-(\xda\xa5\xd4P\xe8\x93\f\x9f\xf1\x7ff\xa8A\f.7J_L7\x10x\tF\xbf\b D\xc2`bd\xafY\xf1F\x01\xc3\xda\xe2\b\x1b\xe5\xdep\xa3\xf4D\xed\x05\x13\x17\xcf\x82\x85k\x88\xaf\xaa\xbe\a0\xf7Z\xe0\'\xb45t\\pH.\xf5\x89\xcaL\xfd\xc1\x89\x8f\x1c\xfcd\x8e6\xa7;AKJc\x1c\xd7\xec\x00\xbd\x19\xd3\xaa\xe4<\v\x81\xf6$\x1b\v-\x99*\x9d\x16\xe2\f\xac\x82|#+\xd3\x93\x90\\ \xdaOW\x15\xa54\xb7\xfb\x9d\x16\xe7\x1f\xa5F\xdfM\xf1\xa1tW\x8c\x06\xb1\xc8\xa4E\rF\xdd\x85\xd6\xf5\xa9\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x1a2, &(0x7f0000000300)={0x400000000000, 0x1, 0x2, 0x8000000000000e5d}) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7) 350.978632ms ago: executing program 1 (id=2376): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) preadv(r0, 0x0, 0x0, 0xfffffffc, 0x0) 333.678573ms ago: executing program 1 (id=2377): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x7fe, 0x460fad97, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) (fail_nth: 2) 81.957474ms ago: executing program 4 (id=2378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000380), &(0x7f0000000680)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000000), &(0x7f0000000840)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") 31.098017ms ago: executing program 1 (id=2379): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB="0000008084aac13d00000052c623afd81fee2c3b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 30.493387ms ago: executing program 2 (id=2380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfffffdf5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x361200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x80000002) 14.184218ms ago: executing program 4 (id=2381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 4.459629ms ago: executing program 2 (id=2382): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d40)={'ip6tnl0\x00', 0x0}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}]}}]}, 0x74}}, 0x24040084) (async) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000000000000100000d0000001d0500000002000000010000000000000c01000000002e305f002e00"], 0x0, 0x3f, 0x0, 0x1}, 0x28) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) (async, rerun: 64) finit_module(r5, 0x0, 0x2) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) (async) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed300444000f8ac89758d3a070000000000000096a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad1943012e7b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c417021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4eea299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b9770f63e91f3a9a04e9fca51d88273d5491ed", @ANYRESOCT], 0x3, 0x7dc, &(0x7f0000000d80)="$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") 0s ago: executing program 1 (id=2383): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000000000000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7007140de83ee71000000000000950000000000000008008a36173a77e8490890a1ef354f10d2a0553ef910c9c4428db1ce4a99df75e093b28d9ebc5e30325725a52cf2c8006a52e43c964a05a2be9d4ee0250ebfc324eaab3f9950d5f46fd07319161066"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd26, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "8ca5be073cff296e"}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x80, 0xfa, 0x4c, 0x0, "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", 0x3, "5c8d5804000000b6c56a0fca15c8a15d29e5b2ea"}}]}, 0x14c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x7fe, 0x460fad97, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) kernel console output (not intermixed with test programs): xt=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 205.172830][ T29] audit: type=1400 audit(1754161034.228:9161): avc: denied { bind } for pid=9089 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.192439][ T29] audit: type=1400 audit(1754161034.228:9162): avc: denied { write } for pid=9089 comm="syz.5.1768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 205.223274][ T29] audit: type=1400 audit(1754161034.298:9163): avc: denied { allowed } for pid=9095 comm="syz.3.1769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 205.276017][ T9096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1769'. [ 205.286006][ T9096] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 205.294753][ T9098] loop5: detected capacity change from 0 to 1024 [ 205.307758][ T9081] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1765: corrupted inode contents [ 205.322338][ T9098] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.335851][ T9081] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1765: mark_inode_dirty error [ 205.365707][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.375489][ T9081] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1765: corrupted inode contents [ 205.415552][ T9108] batadv_slave_0: entered promiscuous mode [ 205.429587][ T9108] batadv_slave_0: left promiscuous mode [ 205.446525][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.493689][ T9118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9118 comm=syz.5.1778 [ 205.506431][ T9118] netlink: 'syz.5.1778': attribute type 1 has an invalid length. [ 205.534257][ T9117] hub 6-0:1.0: USB hub found [ 205.539003][ T9117] hub 6-0:1.0: 8 ports detected [ 205.546494][ T9123] loop5: detected capacity change from 0 to 1024 [ 205.559122][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1777'. [ 205.560361][ T9123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.596732][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.615061][ T9128] loop5: detected capacity change from 0 to 164 [ 205.624746][ T9128] Unable to read rock-ridge attributes [ 205.653562][ T9130] loop1: detected capacity change from 0 to 164 [ 205.980345][ T9145] lo speed is unknown, defaulting to 1000 [ 206.328333][ T9121] syz.3.1779 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 206.342639][ T9121] CPU: 1 UID: 0 PID: 9121 Comm: syz.3.1779 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 206.342667][ T9121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.342680][ T9121] Call Trace: [ 206.342686][ T9121] [ 206.342696][ T9121] __dump_stack+0x1d/0x30 [ 206.342799][ T9121] dump_stack_lvl+0xe8/0x140 [ 206.342821][ T9121] dump_stack+0x15/0x1b [ 206.342837][ T9121] dump_header+0x81/0x220 [ 206.342898][ T9121] oom_kill_process+0x342/0x400 [ 206.342936][ T9121] out_of_memory+0x979/0xb80 [ 206.342994][ T9121] try_charge_memcg+0x5e6/0x9e0 [ 206.343020][ T9121] obj_cgroup_charge_pages+0xa6/0x150 [ 206.343163][ T9121] __memcg_kmem_charge_page+0x9f/0x170 [ 206.343194][ T9121] __alloc_frozen_pages_noprof+0x188/0x360 [ 206.343285][ T9121] alloc_pages_mpol+0xb3/0x250 [ 206.343317][ T9121] alloc_pages_noprof+0x90/0x130 [ 206.343350][ T9121] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 206.343443][ T9121] __kvmalloc_node_noprof+0x30f/0x4e0 [ 206.343532][ T9121] ? ip_set_alloc+0x1f/0x30 [ 206.343563][ T9121] ? ip_set_alloc+0x1f/0x30 [ 206.343590][ T9121] ? __kmalloc_cache_noprof+0x189/0x320 [ 206.343618][ T9121] ip_set_alloc+0x1f/0x30 [ 206.343724][ T9121] hash_netiface_create+0x282/0x740 [ 206.343855][ T9121] ? __pfx_hash_netiface_create+0x10/0x10 [ 206.343885][ T9121] ip_set_create+0x3cc/0x960 [ 206.343945][ T9121] ? __nla_parse+0x40/0x60 [ 206.343965][ T9121] nfnetlink_rcv_msg+0x4c6/0x590 [ 206.344062][ T9121] netlink_rcv_skb+0x120/0x220 [ 206.344090][ T9121] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.344119][ T9121] nfnetlink_rcv+0x16b/0x1690 [ 206.344149][ T9121] ? nlmon_xmit+0x4f/0x60 [ 206.344195][ T9121] ? consume_skb+0x49/0x150 [ 206.344227][ T9121] ? nlmon_xmit+0x4f/0x60 [ 206.344301][ T9121] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 206.344341][ T9121] ? __dev_queue_xmit+0x1200/0x2000 [ 206.344457][ T9121] ? __dev_queue_xmit+0x182/0x2000 [ 206.344536][ T9121] ? ref_tracker_free+0x37d/0x3e0 [ 206.344571][ T9121] ? __netlink_deliver_tap+0x4dc/0x500 [ 206.344606][ T9121] netlink_unicast+0x5c0/0x690 [ 206.344697][ T9121] netlink_sendmsg+0x58b/0x6b0 [ 206.344736][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.344832][ T9121] __sock_sendmsg+0x142/0x180 [ 206.344867][ T9121] ____sys_sendmsg+0x31e/0x4e0 [ 206.344954][ T9121] ___sys_sendmsg+0x17b/0x1d0 [ 206.344996][ T9121] __x64_sys_sendmsg+0xd4/0x160 [ 206.345067][ T9121] x64_sys_call+0x191e/0x2ff0 [ 206.345088][ T9121] do_syscall_64+0xd2/0x200 [ 206.345130][ T9121] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.345153][ T9121] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.345175][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.345196][ T9121] RIP: 0033:0x7f1c2f8ceb69 [ 206.345276][ T9121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.345293][ T9121] RSP: 002b:00007f1c2df37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.345315][ T9121] RAX: ffffffffffffffda RBX: 00007f1c2faf5fa0 RCX: 00007f1c2f8ceb69 [ 206.345408][ T9121] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 206.345422][ T9121] RBP: 00007f1c2f951df1 R08: 0000000000000000 R09: 0000000000000000 [ 206.345478][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.345490][ T9121] R13: 0000000000000000 R14: 00007f1c2faf5fa0 R15: 00007ffd58281a58 [ 206.345509][ T9121] [ 206.345516][ T9121] memory: usage 307200kB, limit 307200kB, failcnt 7210 [ 206.686304][ T9121] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 206.694236][ T9121] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 206.701679][ T9121] Memory cgroup stats for /syz3: [ 206.702185][ T9157] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1793'. [ 206.702667][ T9121] cache 4096 [ 206.719531][ T9121] rss 4096 [ 206.722688][ T9121] shmem 0 [ 206.725626][ T9121] mapped_file 4096 [ 206.729368][ T9121] dirty 0 [ 206.732289][ T9121] writeback 0 [ 206.735557][ T9121] workingset_refault_anon 1097 [ 206.740373][ T9121] workingset_refault_file 2329 [ 206.745119][ T9121] swap 204800 [ 206.748437][ T9121] swapcached 12288 [ 206.752203][ T9121] pgpgin 182823 [ 206.755678][ T9121] pgpgout 182819 [ 206.759233][ T9121] pgfault 215586 [ 206.762783][ T9121] pgmajfault 745 [ 206.766413][ T9121] inactive_anon 12288 [ 206.770399][ T9121] active_anon 0 [ 206.774447][ T9121] inactive_file 4096 [ 206.778400][ T9121] active_file 0 [ 206.781944][ T9121] unevictable 0 [ 206.785411][ T9121] hierarchical_memory_limit 314572800 [ 206.790925][ T9121] hierarchical_memsw_limit 9223372036854771712 [ 206.797211][ T9121] total_cache 4096 [ 206.800948][ T9121] total_rss 4096 [ 206.804477][ T9121] total_shmem 0 [ 206.807935][ T9121] total_mapped_file 4096 [ 206.812193][ T9121] total_dirty 0 [ 206.815661][ T9121] total_writeback 0 [ 206.819492][ T9121] total_workingset_refault_anon 1097 [ 206.824757][ T9121] total_workingset_refault_file 2329 [ 206.830059][ T9121] total_swap 204800 [ 206.833876][ T9121] total_swapcached 12288 [ 206.838095][ T9121] total_pgpgin 182823 [ 206.842158][ T9121] total_pgpgout 182819 [ 206.846242][ T9121] total_pgfault 215586 [ 206.850336][ T9121] total_pgmajfault 745 [ 206.854449][ T9121] total_inactive_anon 12288 [ 206.858945][ T9121] total_active_anon 0 [ 206.862904][ T9121] total_inactive_file 4096 [ 206.867346][ T9121] total_active_file 0 [ 206.871331][ T9121] total_unevictable 0 [ 206.875302][ T9121] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1779,pid=9120,uid=0 [ 206.890041][ T9121] Memory cgroup out of memory: Killed process 9120 (syz.3.1779) total-vm:93764kB, anon-rss:948kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 207.045122][ T9171] loop1: detected capacity change from 0 to 512 [ 207.090243][ T9171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.104491][ T9171] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.130895][ T9171] Invalid ELF header magic: != ELF [ 207.279479][ T9185] lo speed is unknown, defaulting to 1000 [ 207.573678][ T9208] lo speed is unknown, defaulting to 1000 [ 207.702281][ T9216] netlink: 'syz.2.1816': attribute type 6 has an invalid length. [ 207.738006][ T9171] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1797: corrupted inode contents [ 207.750238][ T9171] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.1797: mark_inode_dirty error [ 207.767389][ T9219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9219 comm=syz.2.1817 [ 207.789942][ T9171] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.1797: corrupted inode contents [ 207.799973][ T9219] netlink: 'syz.2.1817': attribute type 1 has an invalid length. [ 208.050299][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.345662][ T9257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9257 comm=syz.1.1830 [ 208.360248][ T9257] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 208.399852][ T9263] netlink: 'syz.1.1832': attribute type 6 has an invalid length. [ 208.408664][ T9261] lo speed is unknown, defaulting to 1000 [ 208.464044][ T9268] loop3: detected capacity change from 0 to 1024 [ 208.499355][ T9268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.542711][ T9280] loop1: detected capacity change from 0 to 128 [ 208.550536][ T9280] FAULT_INJECTION: forcing a failure. [ 208.550536][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 208.563186][ T9280] CPU: 0 UID: 0 PID: 9280 Comm: syz.1.1839 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 208.563224][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.563237][ T9280] Call Trace: [ 208.563244][ T9280] [ 208.563251][ T9280] __dump_stack+0x1d/0x30 [ 208.563303][ T9280] dump_stack_lvl+0xe8/0x140 [ 208.563328][ T9280] dump_stack+0x15/0x1b [ 208.563346][ T9280] should_fail_ex+0x265/0x280 [ 208.563449][ T9280] should_failslab+0x8c/0xb0 [ 208.563475][ T9280] __kvmalloc_node_noprof+0x123/0x4e0 [ 208.563550][ T9280] ? vmemdup_user+0x26/0xd0 [ 208.563576][ T9280] ? __rcu_read_unlock+0x4f/0x70 [ 208.563599][ T9280] vmemdup_user+0x26/0xd0 [ 208.563622][ T9280] map_lookup_elem+0x18f/0x460 [ 208.563698][ T9280] ? security_bpf+0x2b/0x90 [ 208.563727][ T9280] __sys_bpf+0x3b4/0x7b0 [ 208.563754][ T9280] __x64_sys_bpf+0x41/0x50 [ 208.563830][ T9280] x64_sys_call+0x2aea/0x2ff0 [ 208.563849][ T9280] do_syscall_64+0xd2/0x200 [ 208.563869][ T9280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.563891][ T9280] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.563909][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.564006][ T9280] RIP: 0033:0x7f99b282eb69 [ 208.564019][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.564035][ T9280] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 208.564052][ T9280] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 208.564114][ T9280] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000001 [ 208.564125][ T9280] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 208.564136][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.564146][ T9280] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 208.564162][ T9280] [ 208.574265][ T9282] FAULT_INJECTION: forcing a failure. [ 208.574265][ T9282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.649705][ T9285] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1843'. [ 208.652435][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.4.1840 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 208.652469][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.652482][ T9282] Call Trace: [ 208.652489][ T9282] [ 208.652497][ T9282] __dump_stack+0x1d/0x30 [ 208.652520][ T9282] dump_stack_lvl+0xe8/0x140 [ 208.652541][ T9282] dump_stack+0x15/0x1b [ 208.652560][ T9282] should_fail_ex+0x265/0x280 [ 208.652640][ T9282] should_fail+0xb/0x20 [ 208.652717][ T9282] should_fail_usercopy+0x1a/0x20 [ 208.652737][ T9282] _copy_to_user+0x20/0xa0 [ 208.652762][ T9282] simple_read_from_buffer+0xb5/0x130 [ 208.652786][ T9282] proc_fail_nth_read+0x10e/0x150 [ 208.652867][ T9282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.652894][ T9282] vfs_read+0x1a0/0x6f0 [ 208.652914][ T9282] ? __rcu_read_unlock+0x4f/0x70 [ 208.652944][ T9282] ? __fget_files+0x184/0x1c0 [ 208.652971][ T9282] ksys_read+0xda/0x1a0 [ 208.653069][ T9282] __x64_sys_read+0x40/0x50 [ 208.653091][ T9282] x64_sys_call+0x27bc/0x2ff0 [ 208.653112][ T9282] do_syscall_64+0xd2/0x200 [ 208.653136][ T9282] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.653229][ T9282] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.653253][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.653275][ T9282] RIP: 0033:0x7fa6aef6d57c [ 208.653290][ T9282] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.653309][ T9282] RSP: 002b:00007fa6ad5d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.653393][ T9282] RAX: ffffffffffffffda RBX: 00007fa6af195fa0 RCX: 00007fa6aef6d57c [ 208.653406][ T9282] RDX: 000000000000000f RSI: 00007fa6ad5d70a0 RDI: 0000000000000006 [ 208.653418][ T9282] RBP: 00007fa6ad5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.653477][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.653489][ T9282] R13: 0000000000000000 R14: 00007fa6af195fa0 R15: 00007fff036a9c48 [ 208.653507][ T9282] [ 208.699361][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.714038][ T9290] netlink: 'syz.2.1843': attribute type 10 has an invalid length. [ 209.010778][ T9294] pimreg: entered allmulticast mode [ 209.025451][ T9294] pimreg: left allmulticast mode [ 209.030610][ T9298] netlink: 'syz.5.1847': attribute type 6 has an invalid length. [ 209.109360][ T9310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1842'. [ 209.122954][ T9310] syzkaller0: entered allmulticast mode [ 209.128585][ T9310] syzkaller0: entered promiscuous mode [ 209.134884][ T9310] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1842'. [ 209.156737][ T9291] syzkaller0: left promiscuous mode [ 209.162262][ T9291] syzkaller0: left allmulticast mode [ 209.182936][ T9315] netlink: 'syz.3.1854': attribute type 6 has an invalid length. [ 209.228647][ T9323] loop1: detected capacity change from 0 to 1024 [ 209.247805][ T9325] loop3: detected capacity change from 0 to 164 [ 209.292183][ T9323] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 209.332325][ T9323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.378121][ T9338] netlink: 'syz.3.1863': attribute type 6 has an invalid length. [ 209.636506][ T9344] lo speed is unknown, defaulting to 1000 [ 210.136749][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.157615][ T8254] tipc: Resetting bearer [ 210.178659][ T9357] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9357 comm=syz.2.1870 [ 210.209229][ T9355] FAULT_INJECTION: forcing a failure. [ 210.209229][ T9355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.222372][ T9355] CPU: 0 UID: 0 PID: 9355 Comm: syz.1.1869 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 210.222401][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.222412][ T9355] Call Trace: [ 210.222418][ T9355] [ 210.222425][ T9355] __dump_stack+0x1d/0x30 [ 210.222469][ T9355] dump_stack_lvl+0xe8/0x140 [ 210.222486][ T9355] dump_stack+0x15/0x1b [ 210.222572][ T9355] should_fail_ex+0x265/0x280 [ 210.222601][ T9355] should_fail+0xb/0x20 [ 210.222627][ T9355] should_fail_usercopy+0x1a/0x20 [ 210.222699][ T9355] strncpy_from_user+0x25/0x230 [ 210.222726][ T9355] strncpy_from_bpfptr+0x43/0x50 [ 210.222758][ T9355] bpf_prog_load+0x884/0x1070 [ 210.222858][ T9355] ? security_bpf+0x2b/0x90 [ 210.222888][ T9355] __sys_bpf+0x462/0x7b0 [ 210.222918][ T9355] __x64_sys_bpf+0x41/0x50 [ 210.222990][ T9355] x64_sys_call+0x2aea/0x2ff0 [ 210.223056][ T9355] do_syscall_64+0xd2/0x200 [ 210.223078][ T9355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.223103][ T9355] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.223123][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.223157][ T9355] RIP: 0033:0x7f99b282eb69 [ 210.223173][ T9355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.223191][ T9355] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 210.223209][ T9355] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 210.223264][ T9355] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 210.223276][ T9355] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 210.223288][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.223299][ T9355] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 210.223316][ T9355] [ 210.301646][ T9361] batadv_slave_0: entered promiscuous mode [ 210.429034][ T9361] batadv_slave_0: left promiscuous mode [ 210.436134][ T9330] syz.5.1861 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 210.450406][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.5.1861 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 210.450439][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.450452][ T9330] Call Trace: [ 210.450458][ T9330] [ 210.450466][ T9330] __dump_stack+0x1d/0x30 [ 210.450485][ T9330] dump_stack_lvl+0xe8/0x140 [ 210.450508][ T9330] dump_stack+0x15/0x1b [ 210.450525][ T9330] dump_header+0x81/0x220 [ 210.450586][ T9330] oom_kill_process+0x342/0x400 [ 210.450627][ T9330] out_of_memory+0x979/0xb80 [ 210.450664][ T9330] try_charge_memcg+0x5e6/0x9e0 [ 210.450854][ T9330] obj_cgroup_charge_pages+0xa6/0x150 [ 210.450883][ T9330] __memcg_kmem_charge_page+0x9f/0x170 [ 210.450993][ T9330] __alloc_frozen_pages_noprof+0x188/0x360 [ 210.451096][ T9330] alloc_pages_mpol+0xb3/0x250 [ 210.451125][ T9330] alloc_pages_noprof+0x90/0x130 [ 210.451155][ T9330] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 210.451213][ T9330] __kvmalloc_node_noprof+0x30f/0x4e0 [ 210.451290][ T9330] ? ip_set_alloc+0x1f/0x30 [ 210.451320][ T9330] ? ip_set_alloc+0x1f/0x30 [ 210.451349][ T9330] ? __kmalloc_cache_noprof+0x189/0x320 [ 210.451424][ T9330] ip_set_alloc+0x1f/0x30 [ 210.451454][ T9330] hash_netiface_create+0x282/0x740 [ 210.451542][ T9330] ? __pfx_hash_netiface_create+0x10/0x10 [ 210.451626][ T9330] ip_set_create+0x3cc/0x960 [ 210.451703][ T9330] ? __nla_parse+0x40/0x60 [ 210.451727][ T9330] nfnetlink_rcv_msg+0x4c6/0x590 [ 210.451837][ T9330] netlink_rcv_skb+0x120/0x220 [ 210.451868][ T9330] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 210.451936][ T9330] nfnetlink_rcv+0x16b/0x1690 [ 210.451960][ T9330] ? nlmon_xmit+0x4f/0x60 [ 210.451982][ T9330] ? consume_skb+0x49/0x150 [ 210.452016][ T9330] ? nlmon_xmit+0x4f/0x60 [ 210.452072][ T9330] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 210.452106][ T9330] ? __dev_queue_xmit+0x1200/0x2000 [ 210.452151][ T9330] ? __dev_queue_xmit+0x182/0x2000 [ 210.452242][ T9330] ? try_charge_memcg+0x200/0x9e0 [ 210.452320][ T9330] ? ref_tracker_free+0x37d/0x3e0 [ 210.452361][ T9330] ? __netlink_deliver_tap+0x4dc/0x500 [ 210.452440][ T9330] netlink_unicast+0x5c0/0x690 [ 210.452494][ T9330] netlink_sendmsg+0x58b/0x6b0 [ 210.452567][ T9330] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.452604][ T9330] __sock_sendmsg+0x142/0x180 [ 210.452632][ T9330] ____sys_sendmsg+0x31e/0x4e0 [ 210.452734][ T9330] ___sys_sendmsg+0x17b/0x1d0 [ 210.452774][ T9330] __x64_sys_sendmsg+0xd4/0x160 [ 210.452813][ T9330] x64_sys_call+0x191e/0x2ff0 [ 210.453022][ T9330] do_syscall_64+0xd2/0x200 [ 210.453045][ T9330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.453126][ T9330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.453145][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.453225][ T9330] RIP: 0033:0x7f90d422eb69 [ 210.453242][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.453262][ T9330] RSP: 002b:00007f90d2897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.453279][ T9330] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422eb69 [ 210.453290][ T9330] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 210.453302][ T9330] RBP: 00007f90d42b1df1 R08: 0000000000000000 R09: 0000000000000000 [ 210.453352][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.453434][ T9330] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 210.453454][ T9330] [ 210.453461][ T9330] memory: usage 307200kB, limit 307200kB, failcnt 816 [ 210.796990][ T9330] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 210.804891][ T9330] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 210.812193][ T9330] Memory cgroup stats for /syz5: [ 210.812662][ T9330] cache 0 [ 210.820690][ T9330] rss 0 [ 210.823440][ T9330] shmem 0 [ 210.826358][ T9330] mapped_file 0 [ 210.829826][ T9330] dirty 0 [ 210.832747][ T9330] writeback 0 [ 210.836032][ T9330] workingset_refault_anon 149 [ 210.840735][ T9330] workingset_refault_file 17 [ 210.845333][ T9330] swap 376832 [ 210.848597][ T9330] swapcached 0 [ 210.852055][ T9330] pgpgin 30149 [ 210.855494][ T9330] pgpgout 30148 [ 210.858951][ T9330] pgfault 36213 [ 210.862397][ T9330] pgmajfault 101 [ 210.865925][ T9330] inactive_anon 0 [ 210.869562][ T9330] active_anon 0 [ 210.872999][ T9330] inactive_file 0 [ 210.876616][ T9330] active_file 4096 [ 210.880351][ T9330] unevictable 0 [ 210.883796][ T9330] hierarchical_memory_limit 314572800 [ 210.889231][ T9330] hierarchical_memsw_limit 9223372036854771712 [ 210.895387][ T9330] total_cache 0 [ 210.898881][ T9330] total_rss 0 [ 210.902206][ T9330] total_shmem 0 [ 210.905648][ T9330] total_mapped_file 0 [ 210.909627][ T9330] total_dirty 0 [ 210.913115][ T9330] total_writeback 0 [ 210.916950][ T9330] total_workingset_refault_anon 149 [ 210.922168][ T9330] total_workingset_refault_file 17 [ 210.927265][ T9330] total_swap 376832 [ 210.931064][ T9330] total_swapcached 0 [ 210.934941][ T9330] total_pgpgin 30149 [ 210.938829][ T9330] total_pgpgout 30148 [ 210.942791][ T9330] total_pgfault 36213 [ 210.946771][ T9330] total_pgmajfault 101 [ 210.950937][ T9330] total_inactive_anon 0 [ 210.955074][ T9330] total_active_anon 0 [ 210.959066][ T9330] total_inactive_file 0 [ 210.963383][ T9330] total_active_file 4096 [ 210.967640][ T9330] total_unevictable 0 [ 210.971627][ T9330] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1861,pid=9329,uid=0 [ 210.986227][ T9330] Memory cgroup out of memory: Killed process 9329 (syz.5.1861) total-vm:93764kB, anon-rss:1072kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 211.008415][ T9362] bond8: (slave bridge9): making interface the new active one [ 211.032286][ T9362] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 211.095983][ T9367] loop3: detected capacity change from 0 to 1024 [ 211.121470][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 211.155399][ T9367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.167497][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 211.167512][ T29] audit: type=1400 audit(1754161040.228:9356): avc: denied { firmware_load } for pid=9368 comm="syz.1.1874" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 211.231103][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.261765][ T29] audit: type=1400 audit(1754161040.338:9357): avc: denied { bind } for pid=9374 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.337992][ T29] audit: type=1400 audit(1754161040.398:9358): avc: denied { setopt } for pid=9368 comm="syz.1.1874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 211.357871][ T29] audit: type=1326 audit(1754161040.398:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 211.381351][ T29] audit: type=1326 audit(1754161040.398:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 211.404903][ T29] audit: type=1400 audit(1754161040.398:9361): avc: denied { create } for pid=9385 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.424432][ T29] audit: type=1400 audit(1754161040.398:9362): avc: denied { connect } for pid=9385 comm="syz.3.1880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.444031][ T29] audit: type=1326 audit(1754161040.398:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 211.467519][ T29] audit: type=1326 audit(1754161040.398:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 211.491032][ T29] audit: type=1326 audit(1754161040.398:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9385 comm="syz.3.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 211.634020][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 211.657138][ T10] IPVS: starting estimator thread 0... [ 211.682980][ T9405] batadv_slave_0: entered promiscuous mode [ 211.695460][ T9405] batadv_slave_0: left promiscuous mode [ 211.768839][ T9403] IPVS: using max 2880 ests per chain, 144000 per kthread [ 211.777782][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 211.877877][ T9417] loop4: detected capacity change from 0 to 1024 [ 211.884597][ T9417] EXT4-fs: Ignoring removed orlov option [ 211.892310][ T9417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.118570][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.152004][ T9429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9429 comm=syz.4.1894 [ 212.199233][ T9429] validate_nla: 1 callbacks suppressed [ 212.199248][ T9429] netlink: 'syz.4.1894': attribute type 1 has an invalid length. [ 212.236568][ T9429] bond5: (slave bridge3): making interface the new active one [ 212.260915][ T9429] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 212.271330][ T9436] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1897'. [ 212.280479][ T9437] loop5: detected capacity change from 0 to 1024 [ 212.321851][ T9441] batadv_slave_0: entered promiscuous mode [ 212.353116][ T9437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.365704][ T9441] batadv_slave_0: left promiscuous mode [ 212.408603][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.556441][ T9471] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1909'. [ 212.590033][ T9469] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1908'. [ 212.601943][ T9469] netlink: 'syz.4.1908': attribute type 10 has an invalid length. [ 212.628909][ T9476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9476 comm=syz.1.1910 [ 212.642084][ T9476] netlink: 'syz.1.1910': attribute type 1 has an invalid length. [ 212.650658][ T9477] loop4: detected capacity change from 0 to 164 [ 212.680490][ T9476] bond9: (slave bridge10): making interface the new active one [ 212.688655][ T9476] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 212.725001][ T9486] lo speed is unknown, defaulting to 1000 [ 212.727961][ T9488] loop1: detected capacity change from 0 to 2048 [ 212.757784][ T9486] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 212.800913][ T9488] Alternate GPT is invalid, using primary GPT. [ 212.807276][ T9488] loop1: p2 p3 p7 [ 212.895688][ T9509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9509 comm=syz.2.1925 [ 212.910783][ T9509] netlink: 'syz.2.1925': attribute type 1 has an invalid length. [ 212.931663][ T9509] bond9: (slave bridge10): making interface the new active one [ 212.939941][ T9509] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 212.985159][ T9517] batadv_slave_0: entered promiscuous mode [ 212.992246][ T9517] batadv_slave_0: left promiscuous mode [ 213.003335][ T9513] loop4: detected capacity change from 0 to 1024 [ 213.021769][ T9513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.047517][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.080041][ T9523] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1929'. [ 213.327145][ T9548] batadv_slave_0: entered promiscuous mode [ 213.351597][ T9548] batadv_slave_0: left promiscuous mode [ 213.362868][ T9553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9553 comm=syz.2.1938 [ 213.376148][ T9553] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 213.413264][ T9557] loop5: detected capacity change from 0 to 164 [ 213.549226][ T9567] loop5: detected capacity change from 0 to 1024 [ 213.571127][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.615656][ T9580] random: crng reseeded on system resumption [ 213.626369][ T9578] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 213.626369][ T9578] program syz.4.1949 not setting count and/or reply_len properly [ 213.645458][ T9580] FAULT_INJECTION: forcing a failure. [ 213.645458][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 213.658168][ T9580] CPU: 1 UID: 0 PID: 9580 Comm: syz.5.1948 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 213.658276][ T9580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.658283][ T9580] Call Trace: [ 213.658341][ T9580] [ 213.658346][ T9580] __dump_stack+0x1d/0x30 [ 213.658359][ T9580] dump_stack_lvl+0xe8/0x140 [ 213.658370][ T9580] dump_stack+0x15/0x1b [ 213.658380][ T9580] should_fail_ex+0x265/0x280 [ 213.658399][ T9580] should_failslab+0x8c/0xb0 [ 213.658489][ T9580] kmem_cache_alloc_noprof+0x50/0x310 [ 213.658505][ T9580] ? audit_log_start+0x365/0x6c0 [ 213.658523][ T9580] audit_log_start+0x365/0x6c0 [ 213.658612][ T9580] audit_seccomp+0x48/0x100 [ 213.658627][ T9580] ? __seccomp_filter+0x68c/0x10d0 [ 213.658701][ T9580] __seccomp_filter+0x69d/0x10d0 [ 213.658732][ T9580] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.658750][ T9580] ? vfs_write+0x75e/0x8e0 [ 213.658762][ T9580] ? __rcu_read_unlock+0x4f/0x70 [ 213.658843][ T9580] ? __fget_files+0x184/0x1c0 [ 213.658859][ T9580] __secure_computing+0x82/0x150 [ 213.658871][ T9580] syscall_trace_enter+0xcf/0x1e0 [ 213.658900][ T9580] do_syscall_64+0xac/0x200 [ 213.658914][ T9580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.659001][ T9580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.659013][ T9580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.659025][ T9580] RIP: 0033:0x7f90d422eb69 [ 213.659046][ T9580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.659057][ T9580] RSP: 002b:00007f90d2897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 213.659069][ T9580] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422eb69 [ 213.659077][ T9580] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 213.659084][ T9580] RBP: 00007f90d2897090 R08: 0000000000000000 R09: 0000000000000000 [ 213.659091][ T9580] R10: 4100000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.659098][ T9580] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 213.659179][ T9580] [ 213.930497][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1950'. [ 213.943863][ T9596] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 213.964433][ T9598] loop3: detected capacity change from 0 to 164 [ 214.001974][ T9610] loop4: detected capacity change from 0 to 1024 [ 214.002891][ T9610] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 214.078896][ T9616] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1951'. [ 214.255652][ T9635] loop5: detected capacity change from 0 to 164 [ 214.282153][ T9637] FAULT_INJECTION: forcing a failure. [ 214.282153][ T9637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.295542][ T9637] CPU: 1 UID: 0 PID: 9637 Comm: syz.5.1968 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 214.295570][ T9637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.295653][ T9637] Call Trace: [ 214.295661][ T9637] [ 214.295670][ T9637] __dump_stack+0x1d/0x30 [ 214.295692][ T9637] dump_stack_lvl+0xe8/0x140 [ 214.295713][ T9637] dump_stack+0x15/0x1b [ 214.295728][ T9637] should_fail_ex+0x265/0x280 [ 214.295817][ T9637] should_fail_alloc_page+0xf2/0x100 [ 214.295841][ T9637] __alloc_frozen_pages_noprof+0xff/0x360 [ 214.295877][ T9637] alloc_pages_mpol+0xb3/0x250 [ 214.296021][ T9637] vma_alloc_folio_noprof+0x1aa/0x300 [ 214.296056][ T9637] handle_mm_fault+0xec2/0x2c20 [ 214.296081][ T9637] ? __rcu_read_unlock+0x4f/0x70 [ 214.296190][ T9637] do_user_addr_fault+0x3fe/0x1090 [ 214.296223][ T9637] exc_page_fault+0x62/0xa0 [ 214.296279][ T9637] asm_exc_page_fault+0x26/0x30 [ 214.296302][ T9637] RIP: 0010:__put_user_4+0xd/0x20 [ 214.296327][ T9637] Code: 66 89 01 31 c9 0f 01 ca e9 50 83 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 214.296347][ T9637] RSP: 0018:ffffc9000b317e28 EFLAGS: 00050206 [ 214.296364][ T9637] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000001200 [ 214.296376][ T9637] RDX: 000000000000055f RSI: 0000000000000000 RDI: ffff88811913db20 [ 214.296413][ T9637] RBP: 0000000080047441 R08: 000188811913db23 R09: 0000000000000000 [ 214.296425][ T9637] R10: 00000000c008744c R11: 0000000000000000 R12: ffff88811f413180 [ 214.296436][ T9637] R13: ffffffff82c461a0 R14: 0000200000001200 R15: 0000000000000001 [ 214.296449][ T9637] ? __pfx_ppp_ioctl+0x10/0x10 [ 214.296485][ T9637] ppp_ioctl+0xc41/0x11c0 [ 214.296514][ T9637] ? __fget_files+0x184/0x1c0 [ 214.296618][ T9637] ? __pfx_ppp_ioctl+0x10/0x10 [ 214.296648][ T9637] __se_sys_ioctl+0xcb/0x140 [ 214.296683][ T9637] __x64_sys_ioctl+0x43/0x50 [ 214.296738][ T9637] x64_sys_call+0x1816/0x2ff0 [ 214.296762][ T9637] do_syscall_64+0xd2/0x200 [ 214.296782][ T9637] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 214.296807][ T9637] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 214.296840][ T9637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.296859][ T9637] RIP: 0033:0x7f90d422eb69 [ 214.296872][ T9637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.296956][ T9637] RSP: 002b:00007f90d2897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.297045][ T9637] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422eb69 [ 214.297059][ T9637] RDX: 0000200000001200 RSI: 0000000080047441 RDI: 0000000000000003 [ 214.297072][ T9637] RBP: 00007f90d2897090 R08: 0000000000000000 R09: 0000000000000000 [ 214.297223][ T9637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.297234][ T9637] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 214.297250][ T9637] [ 214.637565][ T9638] batadv_slave_0: entered promiscuous mode [ 214.644606][ T9638] batadv_slave_0: left promiscuous mode [ 214.797102][ T9655] batadv_slave_0: entered promiscuous mode [ 214.810842][ T9655] batadv_slave_0: left promiscuous mode [ 214.952587][ T9658] tipc: Resetting bearer [ 214.974000][ T9668] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1980'. [ 215.034449][ T9658] vlan0: left promiscuous mode [ 215.095244][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.106001][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.138541][ T9668] batadv0: entered promiscuous mode [ 215.144090][ T9668] batadv0: entered allmulticast mode [ 215.181311][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.192620][ T9678] batadv_slave_0: entered promiscuous mode [ 215.200045][ T9678] batadv_slave_0: left promiscuous mode [ 215.207665][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.219448][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.228585][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.240091][ T9680] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 215.246699][ T9680] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 215.254151][ T9680] vhci_hcd vhci_hcd.0: Device attached [ 215.266913][ T9681] vhci_hcd: connection closed [ 215.267089][ T8254] vhci_hcd: stop threads [ 215.276143][ T8254] vhci_hcd: release socket [ 215.280606][ T8254] vhci_hcd: disconnect device [ 215.323850][ T9684] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 215.330496][ T9684] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 215.338256][ T9684] vhci_hcd vhci_hcd.0: Device attached [ 215.358452][ T9693] batadv_slave_0: entered promiscuous mode [ 215.365214][ T9693] batadv_slave_0: left promiscuous mode [ 215.410448][ T9695] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1989'. [ 215.419570][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'. [ 215.428523][ T9695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1989'. [ 215.572799][ T9709] lo speed is unknown, defaulting to 1000 [ 215.578832][ T3404] usb 11-1: new high-speed USB device number 3 using vhci_hcd [ 215.589020][ T9711] FAULT_INJECTION: forcing a failure. [ 215.589020][ T9711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.602130][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.4.1996 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 215.602179][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.602193][ T9711] Call Trace: [ 215.602201][ T9711] [ 215.602209][ T9711] __dump_stack+0x1d/0x30 [ 215.602230][ T9711] dump_stack_lvl+0xe8/0x140 [ 215.602247][ T9711] dump_stack+0x15/0x1b [ 215.602262][ T9711] should_fail_ex+0x265/0x280 [ 215.602366][ T9711] should_fail+0xb/0x20 [ 215.602395][ T9711] should_fail_usercopy+0x1a/0x20 [ 215.602416][ T9711] strncpy_from_user+0x25/0x230 [ 215.602449][ T9711] ? kmem_cache_alloc_noprof+0x186/0x310 [ 215.602478][ T9711] ? getname_flags+0x80/0x3b0 [ 215.602642][ T9711] getname_flags+0xae/0x3b0 [ 215.602727][ T9711] do_sys_openat2+0x60/0x110 [ 215.602762][ T9711] __x64_sys_openat+0xf2/0x120 [ 215.602864][ T9711] x64_sys_call+0x2e9c/0x2ff0 [ 215.602939][ T9711] do_syscall_64+0xd2/0x200 [ 215.603068][ T9711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.603094][ T9711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.603117][ T9711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.603140][ T9711] RIP: 0033:0x7fa6aef6d4d0 [ 215.603155][ T9711] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 215.603175][ T9711] RSP: 002b:00007fa6ad5d6f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 215.603232][ T9711] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa6aef6d4d0 [ 215.603245][ T9711] RDX: 0000000000000000 RSI: 00007fa6aeff1f09 RDI: 00000000ffffff9c [ 215.603259][ T9711] RBP: 00007fa6aeff1f09 R08: 0000000000000000 R09: 0000000000000000 [ 215.603272][ T9711] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 215.603285][ T9711] R13: 0000000000000000 R14: 00007fa6af195fa0 R15: 00007fff036a9c48 [ 215.603304][ T9711] [ 215.835537][ T9689] vhci_hcd: connection reset by peer [ 215.842135][ T8255] vhci_hcd: stop threads [ 215.846411][ T8255] vhci_hcd: release socket [ 215.850886][ T8255] vhci_hcd: disconnect device [ 215.864139][ T9722] loop4: detected capacity change from 0 to 512 [ 215.880691][ T9722] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.892214][ T9722] Invalid ELF header magic: != ELF [ 215.982502][ T9732] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2004'. [ 216.126365][ T9751] gretap0: entered promiscuous mode [ 216.132066][ T9751] macsec1: entered promiscuous mode [ 216.137305][ T9751] macsec1: entered allmulticast mode [ 216.142643][ T9751] gretap0: entered allmulticast mode [ 216.149525][ T9751] gretap0: left allmulticast mode [ 216.154667][ T9751] gretap0: left promiscuous mode [ 216.175893][ T9753] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 216.182562][ T9753] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.190013][ T9753] vhci_hcd vhci_hcd.0: Device attached [ 216.196989][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 216.197002][ T29] audit: type=1400 audit(1754161045.268:10004): avc: denied { create } for pid=9750 comm="syz.4.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.224198][ T29] audit: type=1400 audit(1754161045.268:10005): avc: denied { write } for pid=9750 comm="syz.4.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 216.251863][ T9754] vhci_hcd: connection closed [ 216.252403][ T31] vhci_hcd: stop threads [ 216.261361][ T31] vhci_hcd: release socket [ 216.265755][ T31] vhci_hcd: disconnect device [ 216.350678][ T29] audit: type=1326 audit(1754161045.428:10006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.374196][ T29] audit: type=1326 audit(1754161045.428:10007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.398983][ T29] audit: type=1326 audit(1754161045.478:10008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.422498][ T29] audit: type=1326 audit(1754161045.478:10009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.445984][ T29] audit: type=1326 audit(1754161045.478:10010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.452358][ T9760] loop1: detected capacity change from 0 to 1024 [ 216.469477][ T29] audit: type=1326 audit(1754161045.478:10011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.499266][ T29] audit: type=1326 audit(1754161045.478:10012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.522795][ T29] audit: type=1326 audit(1754161045.478:10013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9757 comm="syz.5.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 216.555038][ T9764] loop1: detected capacity change from 0 to 1024 [ 216.599625][ T9768] tipc: Disabling bearer [ 216.605698][ T9768] team0 (unregistering): Port device vlan0 removed [ 216.613003][ T9768] team0 (unregistering): Port device dummy0 removed [ 216.628359][ T9770] batadv_slave_0: entered promiscuous mode [ 216.635166][ T9770] batadv_slave_0: left promiscuous mode [ 216.679044][ T9774] loop1: detected capacity change from 0 to 164 [ 216.780563][ T9786] lo speed is unknown, defaulting to 1000 [ 216.870713][ T9784] random: crng reseeded on system resumption [ 216.973915][ T9800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2030'. [ 217.000012][ T9800] netlink: 'syz.4.2030': attribute type 10 has an invalid length. [ 217.061488][ T9809] vhci_hcd: invalid port number 224 [ 217.172538][ T9821] lo speed is unknown, defaulting to 1000 [ 217.257673][ T9828] batadv_slave_0: entered promiscuous mode [ 217.264578][ T9828] batadv_slave_0: left promiscuous mode [ 217.392662][ T9788] syz.5.2025 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 217.407153][ T9788] CPU: 0 UID: 0 PID: 9788 Comm: syz.5.2025 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 217.407171][ T9788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.407226][ T9788] Call Trace: [ 217.407230][ T9788] [ 217.407236][ T9788] __dump_stack+0x1d/0x30 [ 217.407249][ T9788] dump_stack_lvl+0xe8/0x140 [ 217.407289][ T9788] dump_stack+0x15/0x1b [ 217.407299][ T9788] dump_header+0x81/0x220 [ 217.407327][ T9788] oom_kill_process+0x342/0x400 [ 217.407347][ T9788] out_of_memory+0x979/0xb80 [ 217.407365][ T9788] try_charge_memcg+0x5e6/0x9e0 [ 217.407410][ T9788] obj_cgroup_charge_pages+0xa6/0x150 [ 217.407429][ T9788] __memcg_kmem_charge_page+0x9f/0x170 [ 217.407460][ T9788] __alloc_frozen_pages_noprof+0x188/0x360 [ 217.407507][ T9788] alloc_pages_mpol+0xb3/0x250 [ 217.407526][ T9788] alloc_pages_noprof+0x90/0x130 [ 217.407596][ T9788] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 217.407729][ T9788] __kvmalloc_node_noprof+0x30f/0x4e0 [ 217.407758][ T9788] ? ip_set_alloc+0x1f/0x30 [ 217.407774][ T9788] ? ip_set_alloc+0x1f/0x30 [ 217.407853][ T9788] ? __kmalloc_cache_noprof+0x189/0x320 [ 217.407943][ T9788] ip_set_alloc+0x1f/0x30 [ 217.407958][ T9788] hash_netiface_create+0x282/0x740 [ 217.408003][ T9788] ? __pfx_hash_netiface_create+0x10/0x10 [ 217.408019][ T9788] ip_set_create+0x3cc/0x960 [ 217.408042][ T9788] ? __nla_parse+0x40/0x60 [ 217.408127][ T9788] nfnetlink_rcv_msg+0x4c6/0x590 [ 217.408154][ T9788] netlink_rcv_skb+0x120/0x220 [ 217.408171][ T9788] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 217.408189][ T9788] nfnetlink_rcv+0x16b/0x1690 [ 217.408227][ T9788] ? nlmon_xmit+0x4f/0x60 [ 217.408241][ T9788] ? consume_skb+0x49/0x150 [ 217.408257][ T9788] ? nlmon_xmit+0x4f/0x60 [ 217.408271][ T9788] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 217.408358][ T9788] ? __dev_queue_xmit+0x1200/0x2000 [ 217.408378][ T9788] ? __dev_queue_xmit+0x182/0x2000 [ 217.408548][ T9788] ? ref_tracker_free+0x37d/0x3e0 [ 217.408630][ T9788] ? __netlink_deliver_tap+0x4dc/0x500 [ 217.408652][ T9788] netlink_unicast+0x5c0/0x690 [ 217.408670][ T9788] netlink_sendmsg+0x58b/0x6b0 [ 217.408689][ T9788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.408790][ T9788] __sock_sendmsg+0x142/0x180 [ 217.408815][ T9788] ____sys_sendmsg+0x31e/0x4e0 [ 217.408902][ T9788] ___sys_sendmsg+0x17b/0x1d0 [ 217.408949][ T9788] __x64_sys_sendmsg+0xd4/0x160 [ 217.409002][ T9788] x64_sys_call+0x191e/0x2ff0 [ 217.409029][ T9788] do_syscall_64+0xd2/0x200 [ 217.409054][ T9788] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 217.409130][ T9788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.409159][ T9788] RIP: 0033:0x7f90d422eb69 [ 217.409222][ T9788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.409243][ T9788] RSP: 002b:00007f90d2897038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.409265][ T9788] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422eb69 [ 217.409277][ T9788] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 217.409366][ T9788] RBP: 00007f90d42b1df1 R08: 0000000000000000 R09: 0000000000000000 [ 217.409373][ T9788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.409381][ T9788] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 217.409392][ T9788] [ 217.733979][ T9788] memory: usage 307200kB, limit 307200kB, failcnt 1114 [ 217.737295][ T9834] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2044'. [ 217.741016][ T9788] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 217.741031][ T9788] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 217.741044][ T9788] Memory cgroup stats for [ 217.754159][ T9834] netlink: 'syz.2.2044': attribute type 10 has an invalid length. [ 217.757836][ T9788] /syz5: [ 217.777477][ T9788] cache 0 [ 217.783339][ T9788] rss 0 [ 217.786089][ T9788] shmem 0 [ 217.789044][ T9788] mapped_file 0 [ 217.792485][ T9788] dirty 0 [ 217.795522][ T9788] writeback 0 [ 217.798816][ T9788] workingset_refault_anon 199 [ 217.803476][ T9788] workingset_refault_file 17 [ 217.808056][ T9788] swap 364544 [ 217.811346][ T9788] swapcached 12288 [ 217.815050][ T9788] pgpgin 33023 [ 217.818410][ T9788] pgpgout 33019 [ 217.821873][ T9788] pgfault 40880 [ 217.825313][ T9788] pgmajfault 127 [ 217.828868][ T9788] inactive_anon 12288 [ 217.832823][ T9788] active_anon 0 [ 217.836260][ T9788] inactive_file 4096 [ 217.840150][ T9788] active_file 0 [ 217.843697][ T9788] unevictable 0 [ 217.847142][ T9788] hierarchical_memory_limit 314572800 [ 217.852547][ T9788] hierarchical_memsw_limit 9223372036854771712 [ 217.858679][ T9788] total_cache 0 [ 217.862182][ T9788] total_rss 0 [ 217.865455][ T9788] total_shmem 0 [ 217.868938][ T9788] total_mapped_file 0 [ 217.872957][ T9788] total_dirty 0 [ 217.876397][ T9788] total_writeback 0 [ 217.880270][ T9788] total_workingset_refault_anon 199 [ 217.885492][ T9788] total_workingset_refault_file 17 [ 217.890900][ T9788] total_swap 364544 [ 217.894776][ T9788] total_swapcached 12288 [ 217.899035][ T9788] total_pgpgin 33023 [ 217.902921][ T9788] total_pgpgout 33019 [ 217.902930][ T9788] total_pgfault 40880 [ 217.902936][ T9788] total_pgmajfault 127 [ 217.902943][ T9788] total_inactive_anon 12288 [ 217.902951][ T9788] total_active_anon 0 [ 217.902957][ T9788] total_inactive_file 4096 [ 217.902964][ T9788] total_active_file 0 [ 217.902971][ T9788] total_unevictable 0 [ 217.902978][ T9788] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2025,pid=9787,uid=0 [ 217.950463][ T9788] Memory cgroup out of memory: Killed process 9787 (syz.5.2025) total-vm:93764kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 218.108014][ T9864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9864 comm=syz.4.2056 [ 218.120582][ T9859] loop1: detected capacity change from 0 to 512 [ 218.127891][ T9864] netlink: 'syz.4.2056': attribute type 1 has an invalid length. [ 218.144322][ T9865] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2055'. [ 218.161280][ T9865] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 218.162889][ T9859] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.299017][ T9886] FAULT_INJECTION: forcing a failure. [ 218.299017][ T9886] name failslab, interval 1, probability 0, space 0, times 0 [ 218.311715][ T9886] CPU: 1 UID: 0 PID: 9886 Comm: syz.1.2063 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 218.311801][ T9886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.311813][ T9886] Call Trace: [ 218.311820][ T9886] [ 218.311828][ T9886] __dump_stack+0x1d/0x30 [ 218.311919][ T9886] dump_stack_lvl+0xe8/0x140 [ 218.311937][ T9886] dump_stack+0x15/0x1b [ 218.311952][ T9886] should_fail_ex+0x265/0x280 [ 218.312003][ T9886] should_failslab+0x8c/0xb0 [ 218.312028][ T9886] kmem_cache_alloc_node_noprof+0x57/0x320 [ 218.312074][ T9886] ? __alloc_skb+0x101/0x320 [ 218.312097][ T9886] ? __account_obj_stock+0x211/0x350 [ 218.312202][ T9886] __alloc_skb+0x101/0x320 [ 218.312257][ T9886] ? radix_tree_lookup+0xfa/0x140 [ 218.312336][ T9886] netlink_ack+0xfd/0x500 [ 218.312471][ T9886] netlink_rcv_skb+0x192/0x220 [ 218.312503][ T9886] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.312532][ T9886] genl_rcv+0x28/0x40 [ 218.312552][ T9886] netlink_unicast+0x5c0/0x690 [ 218.312622][ T9886] netlink_sendmsg+0x58b/0x6b0 [ 218.312651][ T9886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.312748][ T9886] __sock_sendmsg+0x142/0x180 [ 218.312790][ T9886] ____sys_sendmsg+0x31e/0x4e0 [ 218.312821][ T9886] ___sys_sendmsg+0x17b/0x1d0 [ 218.312864][ T9886] __x64_sys_sendmsg+0xd4/0x160 [ 218.312979][ T9886] x64_sys_call+0x191e/0x2ff0 [ 218.313061][ T9886] do_syscall_64+0xd2/0x200 [ 218.313098][ T9886] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 218.313124][ T9886] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 218.313146][ T9886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.313166][ T9886] RIP: 0033:0x7f99b282eb69 [ 218.313225][ T9886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.313242][ T9886] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.313332][ T9886] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 218.313342][ T9886] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 218.313353][ T9886] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 218.313363][ T9886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.313374][ T9886] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 218.313389][ T9886] [ 218.643061][ T9897] loop1: detected capacity change from 0 to 512 [ 218.677633][ T9903] loop5: detected capacity change from 0 to 512 [ 218.684416][ T9897] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 218.717718][ T9897] EXT4-fs (loop1): mount failed [ 218.732330][ T9903] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.758123][ T9903] Invalid ELF header magic: != ELF [ 218.777409][ T9897] loop1: detected capacity change from 0 to 1024 [ 218.791671][ T9897] EXT4-fs: quotafile must be on filesystem root [ 218.818560][ T9897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=235 sclass=netlink_route_socket pid=9897 comm=syz.1.2066 [ 218.858361][ T9912] netlink: 'syz.3.2070': attribute type 10 has an invalid length. [ 218.942877][ T3381] kernel write not supported for file /1166/attr/exec (pid: 3381 comm: kworker/0:3) [ 219.193131][ T9929] loop3: detected capacity change from 0 to 1024 [ 219.356056][ T9933] lo speed is unknown, defaulting to 1000 [ 219.653504][ T9951] batadv_slave_0: entered promiscuous mode [ 219.668583][ T9951] batadv_slave_0: left promiscuous mode [ 219.776124][ T9953] loop1: detected capacity change from 0 to 1024 [ 219.825330][ T9958] FAULT_INJECTION: forcing a failure. [ 219.825330][ T9958] name failslab, interval 1, probability 0, space 0, times 0 [ 219.838216][ T9958] CPU: 0 UID: 0 PID: 9958 Comm: syz.5.2088 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 219.838244][ T9958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.838256][ T9958] Call Trace: [ 219.838261][ T9958] [ 219.838268][ T9958] __dump_stack+0x1d/0x30 [ 219.838316][ T9958] dump_stack_lvl+0xe8/0x140 [ 219.838333][ T9958] dump_stack+0x15/0x1b [ 219.838348][ T9958] should_fail_ex+0x265/0x280 [ 219.838413][ T9958] should_failslab+0x8c/0xb0 [ 219.838439][ T9958] kmem_cache_alloc_noprof+0x50/0x310 [ 219.838468][ T9958] ? sk_prot_alloc+0x3f/0x190 [ 219.838518][ T9958] sk_prot_alloc+0x3f/0x190 [ 219.838547][ T9958] sk_alloc+0x34/0x360 [ 219.838622][ T9958] unix_create1+0xa5/0x430 [ 219.838685][ T9958] ? inode_init_always_gfp+0x4cd/0x500 [ 219.838707][ T9958] unix_create+0x11f/0x150 [ 219.838808][ T9958] __sock_create+0x2e9/0x5b0 [ 219.838836][ T9958] __sys_socketpair+0x170/0x430 [ 219.838861][ T9958] ? ksys_write+0x192/0x1a0 [ 219.838964][ T9958] __x64_sys_socketpair+0x52/0x60 [ 219.838993][ T9958] x64_sys_call+0x2bf2/0x2ff0 [ 219.839042][ T9958] do_syscall_64+0xd2/0x200 [ 219.839067][ T9958] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.839094][ T9958] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.839117][ T9958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.839156][ T9958] RIP: 0033:0x7f90d4230aba [ 219.839172][ T9958] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.839246][ T9958] RSP: 002b:00007f90d2896f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 219.839267][ T9958] RAX: ffffffffffffffda RBX: 00007f90d4455f01 RCX: 00007f90d4230aba [ 219.839323][ T9958] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 219.839333][ T9958] RBP: 00007f90d2897090 R08: 0000000000000000 R09: 0000000000000000 [ 219.839344][ T9958] R10: 00007f90d2896f98 R11: 0000000000000246 R12: 0000000000000005 [ 219.839357][ T9958] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 219.839375][ T9958] [ 220.056099][ T9960] FAULT_INJECTION: forcing a failure. [ 220.056099][ T9960] name failslab, interval 1, probability 0, space 0, times 0 [ 220.065893][ T9895] syz.4.2067 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 220.068832][ T9960] CPU: 1 UID: 0 PID: 9960 Comm: syz.3.2087 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 220.068860][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.068874][ T9960] Call Trace: [ 220.068881][ T9960] [ 220.068889][ T9960] __dump_stack+0x1d/0x30 [ 220.069055][ T9960] dump_stack_lvl+0xe8/0x140 [ 220.069075][ T9960] dump_stack+0x15/0x1b [ 220.069093][ T9960] should_fail_ex+0x265/0x280 [ 220.069202][ T9960] should_failslab+0x8c/0xb0 [ 220.069227][ T9960] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 220.069259][ T9960] ? sidtab_sid2str_get+0xa0/0x130 [ 220.069360][ T9960] ? skb_put+0xa9/0xf0 [ 220.069406][ T9960] kmemdup_noprof+0x2b/0x70 [ 220.069432][ T9960] sidtab_sid2str_get+0xa0/0x130 [ 220.069497][ T9960] security_sid_to_context_core+0x1eb/0x2e0 [ 220.069530][ T9960] security_sid_to_context+0x27/0x40 [ 220.069571][ T9960] avc_audit_post_callback+0x9d/0x520 [ 220.069621][ T9960] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 220.069646][ T9960] common_lsm_audit+0x1bb/0x230 [ 220.069676][ T9960] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 220.069774][ T9960] slow_avc_audit+0x104/0x140 [ 220.069799][ T9960] avc_has_perm+0x13a/0x180 [ 220.069822][ T9960] ? __pfx_perf_ioctl+0x10/0x10 [ 220.069958][ T9960] selinux_perf_event_write+0x97/0xb0 [ 220.070057][ T9960] security_perf_event_write+0x36/0x70 [ 220.070091][ T9960] perf_ioctl+0x4f/0x12e0 [ 220.070121][ T9960] ? ioctl_has_perm+0x289/0x2a0 [ 220.070141][ T9960] ? do_vfs_ioctl+0x866/0xe10 [ 220.070177][ T9960] ? selinux_file_ioctl+0x308/0x3a0 [ 220.070215][ T9960] ? __fget_files+0x184/0x1c0 [ 220.070255][ T9960] ? __pfx_perf_ioctl+0x10/0x10 [ 220.070296][ T9960] __se_sys_ioctl+0xcb/0x140 [ 220.070330][ T9960] __x64_sys_ioctl+0x43/0x50 [ 220.070421][ T9960] x64_sys_call+0x1816/0x2ff0 [ 220.070483][ T9960] do_syscall_64+0xd2/0x200 [ 220.070506][ T9960] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.070622][ T9960] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.070645][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.070668][ T9960] RIP: 0033:0x7f1c2f8ceb69 [ 220.070755][ T9960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.070775][ T9960] RSP: 002b:00007f1c2df37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.070859][ T9960] RAX: ffffffffffffffda RBX: 00007f1c2faf5fa0 RCX: 00007f1c2f8ceb69 [ 220.070873][ T9960] RDX: 0000200000000180 RSI: 0000000040082406 RDI: 0000000000000003 [ 220.070886][ T9960] RBP: 00007f1c2df37090 R08: 0000000000000000 R09: 0000000000000000 [ 220.070900][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.070975][ T9960] R13: 0000000000000000 R14: 00007f1c2faf5fa0 R15: 00007ffd58281a58 [ 220.070994][ T9960] [ 220.121040][ T9953] EXT4-fs mount: 15 callbacks suppressed [ 220.121056][ T9953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.124531][ T9895] CPU: 0 UID: 0 PID: 9895 Comm: syz.4.2067 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 220.124617][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 220.124630][ T9895] Call Trace: [ 220.124638][ T9895] [ 220.124646][ T9895] __dump_stack+0x1d/0x30 [ 220.124669][ T9895] dump_stack_lvl+0xe8/0x140 [ 220.124707][ T9895] dump_stack+0x15/0x1b [ 220.124724][ T9895] dump_header+0x81/0x220 [ 220.124764][ T9895] oom_kill_process+0x342/0x400 [ 220.124798][ T9895] out_of_memory+0x979/0xb80 [ 220.124976][ T9895] try_charge_memcg+0x5e6/0x9e0 [ 220.125005][ T9895] obj_cgroup_charge_pages+0xa6/0x150 [ 220.125038][ T9895] __memcg_kmem_charge_page+0x9f/0x170 [ 220.125071][ T9895] __alloc_frozen_pages_noprof+0x188/0x360 [ 220.125135][ T9895] alloc_pages_mpol+0xb3/0x250 [ 220.125168][ T9895] alloc_pages_noprof+0x90/0x130 [ 220.125200][ T9895] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 220.125274][ T9895] __kvmalloc_node_noprof+0x30f/0x4e0 [ 220.125305][ T9895] ? ip_set_alloc+0x1f/0x30 [ 220.125333][ T9895] ? ip_set_alloc+0x1f/0x30 [ 220.125365][ T9895] ? hash_netiface_create+0x21b/0x740 [ 220.125422][ T9895] ? __kmalloc_cache_noprof+0x189/0x320 [ 220.125460][ T9895] ip_set_alloc+0x1f/0x30 [ 220.125488][ T9895] hash_netiface_create+0x282/0x740 [ 220.125518][ T9895] ? __pfx_hash_netiface_create+0x10/0x10 [ 220.125598][ T9895] ip_set_create+0x3cc/0x960 [ 220.125663][ T9895] nfnetlink_rcv_msg+0x4c6/0x590 [ 220.125706][ T9895] netlink_rcv_skb+0x120/0x220 [ 220.125802][ T9895] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 220.125834][ T9895] nfnetlink_rcv+0x16b/0x1690 [ 220.125871][ T9895] ? nlmon_xmit+0x4f/0x60 [ 220.125926][ T9895] ? consume_skb+0x49/0x150 [ 220.125956][ T9895] ? nlmon_xmit+0x4f/0x60 [ 220.125979][ T9895] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 220.126053][ T9895] ? __dev_queue_xmit+0x1200/0x2000 [ 220.126086][ T9895] ? __dev_queue_xmit+0x182/0x2000 [ 220.126122][ T9895] ? ref_tracker_free+0x37d/0x3e0 [ 220.126204][ T9895] ? __netlink_deliver_tap+0x4dc/0x500 [ 220.126273][ T9895] netlink_unicast+0x5c0/0x690 [ 220.126304][ T9895] netlink_sendmsg+0x58b/0x6b0 [ 220.126346][ T9895] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.126442][ T9895] __sock_sendmsg+0x142/0x180 [ 220.126467][ T9895] ____sys_sendmsg+0x31e/0x4e0 [ 220.126503][ T9895] ___sys_sendmsg+0x17b/0x1d0 [ 220.126547][ T9895] __x64_sys_sendmsg+0xd4/0x160 [ 220.126619][ T9895] x64_sys_call+0x191e/0x2ff0 [ 220.126747][ T9895] do_syscall_64+0xd2/0x200 [ 220.126771][ T9895] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 220.126796][ T9895] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 220.126819][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.126895][ T9895] RIP: 0033:0x7fa6aef6eb69 [ 220.126912][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.126990][ T9895] RSP: 002b:00007fa6ad5d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.127010][ T9895] RAX: ffffffffffffffda RBX: 00007fa6af195fa0 RCX: 00007fa6aef6eb69 [ 220.127022][ T9895] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000008 [ 220.127035][ T9895] RBP: 00007fa6aeff1df1 R08: 0000000000000000 R09: 0000000000000000 [ 220.127048][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.127110][ T9895] R13: 0000000000000000 R14: 00007fa6af195fa0 R15: 00007fff036a9c48 [ 220.127128][ T9895] [ 220.127135][ T9895] memory: usage 307100kB, limit 307200kB, failcnt 6283 [ 220.287443][ T9953] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.305670][ T9895] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 220.305690][ T9895] kmem: usage 307020kB, limit 9007199254740988kB, failcnt 0 [ 220.305702][ T9895] Memory cgroup stats for /syz4: [ 220.305995][ T9895] cache 4096 [ 220.745468][ T9895] rss 32768 [ 220.748569][ T9895] shmem 0 [ 220.751528][ T9895] mapped_file 4096 [ 220.755236][ T9895] dirty 0 [ 220.758151][ T9895] writeback 0 [ 220.761480][ T9895] workingset_refault_anon 920 [ 220.766209][ T9895] workingset_refault_file 1914 [ 220.770971][ T9895] swap 335872 [ 220.774236][ T9895] swapcached 40960 [ 220.777927][ T9895] pgpgin 205885 [ 220.781380][ T9895] pgpgout 205873 [ 220.785025][ T9895] pgfault 241040 [ 220.788541][ T9895] pgmajfault 655 [ 220.792080][ T9895] inactive_anon 0 [ 220.795729][ T9895] active_anon 45056 [ 220.799540][ T9895] inactive_file 0 [ 220.803148][ T9895] active_file 4096 [ 220.806849][ T9895] unevictable 0 [ 220.810447][ T9895] hierarchical_memory_limit 314572800 [ 220.815790][ T9895] hierarchical_memsw_limit 9223372036854771712 [ 220.821932][ T9895] total_cache 4096 [ 220.825711][ T9895] total_rss 32768 [ 220.829343][ T9895] total_shmem 0 [ 220.832792][ T9895] total_mapped_file 4096 [ 220.837091][ T9895] total_dirty 0 [ 220.840587][ T9895] total_writeback 0 [ 220.844428][ T9895] total_workingset_refault_anon 920 [ 220.849712][ T9895] total_workingset_refault_file 1914 [ 220.854986][ T9895] total_swap 335872 [ 220.858761][ T9895] total_swapcached 40960 [ 220.863041][ T9895] total_pgpgin 205885 [ 220.867037][ T9895] total_pgpgout 205873 [ 220.871114][ T9895] total_pgfault 241040 [ 220.875188][ T9895] total_pgmajfault 655 [ 220.879297][ T9895] total_inactive_anon 0 [ 220.883441][ T9895] total_active_anon 45056 [ 220.887760][ T9895] total_inactive_file 0 [ 220.891928][ T9895] total_active_file 4096 [ 220.896190][ T9895] total_unevictable 0 [ 220.900249][ T9895] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2067,pid=9894,uid=0 [ 220.914866][ T9895] Memory cgroup out of memory: Killed process 9895 (syz.4.2067) total-vm:93764kB, anon-rss:1060kB, file-rss:22440kB, shmem-rss:0kB, UID:60928 pgtables:120kB oom_score_adj:1000 [ 220.998881][ T3404] vhci_hcd: vhci_device speed not set [ 221.090544][ T9973] loop4: detected capacity change from 0 to 164 [ 221.157744][ T9990] __nla_validate_parse: 2 callbacks suppressed [ 221.157775][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2099'. [ 221.182840][ T9987] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 221.200303][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 221.200318][ T29] audit: type=1400 audit(1754161050.278:10286): avc: denied { mount } for pid=9989 comm="syz.4.2101" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 221.271028][ T29] audit: type=1400 audit(1754161050.278:10287): avc: denied { mounton } for pid=9989 comm="syz.4.2101" path="/395/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 221.293291][ T29] audit: type=1400 audit(1754161050.278:10288): avc: denied { mount } for pid=9989 comm="syz.4.2101" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.315355][ T29] audit: type=1400 audit(1754161050.278:10289): avc: denied { unmount } for pid=9989 comm="syz.4.2101" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 221.335459][ T29] audit: type=1400 audit(1754161050.308:10290): avc: denied { create } for pid=9988 comm="syz.3.2099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 221.355803][ T29] audit: type=1326 audit(1754161050.308:10291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 221.379337][ T29] audit: type=1326 audit(1754161050.308:10292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 221.403078][ T29] audit: type=1326 audit(1754161050.308:10293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9988 comm="syz.3.2099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c2f8ceb69 code=0x7ffc0000 [ 221.426707][ T29] audit: type=1400 audit(1754161050.308:10294): avc: denied { write } for pid=9986 comm="syz.5.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.447157][ T29] audit: type=1400 audit(1754161050.308:10295): avc: denied { nlmsg_write } for pid=9986 comm="syz.5.2100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 221.516533][T10010] batadv_slave_0: entered promiscuous mode [ 221.528918][T10010] batadv_slave_0: left promiscuous mode [ 221.618141][T10022] loop5: detected capacity change from 0 to 1024 [ 221.644780][T10022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.678410][T10031] tipc: Enabled bearer , priority 0 [ 221.679086][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.700716][T10030] tipc: Disabling bearer [ 221.712937][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2116'. [ 221.911433][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.948927][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.995847][T10061] batadv_slave_0: entered promiscuous mode [ 222.002940][T10061] batadv_slave_0: left promiscuous mode [ 222.024429][T10065] loop3: detected capacity change from 0 to 164 [ 222.055673][T10067] loop3: detected capacity change from 0 to 512 [ 222.092962][T10067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.116642][T10067] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.143538][T10067] Invalid ELF header magic: != ELF [ 222.176861][T10077] FAULT_INJECTION: forcing a failure. [ 222.176861][T10077] name failslab, interval 1, probability 0, space 0, times 0 [ 222.189572][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.4.2132 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 222.189604][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.189617][T10077] Call Trace: [ 222.189626][T10077] [ 222.189634][T10077] __dump_stack+0x1d/0x30 [ 222.189656][T10077] dump_stack_lvl+0xe8/0x140 [ 222.189688][T10077] dump_stack+0x15/0x1b [ 222.189706][T10077] should_fail_ex+0x265/0x280 [ 222.189819][T10077] should_failslab+0x8c/0xb0 [ 222.189850][T10077] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 222.189931][T10077] ? sock_alloc_inode+0x34/0xa0 [ 222.189955][T10077] ? __pfx_sock_alloc_inode+0x10/0x10 [ 222.190061][T10077] sock_alloc_inode+0x34/0xa0 [ 222.190085][T10077] alloc_inode+0x3d/0x170 [ 222.190171][T10077] do_accept+0xa0/0x3a0 [ 222.190198][T10077] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 222.190233][T10077] __sys_accept4+0xbf/0x140 [ 222.190273][T10077] __x64_sys_accept4+0x51/0x60 [ 222.190301][T10077] x64_sys_call+0x2ed3/0x2ff0 [ 222.190359][T10077] do_syscall_64+0xd2/0x200 [ 222.190380][T10077] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 222.190457][T10077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 222.190481][T10077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.190505][T10077] RIP: 0033:0x7fa6aef6eb69 [ 222.190522][T10077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.190609][T10077] RSP: 002b:00007fa6ad5d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 222.190626][T10077] RAX: ffffffffffffffda RBX: 00007fa6af195fa0 RCX: 00007fa6aef6eb69 [ 222.190640][T10077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 222.190653][T10077] RBP: 00007fa6ad5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.190667][T10077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.190680][T10077] R13: 0000000000000000 R14: 00007fa6af195fa0 R15: 00007fff036a9c48 [ 222.190717][T10077] [ 222.554030][T10091] loop4: detected capacity change from 0 to 164 [ 222.589367][T10093] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 222.784018][T10101] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2143'. [ 222.938123][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.086210][T10123] lo speed is unknown, defaulting to 1000 [ 223.116472][T10128] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 223.416680][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2159'. [ 223.502610][T10151] loop4: detected capacity change from 0 to 512 [ 223.521940][T10151] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 223.550656][T10151] EXT4-fs (loop4): mount failed [ 223.631112][ T3304] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 223.642043][ T3304] CPU: 0 UID: 0 PID: 3304 Comm: syz-executor Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 223.642136][ T3304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.642149][ T3304] Call Trace: [ 223.642156][ T3304] [ 223.642163][ T3304] __dump_stack+0x1d/0x30 [ 223.642184][ T3304] dump_stack_lvl+0xe8/0x140 [ 223.642205][ T3304] dump_stack+0x15/0x1b [ 223.642291][ T3304] dump_header+0x81/0x220 [ 223.642323][ T3304] oom_kill_process+0x342/0x400 [ 223.642414][ T3304] out_of_memory+0x979/0xb80 [ 223.642513][ T3304] try_charge_memcg+0x5e6/0x9e0 [ 223.642545][ T3304] charge_memcg+0x51/0xc0 [ 223.642564][ T3304] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 223.642586][ T3304] __read_swap_cache_async+0x1df/0x350 [ 223.642659][ T3304] swap_cluster_readahead+0x277/0x3e0 [ 223.642698][ T3304] swapin_readahead+0xde/0x6f0 [ 223.642730][ T3304] ? __filemap_get_folio+0x4f7/0x6b0 [ 223.642765][ T3304] ? ktime_get+0x1eb/0x210 [ 223.642871][ T3304] ? swap_cache_get_folio+0x77/0x200 [ 223.642905][ T3304] do_swap_page+0x301/0x2430 [ 223.642930][ T3304] ? finish_task_switch+0xad/0x2b0 [ 223.642952][ T3304] ? __pfx_default_wake_function+0x10/0x10 [ 223.643045][ T3304] handle_mm_fault+0x9a5/0x2c20 [ 223.643078][ T3304] do_user_addr_fault+0x636/0x1090 [ 223.643111][ T3304] ? fpregs_restore_userregs+0xe2/0x1d0 [ 223.643212][ T3304] ? switch_fpu_return+0xe/0x20 [ 223.643291][ T3304] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 223.643317][ T3304] exc_page_fault+0x62/0xa0 [ 223.643357][ T3304] asm_exc_page_fault+0x26/0x30 [ 223.643376][ T3304] RIP: 0033:0x7faa7d7e13e5 [ 223.643391][ T3304] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 7e 71 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 223.643408][ T3304] RSP: 002b:00007ffd29597618 EFLAGS: 00010246 [ 223.643482][ T3304] RAX: 0000000000000000 RBX: 0000000000000487 RCX: 00007faa7d7e13e3 [ 223.643493][ T3304] RDX: 00007ffd29597630 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.643504][ T3304] RBP: 00007ffd2959769c R08: 00000000225dcdd2 R09: 0000000000000000 [ 223.643515][ T3304] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 223.643527][ T3304] R13: 00000000000927c0 R14: 0000000000036736 R15: 00007ffd295976f0 [ 223.643546][ T3304] [ 223.643553][ T3304] memory: usage 307200kB, limit 307200kB, failcnt 3320 [ 223.650784][T10162] tipc: Resetting bearer [ 223.655802][ T3304] memory+swap: usage 307624kB, limit 9007199254740988kB, failcnt 0 [ 223.655816][ T3304] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 223.655870][ T3304] Memory cgroup stats for /syz2: [ 223.896675][T10162] team0: Port device dummy0 removed [ 223.896684][ T3304] cache 0 [ 223.896694][ T3304] rss 0 [ 223.896701][ T3304] shmem 0 [ 223.915504][ T3304] mapped_file 0 [ 223.919046][ T3304] dirty 0 [ 223.921973][ T3304] writeback 0 [ 223.925338][ T3304] workingset_refault_anon 645 [ 223.930065][ T3304] workingset_refault_file 1680 [ 223.934815][ T3304] swap 434176 [ 223.938072][ T3304] swapcached 0 [ 223.941449][ T3304] pgpgin 158159 [ 223.944888][ T3304] pgpgout 158159 [ 223.948402][ T3304] pgfault 199398 [ 223.951945][ T3304] pgmajfault 400 [ 223.955497][ T3304] inactive_anon 0 [ 223.959127][ T3304] active_anon 0 [ 223.962567][ T3304] inactive_file 0 [ 223.966169][ T3304] active_file 0 [ 223.969648][ T3304] unevictable 0 [ 223.973143][ T3304] hierarchical_memory_limit 314572800 [ 223.978485][ T3304] hierarchical_memsw_limit 9223372036854771712 [ 223.984710][ T3304] total_cache 0 [ 223.988211][ T3304] total_rss 0 [ 223.991496][ T3304] total_shmem 0 [ 223.995000][ T3304] total_mapped_file 0 [ 223.998995][ T3304] total_dirty 0 [ 224.002427][ T3304] total_writeback 0 [ 224.006285][ T3304] total_workingset_refault_anon 645 [ 224.011477][ T3304] total_workingset_refault_file 1680 [ 224.016782][ T3304] total_swap 434176 [ 224.020610][ T3304] total_swapcached 0 [ 224.024507][ T3304] total_pgpgin 158159 [ 224.028461][ T3304] total_pgpgout 158159 [ 224.032543][ T3304] total_pgfault 199398 [ 224.036582][ T3304] total_pgmajfault 400 [ 224.040696][ T3304] total_inactive_anon 0 [ 224.044822][ T3304] total_active_anon 0 [ 224.048815][ T3304] total_inactive_file 0 [ 224.052961][ T3304] total_active_file 0 [ 224.056933][ T3304] total_unevictable 0 [ 224.060992][ T3304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2144,pid=10102,uid=0 [ 224.075695][ T3304] Memory cgroup out of memory: Killed process 10102 (syz.2.2144) total-vm:95812kB, anon-rss:944kB, file-rss:22404kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 224.093038][T10162] bond2: (slave bridge2): Releasing backup interface [ 224.106365][T10162] bond3: (slave gretap1): Releasing active interface [ 224.121210][T10162] bond5: (slave bridge3): Releasing active interface [ 224.141685][T10165] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 224.641977][T10143] syz.3.2158 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 224.656148][T10143] CPU: 1 UID: 0 PID: 10143 Comm: syz.3.2158 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 224.656182][T10143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.656196][T10143] Call Trace: [ 224.656203][T10143] [ 224.656212][T10143] __dump_stack+0x1d/0x30 [ 224.656236][T10143] dump_stack_lvl+0xe8/0x140 [ 224.656322][T10143] dump_stack+0x15/0x1b [ 224.656338][T10143] dump_header+0x81/0x220 [ 224.656371][T10143] oom_kill_process+0x342/0x400 [ 224.656473][T10143] out_of_memory+0x979/0xb80 [ 224.656510][T10143] try_charge_memcg+0x5e6/0x9e0 [ 224.656542][T10143] obj_cgroup_charge_pages+0xa6/0x150 [ 224.656578][T10143] __memcg_kmem_charge_page+0x9f/0x170 [ 224.656628][T10143] __alloc_frozen_pages_noprof+0x188/0x360 [ 224.656670][T10143] alloc_pages_mpol+0xb3/0x250 [ 224.656734][T10143] alloc_pages_noprof+0x90/0x130 [ 224.656771][T10143] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 224.656877][T10143] __kvmalloc_node_noprof+0x30f/0x4e0 [ 224.656910][T10143] ? ip_set_alloc+0x1f/0x30 [ 224.656940][T10143] ? ip_set_alloc+0x1f/0x30 [ 224.657025][T10143] ? __kmalloc_cache_noprof+0x189/0x320 [ 224.657088][T10143] ip_set_alloc+0x1f/0x30 [ 224.657138][T10143] hash_netiface_create+0x282/0x740 [ 224.657191][T10143] ? __pfx_hash_netiface_create+0x10/0x10 [ 224.657241][T10143] ip_set_create+0x3cc/0x960 [ 224.657315][T10143] nfnetlink_rcv_msg+0x4c6/0x590 [ 224.657482][T10143] netlink_rcv_skb+0x120/0x220 [ 224.657515][T10143] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 224.657549][T10143] nfnetlink_rcv+0x16b/0x1690 [ 224.657651][T10143] ? nlmon_xmit+0x4f/0x60 [ 224.657676][T10143] ? consume_skb+0x49/0x150 [ 224.657710][T10143] ? nlmon_xmit+0x4f/0x60 [ 224.657773][T10143] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 224.657812][T10143] ? __dev_queue_xmit+0x1200/0x2000 [ 224.657846][T10143] ? __dev_queue_xmit+0x182/0x2000 [ 224.657936][T10143] ? ref_tracker_free+0x37d/0x3e0 [ 224.657979][T10143] ? __netlink_deliver_tap+0x4dc/0x500 [ 224.658051][T10143] netlink_unicast+0x5c0/0x690 [ 224.658166][T10143] netlink_sendmsg+0x58b/0x6b0 [ 224.658282][T10143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.658319][T10143] __sock_sendmsg+0x142/0x180 [ 224.658423][T10143] ____sys_sendmsg+0x31e/0x4e0 [ 224.658457][T10143] ___sys_sendmsg+0x17b/0x1d0 [ 224.658498][T10143] __x64_sys_sendmsg+0xd4/0x160 [ 224.658559][T10143] x64_sys_call+0x191e/0x2ff0 [ 224.658584][T10143] do_syscall_64+0xd2/0x200 [ 224.658608][T10143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 224.658690][T10143] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 224.658715][T10143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.658739][T10143] RIP: 0033:0x7f1c2f8ceb69 [ 224.658757][T10143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.658779][T10143] RSP: 002b:00007f1c2df37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.658798][T10143] RAX: ffffffffffffffda RBX: 00007f1c2faf5fa0 RCX: 00007f1c2f8ceb69 [ 224.658854][T10143] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 224.658869][T10143] RBP: 00007f1c2f951df1 R08: 0000000000000000 R09: 0000000000000000 [ 224.658917][T10143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.658930][T10143] R13: 0000000000000000 R14: 00007f1c2faf5fa0 R15: 00007ffd58281a58 [ 224.659012][T10143] [ 224.985508][T10143] memory: usage 307200kB, limit 307200kB, failcnt 7406 [ 224.992567][T10143] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 225.000476][T10143] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 225.007753][T10143] Memory cgroup stats for /syz3: [ 225.039401][T10143] cache 0 [ 225.047282][T10143] rss 0 [ 225.050056][T10143] shmem 0 [ 225.052989][T10143] mapped_file 0 [ 225.056435][T10143] dirty 0 [ 225.059389][T10143] writeback 0 [ 225.062665][T10143] workingset_refault_anon 1121 [ 225.067419][T10143] workingset_refault_file 2469 [ 225.072323][T10143] swap 217088 [ 225.075597][T10143] swapcached 0 [ 225.079015][T10143] pgpgin 198845 [ 225.082468][T10143] pgpgout 198845 [ 225.086045][T10143] pgfault 235698 [ 225.089118][T10187] batadv_slave_0: entered promiscuous mode [ 225.089614][T10143] pgmajfault 771 [ 225.099001][T10143] inactive_anon 0 [ 225.102628][T10143] active_anon 0 [ 225.106070][T10143] inactive_file 0 [ 225.109798][T10143] active_file 0 [ 225.113267][T10143] unevictable 0 [ 225.116715][T10143] hierarchical_memory_limit 314572800 [ 225.122206][T10143] hierarchical_memsw_limit 9223372036854771712 [ 225.128385][T10143] total_cache 0 [ 225.131920][T10143] total_rss 0 [ 225.135208][T10143] total_shmem 0 [ 225.138655][T10143] total_mapped_file 0 [ 225.142671][T10143] total_dirty 0 [ 225.146190][T10143] total_writeback 0 [ 225.150045][T10143] total_workingset_refault_anon 1121 [ 225.155399][T10143] total_workingset_refault_file 2469 [ 225.160693][T10143] total_swap 217088 [ 225.164529][T10143] total_swapcached 0 [ 225.168410][T10143] total_pgpgin 198845 [ 225.172397][T10143] total_pgpgout 198845 [ 225.176481][T10143] total_pgfault 235698 [ 225.180547][T10143] total_pgmajfault 771 [ 225.181754][T10193] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 225.184602][T10143] total_inactive_anon 0 [ 225.184611][T10143] total_active_anon 0 [ 225.184619][T10143] total_inactive_file 0 [ 225.204862][T10143] total_active_file 0 [ 225.208847][T10143] total_unevictable 0 [ 225.212813][T10143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2158,pid=10142,uid=0 [ 225.227505][T10143] Memory cgroup out of memory: Killed process 10142 (syz.3.2158) total-vm:93764kB, anon-rss:944kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 225.244824][T10187] batadv_slave_0: left promiscuous mode [ 225.471215][T10209] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2184'. [ 225.511104][T10209] netlink: 'syz.4.2184': attribute type 10 has an invalid length. [ 225.520629][T10209] team0: Port device dummy0 added [ 225.763845][T10230] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 225.805926][T10233] batadv_slave_0: entered promiscuous mode [ 225.834029][T10237] FAULT_INJECTION: forcing a failure. [ 225.834029][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.847152][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.3.2195 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 225.847256][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.847270][T10237] Call Trace: [ 225.847277][T10237] [ 225.847286][T10237] __dump_stack+0x1d/0x30 [ 225.847306][T10237] dump_stack_lvl+0xe8/0x140 [ 225.847325][T10237] dump_stack+0x15/0x1b [ 225.847342][T10237] should_fail_ex+0x265/0x280 [ 225.847415][T10237] should_fail+0xb/0x20 [ 225.847464][T10237] should_fail_usercopy+0x1a/0x20 [ 225.847481][T10237] _copy_from_user+0x1c/0xb0 [ 225.847505][T10237] memdup_user+0x5e/0xd0 [ 225.847551][T10237] strndup_user+0x68/0xb0 [ 225.847576][T10237] __se_sys_mount+0x4d/0x2e0 [ 225.847596][T10237] ? fput+0x8f/0xc0 [ 225.847704][T10237] ? ksys_write+0x192/0x1a0 [ 225.847728][T10237] __x64_sys_mount+0x67/0x80 [ 225.847751][T10237] x64_sys_call+0x2b4d/0x2ff0 [ 225.847787][T10237] do_syscall_64+0xd2/0x200 [ 225.847813][T10237] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 225.847843][T10237] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 225.847892][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.847915][T10237] RIP: 0033:0x7f1c2f8ceb69 [ 225.847932][T10237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.847954][T10237] RSP: 002b:00007f1c2df37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 225.847975][T10237] RAX: ffffffffffffffda RBX: 00007f1c2faf5fa0 RCX: 00007f1c2f8ceb69 [ 225.847989][T10237] RDX: 0000200000000080 RSI: 0000200000000300 RDI: 0000000000000000 [ 225.848000][T10237] RBP: 00007f1c2df37090 R08: 0000200000000000 R09: 0000000000000000 [ 225.848022][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.848033][T10237] R13: 0000000000000000 R14: 00007f1c2faf5fa0 R15: 00007ffd58281a58 [ 225.848053][T10237] [ 226.083957][T10233] batadv_slave_0: left promiscuous mode [ 226.103834][T10243] gretap0: entered promiscuous mode [ 226.109147][T10243] macsec1: entered promiscuous mode [ 226.114485][T10243] macsec1: entered allmulticast mode [ 226.119852][T10243] gretap0: entered allmulticast mode [ 226.127839][T10243] gretap0: left allmulticast mode [ 226.133104][T10243] gretap0: left promiscuous mode [ 226.158365][T10244] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 226.164981][T10244] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 226.172402][T10244] vhci_hcd vhci_hcd.0: Device attached [ 226.203150][T10248] loop1: detected capacity change from 0 to 512 [ 226.209905][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 226.209918][ T29] audit: type=1400 audit(1754161055.288:10670): avc: denied { mounton } for pid=10247 comm="syz.1.2199" path="/467/bus" dev="tmpfs" ino=2575 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.262088][T10248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.278190][T10245] vhci_hcd: connection closed [ 226.279144][ T8255] vhci_hcd: stop threads [ 226.288045][ T8255] vhci_hcd: release socket [ 226.292603][ T8255] vhci_hcd: disconnect device [ 226.309055][T10248] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.319567][ T29] audit: type=1400 audit(1754161055.388:10671): avc: denied { mount } for pid=10247 comm="syz.1.2199" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 226.348883][ T3384] vhci_hcd: vhci_device speed not set [ 226.382061][T10248] Invalid ELF header magic: != ELF [ 226.409046][ T29] audit: type=1400 audit(1754161055.458:10672): avc: denied { module_load } for pid=10247 comm="syz.1.2199" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 226.508837][ T29] audit: type=1400 audit(1754161055.518:10673): avc: denied { create } for pid=10257 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.528616][ T29] audit: type=1400 audit(1754161055.518:10674): avc: denied { write } for pid=10257 comm="syz.2.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.548141][ T29] audit: type=1400 audit(1754161055.538:10675): avc: denied { setopt } for pid=10259 comm="syz.2.2203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 226.668005][ T29] audit: type=1400 audit(1754161055.648:10676): avc: denied { execmem } for pid=10247 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 226.687498][ T29] audit: type=1400 audit(1754161055.698:10677): avc: denied { name_bind } for pid=10268 comm="syz.2.2207" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 226.743818][T10273] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2209'. [ 226.753338][T10273] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 226.758955][ T29] audit: type=1400 audit(1754161055.758:10678): avc: denied { mounton } for pid=10270 comm="syz.2.2208" path="/472/file0" dev="tmpfs" ino=2578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 226.770437][ T8255] tipc: Resetting bearer [ 226.784210][ T29] audit: type=1400 audit(1754161055.758:10679): avc: denied { mount } for pid=10270 comm="syz.2.2208" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 227.119520][T10292] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 227.126194][T10292] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 227.133872][T10292] vhci_hcd vhci_hcd.0: Device attached [ 227.145276][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.155053][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2216'. [ 227.164983][T10293] vhci_hcd: connection closed [ 227.168828][ T8246] vhci_hcd: stop threads [ 227.177857][ T8246] vhci_hcd: release socket [ 227.182373][ T8246] vhci_hcd: disconnect device [ 227.183773][T10296] FAULT_INJECTION: forcing a failure. [ 227.183773][T10296] name failslab, interval 1, probability 0, space 0, times 0 [ 227.199681][T10296] CPU: 1 UID: 0 PID: 10296 Comm: syz.1.2217 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 227.199757][T10296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.199768][T10296] Call Trace: [ 227.199775][T10296] [ 227.199782][T10296] __dump_stack+0x1d/0x30 [ 227.199815][T10296] dump_stack_lvl+0xe8/0x140 [ 227.199832][T10296] dump_stack+0x15/0x1b [ 227.199847][T10296] should_fail_ex+0x265/0x280 [ 227.199876][T10296] should_failslab+0x8c/0xb0 [ 227.199958][T10296] kmem_cache_alloc_node_noprof+0x57/0x320 [ 227.199985][T10296] ? __alloc_skb+0x101/0x320 [ 227.200011][T10296] __alloc_skb+0x101/0x320 [ 227.200036][T10296] hci_mgmt_cmd+0xfc/0x8a0 [ 227.200069][T10296] ? __SCT__tp_func_scsi_dispatch_cmd_timeout+0x7/0x8 [ 227.200101][T10296] hci_sock_sendmsg+0x518/0x910 [ 227.200124][T10296] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 227.200152][T10296] __sock_sendmsg+0x142/0x180 [ 227.200173][T10296] sock_write_iter+0x165/0x1b0 [ 227.200196][T10296] aio_write+0x2e5/0x410 [ 227.200226][T10296] io_submit_one+0xacd/0x11d0 [ 227.200255][T10296] __se_sys_io_submit+0xfb/0x280 [ 227.200315][T10296] __x64_sys_io_submit+0x43/0x50 [ 227.200336][T10296] x64_sys_call+0x2d5d/0x2ff0 [ 227.200461][T10296] do_syscall_64+0xd2/0x200 [ 227.200512][T10296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 227.200578][T10296] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 227.200597][T10296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.200617][T10296] RIP: 0033:0x7f99b282eb69 [ 227.200630][T10296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.200722][T10296] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 227.200739][T10296] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 227.200758][T10296] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f99b0e53000 [ 227.200769][T10296] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 227.200780][T10296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.200791][T10296] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 227.200807][T10296] [ 227.513263][T10302] loop1: detected capacity change from 0 to 2048 [ 227.623269][T10302] loop1: unable to read partition table [ 227.635561][T10302] loop1: partition table beyond EOD, truncated [ 227.641779][T10302] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 227.693404][T10302] net_ratelimit: 86 callbacks suppressed [ 227.693420][T10302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 227.813372][T10308] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2221'. [ 227.835169][T10308] netlink: 'syz.2.2221': attribute type 10 has an invalid length. [ 227.853392][T10310] loop1: detected capacity change from 0 to 1024 [ 227.920203][T10310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.982613][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.093970][T10326] loop3: detected capacity change from 0 to 164 [ 228.143606][T10328] SELinux: security_context_str_to_sid () failed with errno=-22 [ 228.346305][T10344] loop5: detected capacity change from 0 to 1024 [ 228.360735][T10344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.422539][ T7817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.474538][T10349] loop5: detected capacity change from 0 to 8192 [ 228.560029][T10350] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.732775][T10353] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2237'. [ 228.958342][T10365] batadv_slave_0: entered promiscuous mode [ 228.972969][T10365] batadv_slave_0: left promiscuous mode [ 229.145165][T10374] loop1: detected capacity change from 0 to 1024 [ 229.196864][T10374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.279918][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.341146][T10383] batadv_slave_0: entered promiscuous mode [ 229.347786][T10383] batadv_slave_0: left promiscuous mode [ 229.450664][T10392] loop5: detected capacity change from 0 to 164 [ 229.624563][T10410] batadv_slave_0: entered promiscuous mode [ 229.632169][T10410] batadv_slave_0: left promiscuous mode [ 229.687968][T10416] batadv_slave_0: entered promiscuous mode [ 229.696633][T10416] batadv_slave_0: left promiscuous mode [ 229.758660][T10418] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.771794][T10399] lo speed is unknown, defaulting to 1000 [ 229.803070][T10418] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.898406][T10418] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.978041][T10418] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.034860][T10433] loop4: detected capacity change from 0 to 164 [ 230.081726][T10438] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.111190][T10439] batadv_slave_0: entered promiscuous mode [ 230.136785][T10439] batadv_slave_0: left promiscuous mode [ 230.176385][T10438] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.203732][T10443] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 230.217593][T10443] SELinux: failed to load policy [ 230.220375][ T8246] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.237314][ T8246] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.255816][ T8246] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.281573][T10438] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.301090][ T8246] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.346063][T10438] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.407638][T10450] loop1: detected capacity change from 0 to 1024 [ 230.421078][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.438403][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.447016][T10450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.459306][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.467533][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.509537][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.568410][T10460] loop4: detected capacity change from 0 to 512 [ 230.600967][T10460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.613899][T10466] FAULT_INJECTION: forcing a failure. [ 230.613899][T10466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.627442][T10466] CPU: 0 UID: 0 PID: 10466 Comm: syz.5.2280 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 230.627470][T10466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.627484][T10466] Call Trace: [ 230.627492][T10466] [ 230.627501][T10466] __dump_stack+0x1d/0x30 [ 230.627580][T10466] dump_stack_lvl+0xe8/0x140 [ 230.627638][T10466] dump_stack+0x15/0x1b [ 230.627653][T10466] should_fail_ex+0x265/0x280 [ 230.627685][T10466] should_fail+0xb/0x20 [ 230.627714][T10466] should_fail_usercopy+0x1a/0x20 [ 230.627773][T10466] _copy_to_user+0x20/0xa0 [ 230.627801][T10466] simple_read_from_buffer+0xb5/0x130 [ 230.627822][T10466] proc_fail_nth_read+0x10e/0x150 [ 230.627867][T10466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.627890][T10466] vfs_read+0x1a0/0x6f0 [ 230.627962][T10466] ? __rcu_read_unlock+0x4f/0x70 [ 230.627983][T10466] ? __fget_files+0x184/0x1c0 [ 230.628006][T10466] ksys_read+0xda/0x1a0 [ 230.628025][T10466] __x64_sys_read+0x40/0x50 [ 230.628062][T10466] x64_sys_call+0x27bc/0x2ff0 [ 230.628086][T10466] do_syscall_64+0xd2/0x200 [ 230.628121][T10466] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 230.628203][T10466] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.628232][T10466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.628252][T10466] RIP: 0033:0x7f90d422d57c [ 230.628267][T10466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.628288][T10466] RSP: 002b:00007f90d2897030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.628362][T10466] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422d57c [ 230.628428][T10466] RDX: 000000000000000f RSI: 00007f90d28970a0 RDI: 0000000000000005 [ 230.628439][T10466] RBP: 00007f90d2897090 R08: 0000000000000000 R09: 0000000000000000 [ 230.628450][T10466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.628461][T10466] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 230.628477][T10466] [ 230.629033][T10460] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.941695][T10460] Invalid ELF header magic: != ELF [ 230.952344][T10469] lo speed is unknown, defaulting to 1000 [ 231.003924][T10474] batadv_slave_0: entered promiscuous mode [ 231.019784][T10474] batadv_slave_0: left promiscuous mode [ 231.260454][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 231.260469][ T29] audit: type=1400 audit(1754161060.338:10851): avc: denied { create } for pid=10485 comm="syz.1.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 231.291583][ T29] audit: type=1400 audit(1754161060.358:10852): avc: denied { ioctl } for pid=10485 comm="syz.1.2287" path="socket:[29353]" dev="sockfs" ino=29353 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.317035][ T29] audit: type=1400 audit(1754161060.358:10853): avc: denied { write } for pid=10485 comm="syz.1.2287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 231.394051][T10496] batadv_slave_0: entered promiscuous mode [ 231.404380][ T29] audit: type=1400 audit(1754161060.478:10854): avc: denied { sqpoll } for pid=10497 comm="syz.1.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 231.424528][T10496] batadv_slave_0: left promiscuous mode [ 231.449168][T10501] FAULT_INJECTION: forcing a failure. [ 231.449168][T10501] name failslab, interval 1, probability 0, space 0, times 0 [ 231.461864][T10501] CPU: 1 UID: 0 PID: 10501 Comm: syz.1.2295 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 231.461892][T10501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 231.461904][T10501] Call Trace: [ 231.461912][T10501] [ 231.461920][T10501] __dump_stack+0x1d/0x30 [ 231.461941][T10501] dump_stack_lvl+0xe8/0x140 [ 231.461964][T10501] dump_stack+0x15/0x1b [ 231.461980][T10501] should_fail_ex+0x265/0x280 [ 231.462036][T10501] should_failslab+0x8c/0xb0 [ 231.462115][T10501] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 231.462144][T10501] ? security_set_bools+0x85/0x340 [ 231.462165][T10501] kmemdup_noprof+0x2b/0x70 [ 231.462189][T10501] security_set_bools+0x85/0x340 [ 231.462216][T10501] sel_commit_bools_write+0x1ea/0x270 [ 231.462241][T10501] vfs_writev+0x403/0x8b0 [ 231.462273][T10501] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 231.462374][T10501] ? mutex_lock+0xd/0x30 [ 231.462404][T10501] do_writev+0xe7/0x210 [ 231.462525][T10501] __x64_sys_writev+0x45/0x50 [ 231.462552][T10501] x64_sys_call+0x1e9a/0x2ff0 [ 231.462572][T10501] do_syscall_64+0xd2/0x200 [ 231.462594][T10501] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 231.462619][T10501] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 231.462687][T10501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.462706][T10501] RIP: 0033:0x7f99b282eb69 [ 231.462720][T10501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.462736][T10501] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 231.462754][T10501] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 231.462781][T10501] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000006 [ 231.462805][T10501] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 231.462856][T10501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.462867][T10501] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 231.462921][T10501] [ 231.696535][ T29] audit: type=1326 audit(1754161060.768:10855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.720222][ T29] audit: type=1326 audit(1754161060.768:10856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.809069][ T29] audit: type=1326 audit(1754161060.818:10857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.832843][ T29] audit: type=1326 audit(1754161060.818:10858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.856648][ T29] audit: type=1326 audit(1754161060.818:10859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.880218][ T29] audit: type=1326 audit(1754161060.828:10860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10504 comm="syz.5.2297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90d422eb69 code=0x7ffc0000 [ 231.932434][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.963514][T10524] lo speed is unknown, defaulting to 1000 [ 231.993209][T10533] batadv_slave_0: entered promiscuous mode [ 232.000474][T10533] batadv_slave_0: left promiscuous mode [ 232.108677][T10539] SELinux: Context Ü is not valid (left unmapped). [ 232.136256][T10541] loop3: detected capacity change from 0 to 1024 [ 232.148109][T10547] FAULT_INJECTION: forcing a failure. [ 232.148109][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 232.160968][T10547] CPU: 1 UID: 0 PID: 10547 Comm: syz.5.2314 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 232.161054][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.161074][T10547] Call Trace: [ 232.161080][T10547] [ 232.161088][T10547] __dump_stack+0x1d/0x30 [ 232.161108][T10547] dump_stack_lvl+0xe8/0x140 [ 232.161165][T10547] dump_stack+0x15/0x1b [ 232.161182][T10547] should_fail_ex+0x265/0x280 [ 232.161212][T10547] should_failslab+0x8c/0xb0 [ 232.161276][T10547] __kmalloc_noprof+0xa5/0x3e0 [ 232.161302][T10547] ? kobject_get_path+0x92/0x1c0 [ 232.161393][T10547] kobject_get_path+0x92/0x1c0 [ 232.161420][T10547] input_devices_seq_show+0x36/0x470 [ 232.161441][T10547] traverse+0x144/0x3a0 [ 232.161534][T10547] seq_read_iter+0x853/0x940 [ 232.161605][T10547] ? _parse_integer_limit+0x170/0x190 [ 232.161641][T10547] seq_read+0x1f7/0x240 [ 232.161685][T10547] ? __pfx_seq_read+0x10/0x10 [ 232.161714][T10547] proc_reg_read+0x128/0x1c0 [ 232.161871][T10547] ? __pfx_proc_reg_read+0x10/0x10 [ 232.161971][T10547] vfs_readv+0x3fb/0x690 [ 232.162025][T10547] __x64_sys_preadv+0xfd/0x1c0 [ 232.162083][T10547] x64_sys_call+0x282a/0x2ff0 [ 232.162104][T10547] do_syscall_64+0xd2/0x200 [ 232.162126][T10547] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.162178][T10547] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.162197][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.162296][T10547] RIP: 0033:0x7f90d422eb69 [ 232.162311][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.162327][T10547] RSP: 002b:00007f90d2897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 232.162377][T10547] RAX: ffffffffffffffda RBX: 00007f90d4455fa0 RCX: 00007f90d422eb69 [ 232.162464][T10547] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003 [ 232.162478][T10547] RBP: 00007f90d2897090 R08: 000000000000d215 R09: 0000000000000000 [ 232.162492][T10547] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 232.162505][T10547] R13: 0000000000000000 R14: 00007f90d4455fa0 R15: 00007ffccc4508a8 [ 232.162545][T10547] [ 232.162602][T10541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.200164][T10555] sd 0:0:1:0: device reset [ 232.396251][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.427543][T10560] batadv_slave_0: entered promiscuous mode [ 232.438819][T10560] batadv_slave_0: left promiscuous mode [ 232.481178][T10572] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2325'. [ 232.481874][T10575] loop3: detected capacity change from 0 to 512 [ 232.504155][T10575] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2326: bg 0: block 248: padding at end of block bitmap is not set [ 232.518761][T10575] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2326: Failed to acquire dquot type 1 [ 232.535813][T10580] loop1: detected capacity change from 0 to 512 [ 232.543409][T10575] EXT4-fs (loop3): 1 truncate cleaned up [ 232.547278][T10581] batadv_slave_0: entered promiscuous mode [ 232.550153][T10575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.563502][T10580] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2327: bg 0: block 248: padding at end of block bitmap is not set [ 232.567843][T10575] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.582212][T10581] batadv_slave_0: left promiscuous mode [ 232.597060][T10580] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2327: Failed to acquire dquot type 1 [ 232.609769][T10580] EXT4-fs (loop1): 1 truncate cleaned up [ 232.615885][T10580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.628512][T10580] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.643101][T10575] EXT4-fs (loop3): shut down requested (1) [ 232.663227][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.673158][T10580] EXT4-fs (loop1): shut down requested (1) [ 232.683644][T10580] FAULT_INJECTION: forcing a failure. [ 232.683644][T10580] name failslab, interval 1, probability 0, space 0, times 0 [ 232.696492][T10580] CPU: 0 UID: 0 PID: 10580 Comm: syz.1.2327 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 232.696596][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.696609][T10580] Call Trace: [ 232.696615][T10580] [ 232.696623][T10580] __dump_stack+0x1d/0x30 [ 232.696643][T10580] dump_stack_lvl+0xe8/0x140 [ 232.696662][T10580] dump_stack+0x15/0x1b [ 232.696716][T10580] should_fail_ex+0x265/0x280 [ 232.696744][T10580] should_failslab+0x8c/0xb0 [ 232.696765][T10580] kmem_cache_alloc_noprof+0x50/0x310 [ 232.696860][T10580] ? getname_flags+0x80/0x3b0 [ 232.696885][T10580] getname_flags+0x80/0x3b0 [ 232.696913][T10580] do_sys_openat2+0x60/0x110 [ 232.696941][T10580] __x64_sys_creat+0x65/0x90 [ 232.697034][T10580] x64_sys_call+0x2d94/0x2ff0 [ 232.697053][T10580] do_syscall_64+0xd2/0x200 [ 232.697073][T10580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 232.697094][T10580] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 232.697177][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.697196][T10580] RIP: 0033:0x7f99b282eb69 [ 232.697209][T10580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.697240][T10580] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 232.697393][T10580] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 232.697405][T10580] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000002c0 [ 232.697416][T10580] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 232.697427][T10580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.697438][T10580] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 232.697453][T10580] [ 232.899509][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.980196][T10609] batadv_slave_0: entered promiscuous mode [ 232.987262][T10609] batadv_slave_0: left promiscuous mode [ 233.005479][T10611] loop3: detected capacity change from 0 to 1024 [ 233.014147][T10611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.029936][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.081326][T10613] macsec1: entered promiscuous mode [ 233.086610][T10613] gretap0: entered promiscuous mode [ 233.091944][T10613] macsec1: entered allmulticast mode [ 233.097217][T10613] gretap0: entered allmulticast mode [ 233.103718][T10613] gretap0: left allmulticast mode [ 233.108969][T10613] gretap0: left promiscuous mode [ 233.130866][T10623] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2343'. [ 233.135002][T10628] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 233.146419][T10628] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 233.153851][T10628] vhci_hcd vhci_hcd.0: Device attached [ 233.171956][T10632] batadv_slave_0: entered promiscuous mode [ 233.184121][T10632] batadv_slave_0: left promiscuous mode [ 233.199556][T10629] vhci_hcd: connection closed [ 233.201255][ T8256] vhci_hcd: stop threads [ 233.210426][ T8256] vhci_hcd: release socket [ 233.214921][ T8256] vhci_hcd: disconnect device [ 233.232030][T10640] loop4: detected capacity change from 0 to 164 [ 233.240132][T10638] syz.3.2351 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 233.268469][ T3306] cgroup: fork rejected by pids controller in /syz3 [ 233.366661][T10655] batadv_slave_0: entered promiscuous mode [ 233.368064][T10655] batadv_slave_0: left promiscuous mode [ 233.414299][T10658] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2361'. [ 233.461050][T10664] FAULT_INJECTION: forcing a failure. [ 233.461050][T10664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.474312][T10664] CPU: 1 UID: 0 PID: 10664 Comm: syz.4.2363 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 233.474345][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.474434][T10664] Call Trace: [ 233.474440][T10664] [ 233.474449][T10664] __dump_stack+0x1d/0x30 [ 233.474477][T10664] dump_stack_lvl+0xe8/0x140 [ 233.474495][T10664] dump_stack+0x15/0x1b [ 233.474510][T10664] should_fail_ex+0x265/0x280 [ 233.474583][T10664] should_fail+0xb/0x20 [ 233.474610][T10664] should_fail_usercopy+0x1a/0x20 [ 233.474683][T10664] strncpy_from_user+0x25/0x230 [ 233.474776][T10664] ? kmem_cache_alloc_noprof+0x186/0x310 [ 233.474802][T10664] ? getname_flags+0x80/0x3b0 [ 233.474914][T10664] getname_flags+0xae/0x3b0 [ 233.475019][T10664] user_path_at+0x28/0x130 [ 233.475050][T10664] __x64_sys_umount+0x85/0xe0 [ 233.475086][T10664] x64_sys_call+0xdd2/0x2ff0 [ 233.475136][T10664] do_syscall_64+0xd2/0x200 [ 233.475236][T10664] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.475262][T10664] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.475282][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.475303][T10664] RIP: 0033:0x7fa6aef6eb69 [ 233.475366][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.475487][T10664] RSP: 002b:00007fa6ad5d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 233.475508][T10664] RAX: ffffffffffffffda RBX: 00007fa6af195fa0 RCX: 00007fa6aef6eb69 [ 233.475523][T10664] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 00002000000002c0 [ 233.475553][T10664] RBP: 00007fa6ad5d7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.475566][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.475580][T10664] R13: 0000000000000001 R14: 00007fa6af195fa0 R15: 00007fff036a9c48 [ 233.475596][T10664] [ 233.683568][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.699431][T10665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.724518][T10665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.740126][T10672] batadv_slave_0: entered promiscuous mode [ 233.748994][T10672] batadv_slave_0: left promiscuous mode [ 233.759704][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 233.771735][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.783086][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2368'. [ 233.851340][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.905831][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.921314][T10675] lo speed is unknown, defaulting to 1000 [ 233.928825][T10690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2373'. [ 234.363722][ T31] bond0 (unregistering): Released all slaves [ 234.377351][ T31] bond1 (unregistering): Released all slaves [ 234.386788][ T31] bond2 (unregistering): Released all slaves [ 234.396039][ T31] bond3 (unregistering): Released all slaves [ 234.413160][T10700] batadv_slave_0: entered promiscuous mode [ 234.421435][T10700] batadv_slave_0: left promiscuous mode [ 234.433072][T10675] chnl_net:caif_netlink_parms(): no params data found [ 234.456830][ T31] tipc: Disabling bearer [ 234.463601][ T31] tipc: Left network mode [ 234.511257][ T31] hsr_slave_0: left promiscuous mode [ 234.526762][ T31] hsr_slave_1: left promiscuous mode [ 234.534923][ T31] veth1_macvtap: left promiscuous mode [ 234.541210][ T31] veth0_macvtap: left promiscuous mode [ 234.551252][ T31] veth1_vlan: left promiscuous mode [ 234.609646][T10709] FAULT_INJECTION: forcing a failure. [ 234.609646][T10709] name failslab, interval 1, probability 0, space 0, times 0 [ 234.622368][T10709] CPU: 1 UID: 0 PID: 10709 Comm: syz.1.2377 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 234.622395][T10709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.622407][T10709] Call Trace: [ 234.622485][T10709] [ 234.622563][T10709] __dump_stack+0x1d/0x30 [ 234.622582][T10709] dump_stack_lvl+0xe8/0x140 [ 234.622599][T10709] dump_stack+0x15/0x1b [ 234.622616][T10709] should_fail_ex+0x265/0x280 [ 234.622651][T10709] should_failslab+0x8c/0xb0 [ 234.622728][T10709] kmem_cache_alloc_node_noprof+0x57/0x320 [ 234.622755][T10709] ? __alloc_skb+0x101/0x320 [ 234.622781][T10709] __alloc_skb+0x101/0x320 [ 234.622810][T10709] netlink_alloc_large_skb+0xba/0xf0 [ 234.622872][T10709] netlink_sendmsg+0x3cf/0x6b0 [ 234.622922][T10709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.622954][T10709] __sock_sendmsg+0x142/0x180 [ 234.622980][T10709] ____sys_sendmsg+0x31e/0x4e0 [ 234.623093][T10709] ___sys_sendmsg+0x17b/0x1d0 [ 234.623186][T10709] __x64_sys_sendmsg+0xd4/0x160 [ 234.623218][T10709] x64_sys_call+0x191e/0x2ff0 [ 234.623239][T10709] do_syscall_64+0xd2/0x200 [ 234.623291][T10709] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.623314][T10709] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 234.623332][T10709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.623378][T10709] RIP: 0033:0x7f99b282eb69 [ 234.623395][T10709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.623412][T10709] RSP: 002b:00007f99b0e97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.623429][T10709] RAX: ffffffffffffffda RBX: 00007f99b2a55fa0 RCX: 00007f99b282eb69 [ 234.623441][T10709] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 234.623452][T10709] RBP: 00007f99b0e97090 R08: 0000000000000000 R09: 0000000000000000 [ 234.623472][T10709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.623486][T10709] R13: 0000000000000000 R14: 00007f99b2a55fa0 R15: 00007ffd601f58e8 [ 234.623540][T10709] [ 234.832003][ T31] team0 (unregistering): Port device dummy0 removed [ 234.891781][T10713] loop4: detected capacity change from 0 to 164 [ 234.938020][T10725] ================================================================== [ 234.946122][T10725] BUG: KCSAN: data-race in mas_state_walk / mas_wr_store_entry [ 234.953668][T10725] [ 234.955982][T10725] write to 0xffff8881047d6f60 of 8 bytes by task 10721 on cpu 0: [ 234.963687][T10725] mas_wr_store_entry+0x1581/0x2b50 [ 234.968878][T10725] mas_store_prealloc+0x74d/0x9e0 [ 234.973886][T10725] commit_merge+0x6a5/0x730 [ 234.978371][T10725] vma_expand+0x220/0x320 [ 234.982684][T10725] vma_merge_new_range+0x296/0x310 [ 234.987780][T10725] mmap_region+0xa59/0x1630 [ 234.992271][T10725] do_mmap+0x9b3/0xbe0 [ 234.996334][T10725] vm_mmap_pgoff+0x17a/0x2e0 [ 235.000946][T10725] ksys_mmap_pgoff+0xc2/0x310 [ 235.005625][T10725] x64_sys_call+0x14a3/0x2ff0 [ 235.010287][T10725] do_syscall_64+0xd2/0x200 [ 235.014776][T10725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.020655][T10725] [ 235.022959][T10725] read to 0xffff8881047d6f60 of 8 bytes by task 10725 on cpu 1: [ 235.030582][T10725] mas_state_walk+0x2f5/0x650 [ 235.035244][T10725] mas_walk+0x60/0x150 [ 235.039295][T10725] lock_vma_under_rcu+0xa2/0x2f0 [ 235.044225][T10725] do_user_addr_fault+0x233/0x1090 [ 235.049332][T10725] exc_page_fault+0x62/0xa0 [ 235.053818][T10725] asm_exc_page_fault+0x26/0x30 [ 235.058651][T10725] [ 235.060955][T10725] value changed: 0x00007faa7bdacfff -> 0x00007faa7bd8bfff [ 235.068037][T10725] [ 235.070339][T10725] Reported by Kernel Concurrency Sanitizer on: [ 235.076471][T10725] CPU: 1 UID: 0 PID: 10725 Comm: syz.2.2382 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(voluntary) [ 235.088617][T10725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.098655][T10725] ================================================================== [ 235.113752][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.120988][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.128367][T10675] bridge_slave_0: entered allmulticast mode [ 235.135497][T10675] bridge_slave_0: entered promiscuous mode [ 235.150666][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.157744][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.165208][T10675] bridge_slave_1: entered allmulticast mode [ 235.171680][T10675] bridge_slave_1: entered promiscuous mode [ 235.189760][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.200070][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.218122][T10675] team0: Port device team_slave_0 added [ 235.224682][T10675] team0: Port device team_slave_1 added [ 235.239574][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.246523][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.272476][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.283561][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.290523][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.316518][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.340262][T10675] hsr_slave_0: entered promiscuous mode [ 235.346202][T10675] hsr_slave_1: entered promiscuous mode [ 235.351980][T10675] debugfs: 'hsr0' already exists in 'hsr' [ 235.357702][T10675] Cannot create hsr debugfs directory [ 235.571864][T10675] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 235.580324][T10675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 235.588703][T10675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 235.597393][T10675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 235.628984][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.640201][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.649433][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.656868][ T8255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.667420][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.674548][ T8255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.728331][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.780847][T10675] veth0_vlan: entered promiscuous mode [ 235.788340][T10675] veth1_vlan: entered promiscuous mode [ 235.802428][T10675] veth0_macvtap: entered promiscuous mode [ 235.809656][T10675] veth1_macvtap: entered promiscuous mode [ 235.819471][T10675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.830899][T10675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.841875][ T8256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.850639][ T8256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.859696][ T8256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.868446][ T8256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0